Approved changes feed: RSS · Atom

cpe:2.3:a:opensuse:canna:3.7p3:*:*:*:*:*:*:*

part: a version: 3.7p3 update: *

VendorOpensuse (3380e48e-e718-5685-8ad0-092ef58910e5)
ProductCanna (7a0f3672-d24f-5ef2-a31b-b7cb2022175d)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/canna purl2cpe 2026-06-01 10:15:36.049033
pkg:deb/ubuntu/canna purl2cpe 2026-06-01 10:15:36.049035
pkg:rpm/fedora/canna purl2cpe 2026-06-01 10:15:36.049036
pkg:rpm/opensuse/canna purl2cpe 2026-06-01 10:15:36.049038

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-21950 vulnerable 2026-06-03 14:46:14.602895 canna: unsafe handling of /tmp/.iroha_unix directory
MEDIUM (5.3)
A Improper Access Control vulnerability in the systemd service of cana in openSUSE Backports SLE-15-SP3, openSUSE Backports SLE-15-SP4 allows local users to hijack the UNIX domain socket This issue affects: openSUSE Backports SLE-15-SP3 canna versions prior to canna-3.7p3-bp153.2.3.1. openSUSE Backports SLE-15-SP4 canna versions prior to 3.7p3-bp154.3.3.1. openSUSE Factory was also affected. Instead of fixing the package it was deleted there.
Published: 2022-09-07T08:40:10.110Z
Updated: 2024-09-17T02:32:53.607Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.