CyberzSOC

Applicability
← Back to CVE-2015-3246

CVE-2015-3246

CVSS 5.1 In CISA KEV Red Hat

Every applicability statement published about this vulnerability, kept as each source wrote it rather than merged into one verdict. Where sources disagree, both positions are shown.

Does it affect your version?

A statement that names no version covers the whole product, which is not the same as your version falling inside a range. Orderings marked best effort come from schemes with no published comparison algorithm; exact ones follow a published specification.

What each source says

Red Hat CSAF/VEX
precedence 100 · revised 2026-08-27
1 affected 125 fixed
CVE List v5 (CNA container)
precedence 60 · revised 2026-08-27
1 affected

Precedence decides which claim wins when two sources describe the same product over the same version range. It is a property of the source, not of the claim, and changing it re-ranks the data without re-reading a single document.

Statements (127)

Product Status Versions Remediation Source
red_hat_enterprise_linux_5:libuser.src libuser.src as a component of Red Hat Enterprise Linux 5 affected no version stated vendor label: libuser.src no fix planned fix in another branch csaf_redhat
6Client-6.7.z:libuser-0:0.56.13-8.el6_7.i686 libuser-0:0.56.13-8.el6_7.i686 as a component of Red Hat Enterprise Linux Desktop (v. 6) fixed libuser-0:0.56.13-8.el6_7.i686 vendor fix → libuser-0:0.56.13-8.el6_7.i686 (RHSA-2015:1482) csaf_redhat
6ComputeNode-6.7.z:libuser-0:0.56.13-8.el6_7.i686 libuser-0:0.56.13-8.el6_7.i686 as a component of Red Hat Enterprise Linux HPC Node (v. 6) fixed libuser-0:0.56.13-8.el6_7.i686 vendor fix → libuser-0:0.56.13-8.el6_7.i686 (RHSA-2015:1482) csaf_redhat
6Server-6.7.z:libuser-0:0.56.13-8.el6_7.i686 libuser-0:0.56.13-8.el6_7.i686 as a component of Red Hat Enterprise Linux Server (v. 6) fixed libuser-0:0.56.13-8.el6_7.i686 vendor fix → libuser-0:0.56.13-8.el6_7.i686 (RHSA-2015:1482) csaf_redhat
6Workstation-6.7.z:libuser-0:0.56.13-8.el6_7.i686 libuser-0:0.56.13-8.el6_7.i686 as a component of Red Hat Enterprise Linux Workstation (v. 6) fixed libuser-0:0.56.13-8.el6_7.i686 vendor fix → libuser-0:0.56.13-8.el6_7.i686 (RHSA-2015:1482) csaf_redhat
6Server-6.7.z:libuser-0:0.56.13-8.el6_7.ppc libuser-0:0.56.13-8.el6_7.ppc as a component of Red Hat Enterprise Linux Server (v. 6) fixed libuser-0:0.56.13-8.el6_7.ppc vendor fix → libuser-0:0.56.13-8.el6_7.ppc (RHSA-2015:1482) csaf_redhat
6Server-6.7.z:libuser-0:0.56.13-8.el6_7.ppc64 libuser-0:0.56.13-8.el6_7.ppc64 as a component of Red Hat Enterprise Linux Server (v. 6) fixed libuser-0:0.56.13-8.el6_7.ppc64 vendor fix → libuser-0:0.56.13-8.el6_7.ppc64 (RHSA-2015:1482) csaf_redhat
6Server-6.7.z:libuser-0:0.56.13-8.el6_7.s390 libuser-0:0.56.13-8.el6_7.s390 as a component of Red Hat Enterprise Linux Server (v. 6) fixed libuser-0:0.56.13-8.el6_7.s390 vendor fix → libuser-0:0.56.13-8.el6_7.s390 (RHSA-2015:1482) csaf_redhat
6Server-6.7.z:libuser-0:0.56.13-8.el6_7.s390x libuser-0:0.56.13-8.el6_7.s390x as a component of Red Hat Enterprise Linux Server (v. 6) fixed libuser-0:0.56.13-8.el6_7.s390x vendor fix → libuser-0:0.56.13-8.el6_7.s390x (RHSA-2015:1482) csaf_redhat
6Client-6.7.z:libuser-0:0.56.13-8.el6_7.src libuser-0:0.56.13-8.el6_7.src as a component of Red Hat Enterprise Linux Desktop (v. 6) fixed libuser-0:0.56.13-8.el6_7.src vendor fix → libuser-0:0.56.13-8.el6_7.src (RHSA-2015:1482) csaf_redhat
6ComputeNode-6.7.z:libuser-0:0.56.13-8.el6_7.src libuser-0:0.56.13-8.el6_7.src as a component of Red Hat Enterprise Linux HPC Node (v. 6) fixed libuser-0:0.56.13-8.el6_7.src vendor fix → libuser-0:0.56.13-8.el6_7.src (RHSA-2015:1482) csaf_redhat
6Server-6.7.z:libuser-0:0.56.13-8.el6_7.src libuser-0:0.56.13-8.el6_7.src as a component of Red Hat Enterprise Linux Server (v. 6) fixed libuser-0:0.56.13-8.el6_7.src vendor fix → libuser-0:0.56.13-8.el6_7.src (RHSA-2015:1482) csaf_redhat
6Workstation-6.7.z:libuser-0:0.56.13-8.el6_7.src libuser-0:0.56.13-8.el6_7.src as a component of Red Hat Enterprise Linux Workstation (v. 6) fixed libuser-0:0.56.13-8.el6_7.src vendor fix → libuser-0:0.56.13-8.el6_7.src (RHSA-2015:1482) csaf_redhat
6Client-6.7.z:libuser-0:0.56.13-8.el6_7.x86_64 libuser-0:0.56.13-8.el6_7.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 6) fixed libuser-0:0.56.13-8.el6_7.x86_64 vendor fix → libuser-0:0.56.13-8.el6_7.x86_64 (RHSA-2015:1482) csaf_redhat
6ComputeNode-6.7.z:libuser-0:0.56.13-8.el6_7.x86_64 libuser-0:0.56.13-8.el6_7.x86_64 as a component of Red Hat Enterprise Linux HPC Node (v. 6) fixed libuser-0:0.56.13-8.el6_7.x86_64 vendor fix → libuser-0:0.56.13-8.el6_7.x86_64 (RHSA-2015:1482) csaf_redhat
6Server-6.7.z:libuser-0:0.56.13-8.el6_7.x86_64 libuser-0:0.56.13-8.el6_7.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6) fixed libuser-0:0.56.13-8.el6_7.x86_64 vendor fix → libuser-0:0.56.13-8.el6_7.x86_64 (RHSA-2015:1482) csaf_redhat
6Workstation-6.7.z:libuser-0:0.56.13-8.el6_7.x86_64 libuser-0:0.56.13-8.el6_7.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6) fixed libuser-0:0.56.13-8.el6_7.x86_64 vendor fix → libuser-0:0.56.13-8.el6_7.x86_64 (RHSA-2015:1482) csaf_redhat
7Server-LE-7.1.Z:libuser-0:0.60-7.ael7b_1.ppc64le libuser-0:0.60-7.ael7b_1.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7) fixed libuser-0:0.60-7.ael7b_1.ppc64le vendor fix → libuser-0:0.60-7.ael7b_1.ppc64le (RHSA-2015:1483) csaf_redhat
7Server-LE-7.1.Z:libuser-0:0.60-7.ael7b_1.src libuser-0:0.60-7.ael7b_1.src as a component of Red Hat Enterprise Linux Server (v. 7) fixed libuser-0:0.60-7.ael7b_1.src vendor fix → libuser-0:0.60-7.ael7b_1.src (RHSA-2015:1483) csaf_redhat
7Client-7.1.Z:libuser-0:0.60-7.el7_1.i686 libuser-0:0.60-7.el7_1.i686 as a component of Red Hat Enterprise Linux Client (v. 7) fixed libuser-0:0.60-7.el7_1.i686 vendor fix → libuser-0:0.60-7.el7_1.i686 (RHSA-2015:1483) csaf_redhat
7ComputeNode-7.1.Z:libuser-0:0.60-7.el7_1.i686 libuser-0:0.60-7.el7_1.i686 as a component of Red Hat Enterprise Linux ComputeNode (v. 7) fixed libuser-0:0.60-7.el7_1.i686 vendor fix → libuser-0:0.60-7.el7_1.i686 (RHSA-2015:1483) csaf_redhat
7Server-7.1.Z:libuser-0:0.60-7.el7_1.i686 libuser-0:0.60-7.el7_1.i686 as a component of Red Hat Enterprise Linux Server (v. 7) fixed libuser-0:0.60-7.el7_1.i686 vendor fix → libuser-0:0.60-7.el7_1.i686 (RHSA-2015:1483) csaf_redhat
7Workstation-7.1.Z:libuser-0:0.60-7.el7_1.i686 libuser-0:0.60-7.el7_1.i686 as a component of Red Hat Enterprise Linux Workstation (v. 7) fixed libuser-0:0.60-7.el7_1.i686 vendor fix → libuser-0:0.60-7.el7_1.i686 (RHSA-2015:1483) csaf_redhat
7Server-7.1.Z:libuser-0:0.60-7.el7_1.ppc libuser-0:0.60-7.el7_1.ppc as a component of Red Hat Enterprise Linux Server (v. 7) fixed libuser-0:0.60-7.el7_1.ppc vendor fix → libuser-0:0.60-7.el7_1.ppc (RHSA-2015:1483) csaf_redhat
7Server-7.1.Z:libuser-0:0.60-7.el7_1.ppc64 libuser-0:0.60-7.el7_1.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7) fixed libuser-0:0.60-7.el7_1.ppc64 vendor fix → libuser-0:0.60-7.el7_1.ppc64 (RHSA-2015:1483) csaf_redhat
7Server-7.1.Z:libuser-0:0.60-7.el7_1.s390 libuser-0:0.60-7.el7_1.s390 as a component of Red Hat Enterprise Linux Server (v. 7) fixed libuser-0:0.60-7.el7_1.s390 vendor fix → libuser-0:0.60-7.el7_1.s390 (RHSA-2015:1483) csaf_redhat
7Server-7.1.Z:libuser-0:0.60-7.el7_1.s390x libuser-0:0.60-7.el7_1.s390x as a component of Red Hat Enterprise Linux Server (v. 7) fixed libuser-0:0.60-7.el7_1.s390x vendor fix → libuser-0:0.60-7.el7_1.s390x (RHSA-2015:1483) csaf_redhat
7Client-7.1.Z:libuser-0:0.60-7.el7_1.src libuser-0:0.60-7.el7_1.src as a component of Red Hat Enterprise Linux Client (v. 7) fixed libuser-0:0.60-7.el7_1.src vendor fix → libuser-0:0.60-7.el7_1.src (RHSA-2015:1483) csaf_redhat
7ComputeNode-7.1.Z:libuser-0:0.60-7.el7_1.src libuser-0:0.60-7.el7_1.src as a component of Red Hat Enterprise Linux ComputeNode (v. 7) fixed libuser-0:0.60-7.el7_1.src vendor fix → libuser-0:0.60-7.el7_1.src (RHSA-2015:1483) csaf_redhat
7Server-7.1.Z:libuser-0:0.60-7.el7_1.src libuser-0:0.60-7.el7_1.src as a component of Red Hat Enterprise Linux Server (v. 7) fixed libuser-0:0.60-7.el7_1.src vendor fix → libuser-0:0.60-7.el7_1.src (RHSA-2015:1483) csaf_redhat
7Workstation-7.1.Z:libuser-0:0.60-7.el7_1.src libuser-0:0.60-7.el7_1.src as a component of Red Hat Enterprise Linux Workstation (v. 7) fixed libuser-0:0.60-7.el7_1.src vendor fix → libuser-0:0.60-7.el7_1.src (RHSA-2015:1483) csaf_redhat
7Client-7.1.Z:libuser-0:0.60-7.el7_1.x86_64 libuser-0:0.60-7.el7_1.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7) fixed libuser-0:0.60-7.el7_1.x86_64 vendor fix → libuser-0:0.60-7.el7_1.x86_64 (RHSA-2015:1483) csaf_redhat
7ComputeNode-7.1.Z:libuser-0:0.60-7.el7_1.x86_64 libuser-0:0.60-7.el7_1.x86_64 as a component of Red Hat Enterprise Linux ComputeNode (v. 7) fixed libuser-0:0.60-7.el7_1.x86_64 vendor fix → libuser-0:0.60-7.el7_1.x86_64 (RHSA-2015:1483) csaf_redhat
7Server-7.1.Z:libuser-0:0.60-7.el7_1.x86_64 libuser-0:0.60-7.el7_1.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7) fixed libuser-0:0.60-7.el7_1.x86_64 vendor fix → libuser-0:0.60-7.el7_1.x86_64 (RHSA-2015:1483) csaf_redhat
7Workstation-7.1.Z:libuser-0:0.60-7.el7_1.x86_64 libuser-0:0.60-7.el7_1.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7) fixed libuser-0:0.60-7.el7_1.x86_64 vendor fix → libuser-0:0.60-7.el7_1.x86_64 (RHSA-2015:1483) csaf_redhat
6Client-6.7.z:libuser-debuginfo-0:0.56.13-8.el6_7.i686 libuser-debuginfo-0:0.56.13-8.el6_7.i686 as a component of Red Hat Enterprise Linux Desktop (v. 6) fixed libuser-debuginfo-0:0.56.13-8.el6_7.i686 vendor fix → libuser-debuginfo-0:0.56.13-8.el6_7.i686 (RHSA-2015:1482) csaf_redhat
6Client-optional-6.7.z:libuser-debuginfo-0:0.56.13-8.el6_7.i686 libuser-debuginfo-0:0.56.13-8.el6_7.i686 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6) fixed libuser-debuginfo-0:0.56.13-8.el6_7.i686 vendor fix → libuser-debuginfo-0:0.56.13-8.el6_7.i686 (RHSA-2015:1482) csaf_redhat
6ComputeNode-6.7.z:libuser-debuginfo-0:0.56.13-8.el6_7.i686 libuser-debuginfo-0:0.56.13-8.el6_7.i686 as a component of Red Hat Enterprise Linux HPC Node (v. 6) fixed libuser-debuginfo-0:0.56.13-8.el6_7.i686 vendor fix → libuser-debuginfo-0:0.56.13-8.el6_7.i686 (RHSA-2015:1482) csaf_redhat
6ComputeNode-optional-6.7.z:libuser-debuginfo-0:0.56.13-8.el6_7.i686 libuser-debuginfo-0:0.56.13-8.el6_7.i686 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6) fixed libuser-debuginfo-0:0.56.13-8.el6_7.i686 vendor fix → libuser-debuginfo-0:0.56.13-8.el6_7.i686 (RHSA-2015:1482) csaf_redhat
6Server-6.7.z:libuser-debuginfo-0:0.56.13-8.el6_7.i686 libuser-debuginfo-0:0.56.13-8.el6_7.i686 as a component of Red Hat Enterprise Linux Server (v. 6) fixed libuser-debuginfo-0:0.56.13-8.el6_7.i686 vendor fix → libuser-debuginfo-0:0.56.13-8.el6_7.i686 (RHSA-2015:1482) csaf_redhat
6Server-optional-6.7.z:libuser-debuginfo-0:0.56.13-8.el6_7.i686 libuser-debuginfo-0:0.56.13-8.el6_7.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 6) fixed libuser-debuginfo-0:0.56.13-8.el6_7.i686 vendor fix → libuser-debuginfo-0:0.56.13-8.el6_7.i686 (RHSA-2015:1482) csaf_redhat
6Workstation-6.7.z:libuser-debuginfo-0:0.56.13-8.el6_7.i686 libuser-debuginfo-0:0.56.13-8.el6_7.i686 as a component of Red Hat Enterprise Linux Workstation (v. 6) fixed libuser-debuginfo-0:0.56.13-8.el6_7.i686 vendor fix → libuser-debuginfo-0:0.56.13-8.el6_7.i686 (RHSA-2015:1482) csaf_redhat
6Workstation-optional-6.7.z:libuser-debuginfo-0:0.56.13-8.el6_7.i686 libuser-debuginfo-0:0.56.13-8.el6_7.i686 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6) fixed libuser-debuginfo-0:0.56.13-8.el6_7.i686 vendor fix → libuser-debuginfo-0:0.56.13-8.el6_7.i686 (RHSA-2015:1482) csaf_redhat
6Server-6.7.z:libuser-debuginfo-0:0.56.13-8.el6_7.ppc libuser-debuginfo-0:0.56.13-8.el6_7.ppc as a component of Red Hat Enterprise Linux Server (v. 6) fixed libuser-debuginfo-0:0.56.13-8.el6_7.ppc vendor fix → libuser-debuginfo-0:0.56.13-8.el6_7.ppc (RHSA-2015:1482) csaf_redhat
6Server-optional-6.7.z:libuser-debuginfo-0:0.56.13-8.el6_7.ppc libuser-debuginfo-0:0.56.13-8.el6_7.ppc as a component of Red Hat Enterprise Linux Server Optional (v. 6) fixed libuser-debuginfo-0:0.56.13-8.el6_7.ppc vendor fix → libuser-debuginfo-0:0.56.13-8.el6_7.ppc (RHSA-2015:1482) csaf_redhat
6Server-6.7.z:libuser-debuginfo-0:0.56.13-8.el6_7.ppc64 libuser-debuginfo-0:0.56.13-8.el6_7.ppc64 as a component of Red Hat Enterprise Linux Server (v. 6) fixed libuser-debuginfo-0:0.56.13-8.el6_7.ppc64 vendor fix → libuser-debuginfo-0:0.56.13-8.el6_7.ppc64 (RHSA-2015:1482) csaf_redhat
6Server-optional-6.7.z:libuser-debuginfo-0:0.56.13-8.el6_7.ppc64 libuser-debuginfo-0:0.56.13-8.el6_7.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 6) fixed libuser-debuginfo-0:0.56.13-8.el6_7.ppc64 vendor fix → libuser-debuginfo-0:0.56.13-8.el6_7.ppc64 (RHSA-2015:1482) csaf_redhat
6Server-6.7.z:libuser-debuginfo-0:0.56.13-8.el6_7.s390 libuser-debuginfo-0:0.56.13-8.el6_7.s390 as a component of Red Hat Enterprise Linux Server (v. 6) fixed libuser-debuginfo-0:0.56.13-8.el6_7.s390 vendor fix → libuser-debuginfo-0:0.56.13-8.el6_7.s390 (RHSA-2015:1482) csaf_redhat
6Server-optional-6.7.z:libuser-debuginfo-0:0.56.13-8.el6_7.s390 libuser-debuginfo-0:0.56.13-8.el6_7.s390 as a component of Red Hat Enterprise Linux Server Optional (v. 6) fixed libuser-debuginfo-0:0.56.13-8.el6_7.s390 vendor fix → libuser-debuginfo-0:0.56.13-8.el6_7.s390 (RHSA-2015:1482) csaf_redhat
6Server-6.7.z:libuser-debuginfo-0:0.56.13-8.el6_7.s390x libuser-debuginfo-0:0.56.13-8.el6_7.s390x as a component of Red Hat Enterprise Linux Server (v. 6) fixed libuser-debuginfo-0:0.56.13-8.el6_7.s390x vendor fix → libuser-debuginfo-0:0.56.13-8.el6_7.s390x (RHSA-2015:1482) csaf_redhat
6Server-optional-6.7.z:libuser-debuginfo-0:0.56.13-8.el6_7.s390x libuser-debuginfo-0:0.56.13-8.el6_7.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 6) fixed libuser-debuginfo-0:0.56.13-8.el6_7.s390x vendor fix → libuser-debuginfo-0:0.56.13-8.el6_7.s390x (RHSA-2015:1482) csaf_redhat
6Client-6.7.z:libuser-debuginfo-0:0.56.13-8.el6_7.x86_64 libuser-debuginfo-0:0.56.13-8.el6_7.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 6) fixed libuser-debuginfo-0:0.56.13-8.el6_7.x86_64 vendor fix → libuser-debuginfo-0:0.56.13-8.el6_7.x86_64 (RHSA-2015:1482) csaf_redhat
6Client-optional-6.7.z:libuser-debuginfo-0:0.56.13-8.el6_7.x86_64 libuser-debuginfo-0:0.56.13-8.el6_7.x86_64 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6) fixed libuser-debuginfo-0:0.56.13-8.el6_7.x86_64 vendor fix → libuser-debuginfo-0:0.56.13-8.el6_7.x86_64 (RHSA-2015:1482) csaf_redhat
6ComputeNode-6.7.z:libuser-debuginfo-0:0.56.13-8.el6_7.x86_64 libuser-debuginfo-0:0.56.13-8.el6_7.x86_64 as a component of Red Hat Enterprise Linux HPC Node (v. 6) fixed libuser-debuginfo-0:0.56.13-8.el6_7.x86_64 vendor fix → libuser-debuginfo-0:0.56.13-8.el6_7.x86_64 (RHSA-2015:1482) csaf_redhat
6ComputeNode-optional-6.7.z:libuser-debuginfo-0:0.56.13-8.el6_7.x86_64 libuser-debuginfo-0:0.56.13-8.el6_7.x86_64 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6) fixed libuser-debuginfo-0:0.56.13-8.el6_7.x86_64 vendor fix → libuser-debuginfo-0:0.56.13-8.el6_7.x86_64 (RHSA-2015:1482) csaf_redhat
6Server-6.7.z:libuser-debuginfo-0:0.56.13-8.el6_7.x86_64 libuser-debuginfo-0:0.56.13-8.el6_7.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6) fixed libuser-debuginfo-0:0.56.13-8.el6_7.x86_64 vendor fix → libuser-debuginfo-0:0.56.13-8.el6_7.x86_64 (RHSA-2015:1482) csaf_redhat
6Server-optional-6.7.z:libuser-debuginfo-0:0.56.13-8.el6_7.x86_64 libuser-debuginfo-0:0.56.13-8.el6_7.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 6) fixed libuser-debuginfo-0:0.56.13-8.el6_7.x86_64 vendor fix → libuser-debuginfo-0:0.56.13-8.el6_7.x86_64 (RHSA-2015:1482) csaf_redhat
6Workstation-6.7.z:libuser-debuginfo-0:0.56.13-8.el6_7.x86_64 libuser-debuginfo-0:0.56.13-8.el6_7.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6) fixed libuser-debuginfo-0:0.56.13-8.el6_7.x86_64 vendor fix → libuser-debuginfo-0:0.56.13-8.el6_7.x86_64 (RHSA-2015:1482) csaf_redhat
6Workstation-optional-6.7.z:libuser-debuginfo-0:0.56.13-8.el6_7.x86_64 libuser-debuginfo-0:0.56.13-8.el6_7.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6) fixed libuser-debuginfo-0:0.56.13-8.el6_7.x86_64 vendor fix → libuser-debuginfo-0:0.56.13-8.el6_7.x86_64 (RHSA-2015:1482) csaf_redhat
7Server-LE-7.1.Z:libuser-debuginfo-0:0.60-7.ael7b_1.ppc64le libuser-debuginfo-0:0.60-7.ael7b_1.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7) fixed libuser-debuginfo-0:0.60-7.ael7b_1.ppc64le vendor fix → libuser-debuginfo-0:0.60-7.ael7b_1.ppc64le (RHSA-2015:1483) csaf_redhat
page 1 of 3 next →

A claim with no version range is shown as written rather than expanded: a government catalog naming only a vendor and product is a real statement at zero granularity, and inventing bounds for it would put precision in the record that the source never offered.