Package Instance
Lookup for vulnerable packages by Package URL.
GET /api/packages/1037003?format=api
{ "url": "http://public2.vulnerablecode.io/api/packages/1037003?format=api", "purl": "pkg:deb/debian/rsync@3.1.2-1%2Bdeb9u2", "type": "deb", "namespace": "debian", "name": "rsync", "version": "3.1.2-1+deb9u2", "qualifiers": {}, "subpath": "", "is_vulnerable": true, "next_non_vulnerable_version": "3.2.7-1+deb12u4", "latest_non_vulnerable_version": "3.2.7-1+deb12u4", "affected_by_vulnerabilities": [ { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/49844?format=api", "vulnerability_id": "VCID-1dp2-jcqh-7ket", "summary": "Multiple vulnerabilities have been found in rsync, the worst of\n which could allow remote attackers to bypass access restrictions.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-17434.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.8", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-17434.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2017-17434", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.01156", "scoring_system": "epss", "scoring_elements": "0.7849", "published_at": "2026-04-01T12:55:00Z" }, { "value": "0.01156", "scoring_system": "epss", "scoring_elements": "0.78568", "published_at": "2026-04-18T12:55:00Z" }, { "value": "0.01156", "scoring_system": "epss", "scoring_elements": "0.78542", "published_at": "2026-04-09T12:55:00Z" }, { "value": "0.01156", "scoring_system": "epss", "scoring_elements": "0.78567", "published_at": "2026-04-11T12:55:00Z" }, { "value": "0.01156", "scoring_system": "epss", "scoring_elements": "0.78549", "published_at": "2026-04-12T12:55:00Z" }, { "value": "0.01156", "scoring_system": "epss", "scoring_elements": "0.78541", "published_at": "2026-04-13T12:55:00Z" }, { "value": "0.01156", "scoring_system": "epss", "scoring_elements": "0.78569", "published_at": "2026-04-16T12:55:00Z" }, { "value": "0.01156", "scoring_system": "epss", "scoring_elements": "0.78496", "published_at": "2026-04-02T12:55:00Z" }, { "value": "0.01156", "scoring_system": "epss", "scoring_elements": "0.78527", "published_at": "2026-04-04T12:55:00Z" }, { "value": "0.01156", "scoring_system": "epss", "scoring_elements": "0.7851", "published_at": "2026-04-07T12:55:00Z" }, { "value": "0.01156", "scoring_system": "epss", "scoring_elements": "0.78537", "published_at": "2026-04-08T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2017-17434" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16548", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16548" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17433", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17433" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17434", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17434" }, { "reference_url": "http://security.cucumberlinux.com/security/details.php?id=170", "reference_id": "", "reference_type": "", "scores": [], "url": "http://security.cucumberlinux.com/security/details.php?id=170" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.9", "scoring_system": "cvssv2", "scoring_elements": "AV:N/AC:M/Au:S/C:P/I:P/A:N" }, { "value": "5.4", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://git.samba.org/?p=rsync.git%3Ba=commit%3Bh=5509597decdbd7b91994210f700329d8a35e70a1", "reference_id": "", "reference_type": "", "scores": [], "url": "https://git.samba.org/?p=rsync.git%3Ba=commit%3Bh=5509597decdbd7b91994210f700329d8a35e70a1" }, { "reference_url": "https://git.samba.org/?p=rsync.git%3Ba=commit%3Bh=70aeb5fddd1b2f8e143276f8d5a085db16c593b9", "reference_id": "", "reference_type": "", "scores": [], "url": "https://git.samba.org/?p=rsync.git%3Ba=commit%3Bh=70aeb5fddd1b2f8e143276f8d5a085db16c593b9" }, { "reference_url": "https://lists.debian.org/debian-lts-announce/2017/12/msg00020.html", "reference_id": "", "reference_type": "", "scores": [], "url": "https://lists.debian.org/debian-lts-announce/2017/12/msg00020.html" }, { "reference_url": "https://www.debian.org/security/2017/dsa-4068", "reference_id": "", "reference_type": "", "scores": [], "url": "https://www.debian.org/security/2017/dsa-4068" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1522875", "reference_id": "1522875", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1522875" }, { "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=883665", "reference_id": "883665", "reference_type": "", "scores": [], "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=883665" }, { "reference_url": "https://security.archlinux.org/ASA-201801-21", "reference_id": "ASA-201801-21", "reference_type": "", "scores": [], "url": "https://security.archlinux.org/ASA-201801-21" }, { "reference_url": "https://security.archlinux.org/AVG-542", "reference_id": "AVG-542", "reference_type": "", "scores": [ { "value": "Critical", "scoring_system": "archlinux", "scoring_elements": "" } ], "url": "https://security.archlinux.org/AVG-542" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:samba:rsync:*:*:*:*:*:*:*:*", "reference_id": "cpe:2.3:a:samba:rsync:*:*:*:*:*:*:*:*", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:samba:rsync:*:*:*:*:*:*:*:*" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*", "reference_id": "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*", "reference_id": "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2017-17434", "reference_id": "CVE-2017-17434", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv2", "scoring_elements": "AV:N/AC:L/Au:N/C:P/I:P/A:P" }, { "value": "9.8", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-17434" }, { "reference_url": "https://security.gentoo.org/glsa/201801-16", "reference_id": "GLSA-201801-16", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/201801-16" }, { "reference_url": "https://usn.ubuntu.com/3506-1/", "reference_id": "USN-3506-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/3506-1/" }, { "reference_url": "https://usn.ubuntu.com/3506-2/", "reference_id": "USN-3506-2", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/3506-2/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/1050469?format=api", "purl": "pkg:deb/debian/rsync@3.1.3-6", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-472y-7aza-j7c4" }, { "vulnerability": "VCID-78yq-gu4t-rke9" }, { "vulnerability": "VCID-9d7g-bby6-8fb3" }, { "vulnerability": "VCID-c1ec-hvuv-ckgk" }, { "vulnerability": "VCID-q576-uw5g-8kh3" }, { "vulnerability": "VCID-y5ep-xtwr-ckg6" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/rsync@3.1.3-6" } ], "aliases": [ "CVE-2017-17434" ], "risk_score": 4.5, "exploitability": "0.5", "weighted_severity": "9.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-1dp2-jcqh-7ket" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/49842?format=api", "vulnerability_id": "VCID-1snq-bkw3-3kff", "summary": "Multiple vulnerabilities have been found in rsync, the worst of\n which could allow remote attackers to bypass access restrictions.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-16548.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-16548.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2017-16548", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.02941", "scoring_system": "epss", "scoring_elements": "0.86372", "published_at": "2026-04-01T12:55:00Z" }, { "value": "0.02941", "scoring_system": "epss", "scoring_elements": "0.86459", "published_at": "2026-04-18T12:55:00Z" }, { "value": "0.02941", "scoring_system": "epss", "scoring_elements": "0.86445", "published_at": "2026-04-11T12:55:00Z" }, { "value": "0.02941", "scoring_system": "epss", "scoring_elements": "0.86443", "published_at": "2026-04-12T12:55:00Z" }, { "value": "0.02941", "scoring_system": "epss", "scoring_elements": "0.86438", "published_at": "2026-04-13T12:55:00Z" }, { "value": "0.02941", "scoring_system": "epss", "scoring_elements": "0.86454", "published_at": "2026-04-16T12:55:00Z" }, { "value": "0.02941", "scoring_system": "epss", "scoring_elements": "0.86383", "published_at": "2026-04-02T12:55:00Z" }, { "value": "0.02941", "scoring_system": "epss", "scoring_elements": "0.864", "published_at": "2026-04-04T12:55:00Z" }, { "value": "0.02941", "scoring_system": "epss", "scoring_elements": "0.86402", "published_at": "2026-04-07T12:55:00Z" }, { "value": "0.02941", "scoring_system": "epss", "scoring_elements": "0.8642", "published_at": "2026-04-08T12:55:00Z" }, { "value": "0.02941", "scoring_system": "epss", "scoring_elements": "0.8643", "published_at": "2026-04-09T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2017-16548" }, { "reference_url": "https://bugzilla.samba.org/show_bug.cgi?id=13112", "reference_id": "", "reference_type": "", "scores": [], "url": "https://bugzilla.samba.org/show_bug.cgi?id=13112" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16548", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16548" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17433", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17433" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17434", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17434" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "3.5", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://git.samba.org/rsync.git/?p=rsync.git%3Ba=commit%3Bh=47a63d90e71d3e19e0e96052bb8c6b9cb140ecc1", "reference_id": "", "reference_type": "", "scores": [], "url": "https://git.samba.org/rsync.git/?p=rsync.git%3Ba=commit%3Bh=47a63d90e71d3e19e0e96052bb8c6b9cb140ecc1" }, { "reference_url": "https://lists.debian.org/debian-lts-announce/2017/12/msg00020.html", "reference_id": "", "reference_type": "", "scores": [], "url": "https://lists.debian.org/debian-lts-announce/2017/12/msg00020.html" }, { "reference_url": "https://www.debian.org/security/2017/dsa-4068", "reference_id": "", "reference_type": "", "scores": [], "url": "https://www.debian.org/security/2017/dsa-4068" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1511411", "reference_id": "1511411", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1511411" }, { "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=880954", "reference_id": "880954", "reference_type": "", "scores": [], "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=880954" }, { "reference_url": "https://security.archlinux.org/ASA-201801-21", "reference_id": "ASA-201801-21", "reference_type": "", "scores": [], "url": "https://security.archlinux.org/ASA-201801-21" }, { "reference_url": "https://security.archlinux.org/AVG-542", "reference_id": "AVG-542", "reference_type": "", "scores": [ { "value": "Critical", "scoring_system": "archlinux", "scoring_elements": "" } ], "url": "https://security.archlinux.org/AVG-542" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:samba:rsync:*:*:*:*:*:*:*:*", "reference_id": "cpe:2.3:a:samba:rsync:*:*:*:*:*:*:*:*", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:samba:rsync:*:*:*:*:*:*:*:*" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:esm:*:*:*", "reference_id": "cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:esm:*:*:*", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:esm:*:*:*" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*", "reference_id": "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*", "reference_id": "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:canonical:ubuntu_linux:17.10:*:*:*:*:*:*:*", "reference_id": "cpe:2.3:o:canonical:ubuntu_linux:17.10:*:*:*:*:*:*:*", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:canonical:ubuntu_linux:17.10:*:*:*:*:*:*:*" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*", "reference_id": "cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*", "reference_id": "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*", "reference_id": "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2017-16548", "reference_id": "CVE-2017-16548", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv2", "scoring_elements": "AV:N/AC:L/Au:N/C:P/I:P/A:P" }, { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-16548" }, { "reference_url": "https://security.gentoo.org/glsa/201801-16", "reference_id": "GLSA-201801-16", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/201801-16" }, { "reference_url": "https://usn.ubuntu.com/3543-1/", "reference_id": "USN-3543-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/3543-1/" }, { "reference_url": "https://usn.ubuntu.com/3543-2/", "reference_id": "USN-3543-2", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/3543-2/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/1050469?format=api", "purl": "pkg:deb/debian/rsync@3.1.3-6", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-472y-7aza-j7c4" }, { "vulnerability": "VCID-78yq-gu4t-rke9" }, { "vulnerability": "VCID-9d7g-bby6-8fb3" }, { "vulnerability": "VCID-c1ec-hvuv-ckgk" }, { "vulnerability": "VCID-q576-uw5g-8kh3" }, { "vulnerability": "VCID-y5ep-xtwr-ckg6" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/rsync@3.1.3-6" } ], "aliases": [ "CVE-2017-16548" ], "risk_score": 4.5, "exploitability": "0.5", "weighted_severity": "9.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-1snq-bkw3-3kff" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/39083?format=api", "vulnerability_id": "VCID-472y-7aza-j7c4", "summary": "Multiple vulnerabilities have been discovered in rsync, the worst of which could lead to arbitrary code execution.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2024-12747.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.6", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2024-12747.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2024-12747", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00012", "scoring_system": "epss", "scoring_elements": "0.01852", "published_at": "2026-04-08T12:55:00Z" }, { "value": "0.00012", "scoring_system": "epss", "scoring_elements": "0.01833", "published_at": "2026-04-13T12:55:00Z" }, { "value": "0.00012", "scoring_system": "epss", "scoring_elements": "0.01838", "published_at": "2026-04-12T12:55:00Z" }, { "value": "0.00012", "scoring_system": "epss", "scoring_elements": "0.01853", "published_at": "2026-04-11T12:55:00Z" }, { "value": "0.00012", "scoring_system": "epss", "scoring_elements": "0.01835", "published_at": "2026-04-02T12:55:00Z" }, { "value": "0.00012", "scoring_system": "epss", "scoring_elements": "0.01846", "published_at": "2026-04-04T12:55:00Z" }, { "value": "0.00012", "scoring_system": "epss", "scoring_elements": "0.01848", "published_at": "2026-04-07T12:55:00Z" }, { "value": "0.00012", "scoring_system": "epss", "scoring_elements": "0.01866", "published_at": "2026-04-09T12:55:00Z" }, { "value": "0.00013", "scoring_system": "epss", "scoring_elements": "0.02049", "published_at": "2026-04-18T12:55:00Z" }, { "value": "0.00014", "scoring_system": "epss", "scoring_elements": "0.02646", "published_at": "2026-04-16T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2024-12747" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-12747", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-12747" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=2332968", "reference_id": "2332968", "reference_type": "", "scores": [ { "value": "5.6", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-01-14T18:38:10Z/" } ], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2332968" }, { "reference_url": "https://kb.cert.org/vuls/id/952657", "reference_id": "952657", "reference_type": "", "scores": [ { "value": "5.6", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-01-14T18:38:10Z/" } ], "url": "https://kb.cert.org/vuls/id/952657" }, { "reference_url": "https://security.archlinux.org/ASA-202501-1", "reference_id": "ASA-202501-1", "reference_type": "", "scores": [], "url": "https://security.archlinux.org/ASA-202501-1" }, { "reference_url": "https://security.archlinux.org/AVG-2858", "reference_id": "AVG-2858", "reference_type": "", "scores": [ { "value": "Critical", "scoring_system": "archlinux", "scoring_elements": "" } ], "url": "https://security.archlinux.org/AVG-2858" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/a:redhat:discovery:1.14::el9", "reference_id": "cpe:/a:redhat:discovery:1.14::el9", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/a:redhat:discovery:1.14::el9" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/a:redhat:enterprise_linux:9::appstream", "reference_id": "cpe:/a:redhat:enterprise_linux:9::appstream", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/a:redhat:enterprise_linux:9::appstream" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/a:redhat:openshift:4", "reference_id": "cpe:/a:redhat:openshift:4", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/a:redhat:openshift:4" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/o:redhat:enterprise_linux:10", "reference_id": "cpe:/o:redhat:enterprise_linux:10", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/o:redhat:enterprise_linux:10" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/o:redhat:enterprise_linux:10.0", "reference_id": "cpe:/o:redhat:enterprise_linux:10.0", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/o:redhat:enterprise_linux:10.0" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/o:redhat:enterprise_linux:6", "reference_id": "cpe:/o:redhat:enterprise_linux:6", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/o:redhat:enterprise_linux:6" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/o:redhat:enterprise_linux:7", "reference_id": "cpe:/o:redhat:enterprise_linux:7", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/o:redhat:enterprise_linux:7" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/o:redhat:enterprise_linux:8::baseos", "reference_id": "cpe:/o:redhat:enterprise_linux:8::baseos", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/o:redhat:enterprise_linux:8::baseos" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/o:redhat:enterprise_linux:9::baseos", "reference_id": "cpe:/o:redhat:enterprise_linux:9::baseos", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/o:redhat:enterprise_linux:9::baseos" }, { "reference_url": "https://access.redhat.com/security/cve/CVE-2024-12747", "reference_id": "CVE-2024-12747", "reference_type": "", "scores": [ { "value": "5.6", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-01-14T18:38:10Z/" } ], "url": "https://access.redhat.com/security/cve/CVE-2024-12747" }, { "reference_url": "https://security.gentoo.org/glsa/202501-01", "reference_id": "GLSA-202501-01", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/202501-01" }, { "reference_url": "https://access.redhat.com/errata/RHBA-2025:6470", "reference_id": "RHBA-2025:6470", "reference_type": "", "scores": [ { "value": "5.6", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-01-14T18:38:10Z/" } ], "url": "https://access.redhat.com/errata/RHBA-2025:6470" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:2600", "reference_id": "RHSA-2025:2600", "reference_type": "", "scores": [ { "value": "5.6", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-01-14T18:38:10Z/" } ], "url": "https://access.redhat.com/errata/RHSA-2025:2600" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:7050", "reference_id": "RHSA-2025:7050", "reference_type": "", "scores": [ { "value": "5.6", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-01-14T18:38:10Z/" } ], "url": "https://access.redhat.com/errata/RHSA-2025:7050" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:8385", "reference_id": "RHSA-2025:8385", "reference_type": "", "scores": [ { "value": "5.6", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-01-14T18:38:10Z/" } ], "url": "https://access.redhat.com/errata/RHSA-2025:8385" }, { "reference_url": "https://usn.ubuntu.com/7206-1/", "reference_id": "USN-7206-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/7206-1/" }, { "reference_url": "https://usn.ubuntu.com/7206-3/", "reference_id": "USN-7206-3", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/7206-3/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/994518?format=api", "purl": "pkg:deb/debian/rsync@3.2.7-1%2Bdeb12u4", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/rsync@3.2.7-1%252Bdeb12u4" } ], "aliases": [ "CVE-2024-12747" ], "risk_score": 4.5, "exploitability": "0.5", "weighted_severity": "9.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-472y-7aza-j7c4" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/33655?format=api", "vulnerability_id": "VCID-4g8w-n139-dfbn", "summary": "A vulnerability in rsync might allow remote attackers to execute\n arbitrary commands.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5764.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.3", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5764.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2018-5764", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.07674", "scoring_system": "epss", "scoring_elements": "0.91864", "published_at": "2026-04-01T12:55:00Z" }, { "value": "0.10069", "scoring_system": "epss", "scoring_elements": "0.931", "published_at": "2026-04-18T12:55:00Z" }, { "value": "0.10069", "scoring_system": "epss", "scoring_elements": "0.93078", "published_at": "2026-04-12T12:55:00Z" }, { "value": "0.10069", "scoring_system": "epss", "scoring_elements": "0.93095", "published_at": "2026-04-16T12:55:00Z" }, { "value": "0.10069", "scoring_system": "epss", "scoring_elements": "0.9306", "published_at": "2026-04-02T12:55:00Z" }, { "value": "0.10069", "scoring_system": "epss", "scoring_elements": "0.93063", "published_at": "2026-04-04T12:55:00Z" }, { "value": "0.10069", "scoring_system": "epss", "scoring_elements": "0.93062", "published_at": "2026-04-07T12:55:00Z" }, { "value": "0.10069", "scoring_system": "epss", "scoring_elements": "0.9307", "published_at": "2026-04-08T12:55:00Z" }, { "value": "0.10069", "scoring_system": "epss", "scoring_elements": "0.93075", "published_at": "2026-04-09T12:55:00Z" }, { "value": "0.10069", "scoring_system": "epss", "scoring_elements": "0.9308", "published_at": "2026-04-13T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2018-5764" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-5764", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-5764" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "3.3", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1536661", "reference_id": "1536661", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1536661" }, { "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=887588", "reference_id": "887588", "reference_type": "", "scores": [], "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=887588" }, { "reference_url": "https://security.archlinux.org/ASA-201801-21", "reference_id": "ASA-201801-21", "reference_type": "", "scores": [], "url": "https://security.archlinux.org/ASA-201801-21" }, { "reference_url": "https://security.archlinux.org/AVG-542", "reference_id": "AVG-542", "reference_type": "", "scores": [ { "value": "Critical", "scoring_system": "archlinux", "scoring_elements": "" } ], "url": "https://security.archlinux.org/AVG-542" }, { "reference_url": "https://security.gentoo.org/glsa/201805-04", "reference_id": "GLSA-201805-04", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/201805-04" }, { "reference_url": "https://usn.ubuntu.com/3543-1/", "reference_id": "USN-3543-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/3543-1/" }, { "reference_url": "https://usn.ubuntu.com/3543-2/", "reference_id": "USN-3543-2", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/3543-2/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/1050469?format=api", "purl": "pkg:deb/debian/rsync@3.1.3-6", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-472y-7aza-j7c4" }, { "vulnerability": "VCID-78yq-gu4t-rke9" }, { "vulnerability": "VCID-9d7g-bby6-8fb3" }, { "vulnerability": "VCID-c1ec-hvuv-ckgk" }, { "vulnerability": "VCID-q576-uw5g-8kh3" }, { "vulnerability": "VCID-y5ep-xtwr-ckg6" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/rsync@3.1.3-6" } ], "aliases": [ "CVE-2018-5764" ], "risk_score": 4.5, "exploitability": "0.5", "weighted_severity": "9.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-4g8w-n139-dfbn" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/34219?format=api", "vulnerability_id": "VCID-78yq-gu4t-rke9", "summary": "Multiple vulnerabilities have been discovered in rsync, the worst of which can lead to denial of service or information disclosure.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14387.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.1", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-14387.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2020-14387", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00142", "scoring_system": "epss", "scoring_elements": "0.34153", "published_at": "2026-04-01T12:55:00Z" }, { "value": "0.00142", "scoring_system": "epss", "scoring_elements": "0.34492", "published_at": "2026-04-02T12:55:00Z" }, { "value": "0.00142", "scoring_system": "epss", "scoring_elements": "0.34519", "published_at": "2026-04-04T12:55:00Z" }, { "value": "0.00142", "scoring_system": "epss", "scoring_elements": "0.34387", "published_at": "2026-04-07T12:55:00Z" }, { "value": "0.00142", "scoring_system": "epss", "scoring_elements": "0.34429", "published_at": "2026-04-08T12:55:00Z" }, { "value": "0.00142", "scoring_system": "epss", "scoring_elements": "0.34458", "published_at": "2026-04-09T12:55:00Z" }, { "value": "0.00142", "scoring_system": "epss", "scoring_elements": "0.3446", "published_at": "2026-04-11T12:55:00Z" }, { "value": "0.00142", "scoring_system": "epss", "scoring_elements": "0.34422", "published_at": "2026-04-12T12:55:00Z" }, { "value": "0.00142", "scoring_system": "epss", "scoring_elements": "0.34398", "published_at": "2026-04-13T12:55:00Z" }, { "value": "0.00142", "scoring_system": "epss", "scoring_elements": "0.34432", "published_at": "2026-04-16T12:55:00Z" }, { "value": "0.00142", "scoring_system": "epss", "scoring_elements": "0.34419", "published_at": "2026-04-18T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2020-14387" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14387", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14387" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1875549", "reference_id": "1875549", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1875549" }, { "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=969530", "reference_id": "969530", "reference_type": "", "scores": [], "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=969530" }, { "reference_url": "https://security.archlinux.org/ASA-202101-1", "reference_id": "ASA-202101-1", "reference_type": "", "scores": [], "url": "https://security.archlinux.org/ASA-202101-1" }, { "reference_url": "https://security.archlinux.org/AVG-1374", "reference_id": "AVG-1374", "reference_type": "", "scores": [ { "value": "High", "scoring_system": "archlinux", "scoring_elements": "" } ], "url": "https://security.archlinux.org/AVG-1374" }, { "reference_url": "https://security.gentoo.org/glsa/202405-22", "reference_id": "GLSA-202405-22", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/202405-22" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/994517?format=api", "purl": "pkg:deb/debian/rsync@3.2.3-4%2Bdeb11u1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-472y-7aza-j7c4" }, { "vulnerability": "VCID-4g3g-qmrg-tbf6" }, { "vulnerability": "VCID-9d7g-bby6-8fb3" }, { "vulnerability": "VCID-c1ec-hvuv-ckgk" }, { "vulnerability": "VCID-q576-uw5g-8kh3" }, { "vulnerability": "VCID-ua8q-v9qd-wqb5" }, { "vulnerability": "VCID-y5ep-xtwr-ckg6" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/rsync@3.2.3-4%252Bdeb11u1" } ], "aliases": [ "CVE-2020-14387" ], "risk_score": 4.1, "exploitability": "0.5", "weighted_severity": "8.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-78yq-gu4t-rke9" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/39078?format=api", "vulnerability_id": "VCID-9d7g-bby6-8fb3", "summary": "Multiple vulnerabilities have been discovered in rsync, the worst of which could lead to arbitrary code execution.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2024-12088.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2024-12088.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2024-12088", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.02887", "scoring_system": "epss", "scoring_elements": "0.86331", "published_at": "2026-04-18T12:55:00Z" }, { "value": "0.02887", "scoring_system": "epss", "scoring_elements": "0.86292", "published_at": "2026-04-08T12:55:00Z" }, { "value": "0.02887", "scoring_system": "epss", "scoring_elements": "0.86303", "published_at": "2026-04-09T12:55:00Z" }, { "value": "0.02887", "scoring_system": "epss", "scoring_elements": "0.86317", "published_at": "2026-04-11T12:55:00Z" }, { "value": "0.02887", "scoring_system": "epss", "scoring_elements": "0.86315", "published_at": "2026-04-12T12:55:00Z" }, { "value": "0.02887", "scoring_system": "epss", "scoring_elements": "0.86311", "published_at": "2026-04-13T12:55:00Z" }, { "value": "0.02887", "scoring_system": "epss", "scoring_elements": "0.86327", "published_at": "2026-04-16T12:55:00Z" }, { "value": "0.02887", "scoring_system": "epss", "scoring_elements": "0.86255", "published_at": "2026-04-02T12:55:00Z" }, { "value": "0.02887", "scoring_system": "epss", "scoring_elements": "0.86272", "published_at": "2026-04-04T12:55:00Z" }, { "value": "0.02887", "scoring_system": "epss", "scoring_elements": "0.86274", "published_at": "2026-04-07T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2024-12088" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-12088", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-12088" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=2330676", "reference_id": "2330676", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-02-26T14:13:08Z/" } ], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2330676" }, { "reference_url": "https://kb.cert.org/vuls/id/952657", "reference_id": "952657", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-02-26T14:13:08Z/" } ], "url": "https://kb.cert.org/vuls/id/952657" }, { "reference_url": "https://security.archlinux.org/ASA-202501-1", "reference_id": "ASA-202501-1", "reference_type": "", "scores": [], "url": "https://security.archlinux.org/ASA-202501-1" }, { "reference_url": "https://security.archlinux.org/AVG-2858", "reference_id": "AVG-2858", "reference_type": "", "scores": [ { "value": "Critical", "scoring_system": "archlinux", "scoring_elements": "" } ], "url": "https://security.archlinux.org/AVG-2858" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/a:redhat:discovery:1.14::el9", "reference_id": "cpe:/a:redhat:discovery:1.14::el9", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/a:redhat:discovery:1.14::el9" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/a:redhat:enterprise_linux:9::appstream", "reference_id": "cpe:/a:redhat:enterprise_linux:9::appstream", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/a:redhat:enterprise_linux:9::appstream" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/a:redhat:openshift:4", "reference_id": "cpe:/a:redhat:openshift:4", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/a:redhat:openshift:4" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/o:redhat:enterprise_linux:10", "reference_id": "cpe:/o:redhat:enterprise_linux:10", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/o:redhat:enterprise_linux:10" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/o:redhat:enterprise_linux:10.0", "reference_id": "cpe:/o:redhat:enterprise_linux:10.0", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/o:redhat:enterprise_linux:10.0" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/o:redhat:enterprise_linux:6", "reference_id": "cpe:/o:redhat:enterprise_linux:6", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/o:redhat:enterprise_linux:6" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/o:redhat:enterprise_linux:7", "reference_id": "cpe:/o:redhat:enterprise_linux:7", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/o:redhat:enterprise_linux:7" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/o:redhat:enterprise_linux:8::baseos", "reference_id": "cpe:/o:redhat:enterprise_linux:8::baseos", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/o:redhat:enterprise_linux:8::baseos" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/o:redhat:enterprise_linux:9::baseos", "reference_id": "cpe:/o:redhat:enterprise_linux:9::baseos", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/o:redhat:enterprise_linux:9::baseos" }, { "reference_url": "https://access.redhat.com/security/cve/CVE-2024-12088", "reference_id": "CVE-2024-12088", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-02-26T14:13:08Z/" } ], "url": "https://access.redhat.com/security/cve/CVE-2024-12088" }, { "reference_url": "https://security.gentoo.org/glsa/202501-01", "reference_id": "GLSA-202501-01", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/202501-01" }, { "reference_url": "https://access.redhat.com/errata/RHBA-2025:6470", "reference_id": "RHBA-2025:6470", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-02-26T14:13:08Z/" } ], "url": "https://access.redhat.com/errata/RHBA-2025:6470" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:2600", "reference_id": "RHSA-2025:2600", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-02-26T14:13:08Z/" } ], "url": "https://access.redhat.com/errata/RHSA-2025:2600" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:7050", "reference_id": "RHSA-2025:7050", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-02-26T14:13:08Z/" } ], "url": "https://access.redhat.com/errata/RHSA-2025:7050" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:8385", "reference_id": "RHSA-2025:8385", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-02-26T14:13:08Z/" } ], "url": "https://access.redhat.com/errata/RHSA-2025:8385" }, { "reference_url": "https://usn.ubuntu.com/7206-1/", "reference_id": "USN-7206-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/7206-1/" }, { "reference_url": "https://usn.ubuntu.com/7206-3/", "reference_id": "USN-7206-3", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/7206-3/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/994518?format=api", "purl": "pkg:deb/debian/rsync@3.2.7-1%2Bdeb12u4", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/rsync@3.2.7-1%252Bdeb12u4" } ], "aliases": [ "CVE-2024-12088" ], "risk_score": 4.5, "exploitability": "0.5", "weighted_severity": "9.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-9d7g-bby6-8fb3" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/39067?format=api", "vulnerability_id": "VCID-c1ec-hvuv-ckgk", "summary": "Multiple vulnerabilities have been discovered in rsync, the worst of which could lead to arbitrary code execution.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2024-12086.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:N/A:N" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2024-12086.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2024-12086", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00635", "scoring_system": "epss", "scoring_elements": "0.7037", "published_at": "2026-04-04T12:55:00Z" }, { "value": "0.00635", "scoring_system": "epss", "scoring_elements": "0.70353", "published_at": "2026-04-02T12:55:00Z" }, { "value": "0.00635", "scoring_system": "epss", "scoring_elements": "0.70349", "published_at": "2026-04-07T12:55:00Z" }, { "value": "0.00635", "scoring_system": "epss", "scoring_elements": "0.70394", "published_at": "2026-04-08T12:55:00Z" }, { "value": "0.00635", "scoring_system": "epss", "scoring_elements": "0.70409", "published_at": "2026-04-09T12:55:00Z" }, { "value": "0.00635", "scoring_system": "epss", "scoring_elements": "0.70433", "published_at": "2026-04-11T12:55:00Z" }, { "value": "0.00635", "scoring_system": "epss", "scoring_elements": "0.70417", "published_at": "2026-04-12T12:55:00Z" }, { "value": "0.00635", "scoring_system": "epss", "scoring_elements": "0.70403", "published_at": "2026-04-13T12:55:00Z" }, { "value": "0.00914", "scoring_system": "epss", "scoring_elements": "0.75914", "published_at": "2026-04-16T12:55:00Z" }, { "value": "0.00914", "scoring_system": "epss", "scoring_elements": "0.75917", "published_at": "2026-04-18T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2024-12086" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-12086", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-12086" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=2330577", "reference_id": "2330577", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-02-26T14:14:25Z/" } ], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2330577" }, { "reference_url": "https://kb.cert.org/vuls/id/952657", "reference_id": "952657", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-02-26T14:14:25Z/" } ], "url": "https://kb.cert.org/vuls/id/952657" }, { "reference_url": "https://security.archlinux.org/ASA-202501-1", "reference_id": "ASA-202501-1", "reference_type": "", "scores": [], "url": "https://security.archlinux.org/ASA-202501-1" }, { "reference_url": "https://security.archlinux.org/AVG-2858", "reference_id": "AVG-2858", "reference_type": "", "scores": [ { "value": "Critical", "scoring_system": "archlinux", "scoring_elements": "" } ], "url": "https://security.archlinux.org/AVG-2858" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/a:redhat:openshift:4", "reference_id": "cpe:/a:redhat:openshift:4", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/a:redhat:openshift:4" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/o:redhat:enterprise_linux:10", "reference_id": "cpe:/o:redhat:enterprise_linux:10", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/o:redhat:enterprise_linux:10" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/o:redhat:enterprise_linux:10.0", "reference_id": "cpe:/o:redhat:enterprise_linux:10.0", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/o:redhat:enterprise_linux:10.0" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/o:redhat:enterprise_linux:6", "reference_id": "cpe:/o:redhat:enterprise_linux:6", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/o:redhat:enterprise_linux:6" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/o:redhat:enterprise_linux:7", "reference_id": "cpe:/o:redhat:enterprise_linux:7", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/o:redhat:enterprise_linux:7" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/o:redhat:enterprise_linux:8", "reference_id": "cpe:/o:redhat:enterprise_linux:8", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/o:redhat:enterprise_linux:8" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/o:redhat:enterprise_linux:9", "reference_id": "cpe:/o:redhat:enterprise_linux:9", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/o:redhat:enterprise_linux:9" }, { "reference_url": "https://access.redhat.com/security/cve/CVE-2024-12086", "reference_id": "CVE-2024-12086", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-02-26T14:14:25Z/" } ], "url": "https://access.redhat.com/security/cve/CVE-2024-12086" }, { "reference_url": "https://security.gentoo.org/glsa/202501-01", "reference_id": "GLSA-202501-01", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/202501-01" }, { "reference_url": "https://access.redhat.com/errata/RHBA-2025:6470", "reference_id": "RHBA-2025:6470", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-02-26T14:14:25Z/" } ], "url": "https://access.redhat.com/errata/RHBA-2025:6470" }, { "reference_url": "https://usn.ubuntu.com/7206-1/", "reference_id": "USN-7206-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/7206-1/" }, { "reference_url": "https://usn.ubuntu.com/7206-3/", "reference_id": "USN-7206-3", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/7206-3/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/994518?format=api", "purl": "pkg:deb/debian/rsync@3.2.7-1%2Bdeb12u4", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/rsync@3.2.7-1%252Bdeb12u4" } ], "aliases": [ "CVE-2024-12086" ], "risk_score": 4.5, "exploitability": "0.5", "weighted_severity": "9.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-c1ec-hvuv-ckgk" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/56189?format=api", "vulnerability_id": "VCID-eyjp-7kks-jbfr", "summary": "Multiple vulnerabilities have been found in rsync, the worst of\n which could result in a Denial of Service condition.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9841.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9841.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2016-9841", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.13495", "scoring_system": "epss", "scoring_elements": "0.94234", "published_at": "2026-04-18T12:55:00Z" }, { "value": "0.13495", "scoring_system": "epss", "scoring_elements": "0.94204", "published_at": "2026-04-08T12:55:00Z" }, { "value": "0.13495", "scoring_system": "epss", "scoring_elements": "0.94208", "published_at": "2026-04-09T12:55:00Z" }, { "value": "0.13495", "scoring_system": "epss", "scoring_elements": "0.94213", "published_at": "2026-04-12T12:55:00Z" }, { "value": "0.13495", "scoring_system": "epss", "scoring_elements": "0.94214", "published_at": "2026-04-13T12:55:00Z" }, { "value": "0.13495", "scoring_system": "epss", "scoring_elements": "0.94229", "published_at": "2026-04-16T12:55:00Z" }, { "value": "0.20281", "scoring_system": "epss", "scoring_elements": "0.95479", "published_at": "2026-04-01T12:55:00Z" }, { "value": "0.20281", "scoring_system": "epss", "scoring_elements": "0.95488", "published_at": "2026-04-02T12:55:00Z" }, { "value": "0.20281", "scoring_system": "epss", "scoring_elements": "0.95494", "published_at": "2026-04-04T12:55:00Z" }, { "value": "0.20848", "scoring_system": "epss", "scoring_elements": "0.95599", "published_at": "2026-04-07T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2016-9841" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9841", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9841" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.6", "scoring_system": "cvssv2", "scoring_elements": "AV:N/AC:H/Au:S/C:P/I:P/A:P" }, { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1402346", "reference_id": "1402346", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1402346" }, { "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=847270", "reference_id": "847270", "reference_type": "", "scores": [], "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=847270" }, { "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=924509", "reference_id": "924509", "reference_type": "", "scores": [], "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=924509" }, { "reference_url": "https://security.gentoo.org/glsa/201701-56", "reference_id": "GLSA-201701-56", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/201701-56" }, { "reference_url": "https://security.gentoo.org/glsa/202007-54", "reference_id": "GLSA-202007-54", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/202007-54" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2017:1220", "reference_id": "RHSA-2017:1220", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2017:1220" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2017:1221", "reference_id": "RHSA-2017:1221", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2017:1221" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2017:1222", "reference_id": "RHSA-2017:1222", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2017:1222" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2017:2999", "reference_id": "RHSA-2017:2999", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2017:2999" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2017:3046", "reference_id": "RHSA-2017:3046", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2017:3046" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2017:3047", "reference_id": "RHSA-2017:3047", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2017:3047" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2017:3453", "reference_id": "RHSA-2017:3453", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2017:3453" }, { "reference_url": "https://usn.ubuntu.com/4246-1/", "reference_id": "USN-4246-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/4246-1/" }, { "reference_url": "https://usn.ubuntu.com/4292-1/", "reference_id": "USN-4292-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/4292-1/" }, { "reference_url": "https://usn.ubuntu.com/6736-1/", "reference_id": "USN-6736-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/6736-1/" }, { "reference_url": "https://usn.ubuntu.com/6736-2/", "reference_id": "USN-6736-2", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/6736-2/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/1050469?format=api", "purl": "pkg:deb/debian/rsync@3.1.3-6", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-472y-7aza-j7c4" }, { "vulnerability": "VCID-78yq-gu4t-rke9" }, { "vulnerability": "VCID-9d7g-bby6-8fb3" }, { "vulnerability": "VCID-c1ec-hvuv-ckgk" }, { "vulnerability": "VCID-q576-uw5g-8kh3" }, { "vulnerability": "VCID-y5ep-xtwr-ckg6" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/rsync@3.1.3-6" } ], "aliases": [ "CVE-2016-9841" ], "risk_score": 4.4, "exploitability": "0.5", "weighted_severity": "8.8", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-eyjp-7kks-jbfr" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/49843?format=api", "vulnerability_id": "VCID-h2jt-8ppk-nbh9", "summary": "Multiple vulnerabilities have been found in rsync, the worst of\n which could allow remote attackers to bypass access restrictions.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-17433.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.8", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-17433.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2017-17433", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.01555", "scoring_system": "epss", "scoring_elements": "0.81371", "published_at": "2026-04-01T12:55:00Z" }, { "value": "0.01555", "scoring_system": "epss", "scoring_elements": "0.81475", "published_at": "2026-04-18T12:55:00Z" }, { "value": "0.01555", "scoring_system": "epss", "scoring_elements": "0.81435", "published_at": "2026-04-09T12:55:00Z" }, { "value": "0.01555", "scoring_system": "epss", "scoring_elements": "0.81457", "published_at": "2026-04-11T12:55:00Z" }, { "value": "0.01555", "scoring_system": "epss", "scoring_elements": "0.81444", "published_at": "2026-04-12T12:55:00Z" }, { "value": "0.01555", "scoring_system": "epss", "scoring_elements": "0.81437", "published_at": "2026-04-13T12:55:00Z" }, { "value": "0.01555", "scoring_system": "epss", "scoring_elements": "0.81474", "published_at": "2026-04-16T12:55:00Z" }, { "value": "0.01555", "scoring_system": "epss", "scoring_elements": "0.8138", "published_at": "2026-04-02T12:55:00Z" }, { "value": "0.01555", "scoring_system": "epss", "scoring_elements": "0.81403", "published_at": "2026-04-04T12:55:00Z" }, { "value": "0.01555", "scoring_system": "epss", "scoring_elements": "0.81401", "published_at": "2026-04-07T12:55:00Z" }, { "value": "0.01555", "scoring_system": "epss", "scoring_elements": "0.8143", "published_at": "2026-04-08T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2017-17433" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1522874#c4", "reference_id": "", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1522874#c4" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16548", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16548" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17433", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17433" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17434", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17434" }, { "reference_url": "http://security.cucumberlinux.com/security/details.php?id=169", "reference_id": "", "reference_type": "", "scores": [], "url": "http://security.cucumberlinux.com/security/details.php?id=169" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.9", "scoring_system": "cvssv2", "scoring_elements": "AV:N/AC:M/Au:S/C:P/I:P/A:N" }, { "value": "5.4", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://git.samba.org/?p=rsync.git%3Ba=commit%3Bh=3e06d40029cfdce9d0f73d87cfd4edaf54be9c51", "reference_id": "", "reference_type": "", "scores": [], "url": "https://git.samba.org/?p=rsync.git%3Ba=commit%3Bh=3e06d40029cfdce9d0f73d87cfd4edaf54be9c51" }, { "reference_url": "https://lists.debian.org/debian-lts-announce/2017/12/msg00020.html", "reference_id": "", "reference_type": "", "scores": [], "url": "https://lists.debian.org/debian-lts-announce/2017/12/msg00020.html" }, { "reference_url": "https://www.debian.org/security/2017/dsa-4068", "reference_id": "", "reference_type": "", "scores": [], "url": "https://www.debian.org/security/2017/dsa-4068" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1522874", "reference_id": "1522874", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1522874" }, { "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=883667", "reference_id": "883667", "reference_type": "", "scores": [], "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=883667" }, { "reference_url": "https://security.archlinux.org/ASA-201801-21", "reference_id": "ASA-201801-21", "reference_type": "", "scores": [], "url": "https://security.archlinux.org/ASA-201801-21" }, { "reference_url": "https://security.archlinux.org/AVG-542", "reference_id": "AVG-542", "reference_type": "", "scores": [ { "value": "Critical", "scoring_system": "archlinux", "scoring_elements": "" } ], "url": "https://security.archlinux.org/AVG-542" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:samba:rsync:3.1.2:*:*:*:*:*:*:*", "reference_id": "cpe:2.3:a:samba:rsync:3.1.2:*:*:*:*:*:*:*", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:samba:rsync:3.1.2:*:*:*:*:*:*:*" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*", "reference_id": "cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*", "reference_id": "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*", "reference_id": "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2017-17433", "reference_id": "CVE-2017-17433", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv2", "scoring_elements": "AV:N/AC:M/Au:N/C:N/I:P/A:N" }, { "value": "3.7", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-17433" }, { "reference_url": "https://security.gentoo.org/glsa/201801-16", "reference_id": "GLSA-201801-16", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/201801-16" }, { "reference_url": "https://usn.ubuntu.com/3506-1/", "reference_id": "USN-3506-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/3506-1/" }, { "reference_url": "https://usn.ubuntu.com/3506-2/", "reference_id": "USN-3506-2", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/3506-2/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/1050469?format=api", "purl": "pkg:deb/debian/rsync@3.1.3-6", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-472y-7aza-j7c4" }, { "vulnerability": "VCID-78yq-gu4t-rke9" }, { "vulnerability": "VCID-9d7g-bby6-8fb3" }, { "vulnerability": "VCID-c1ec-hvuv-ckgk" }, { "vulnerability": "VCID-q576-uw5g-8kh3" }, { "vulnerability": "VCID-y5ep-xtwr-ckg6" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/rsync@3.1.3-6" } ], "aliases": [ "CVE-2017-17433" ], "risk_score": 4.5, "exploitability": "0.5", "weighted_severity": "9.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-h2jt-8ppk-nbh9" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/56190?format=api", "vulnerability_id": "VCID-m6xx-a91r-sbhu", "summary": "Multiple vulnerabilities have been found in rsync, the worst of\n which could result in a Denial of Service condition.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9842.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9842.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2016-9842", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.12133", "scoring_system": "epss", "scoring_elements": "0.93832", "published_at": "2026-04-16T12:55:00Z" }, { "value": "0.12133", "scoring_system": "epss", "scoring_elements": "0.93804", "published_at": "2026-04-09T12:55:00Z" }, { "value": "0.12133", "scoring_system": "epss", "scoring_elements": "0.9377", "published_at": "2026-04-01T12:55:00Z" }, { "value": "0.12133", "scoring_system": "epss", "scoring_elements": "0.93837", "published_at": "2026-04-18T12:55:00Z" }, { "value": "0.12133", "scoring_system": "epss", "scoring_elements": "0.93809", "published_at": "2026-04-13T12:55:00Z" }, { "value": "0.12133", "scoring_system": "epss", "scoring_elements": "0.93801", "published_at": "2026-04-08T12:55:00Z" }, { "value": "0.12133", "scoring_system": "epss", "scoring_elements": "0.93793", "published_at": "2026-04-07T12:55:00Z" }, { "value": "0.12133", "scoring_system": "epss", "scoring_elements": "0.93789", "published_at": "2026-04-04T12:55:00Z" }, { "value": "0.12133", "scoring_system": "epss", "scoring_elements": "0.93779", "published_at": "2026-04-02T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2016-9842" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9842", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9842" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.6", "scoring_system": "cvssv2", "scoring_elements": "AV:N/AC:H/Au:S/C:P/I:P/A:P" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1402348", "reference_id": "1402348", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-12-04T16:34:37Z/" } ], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1402348" }, { "reference_url": "http://www.openwall.com/lists/oss-security/2016/12/05/21", "reference_id": "21", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-12-04T16:34:37Z/" } ], "url": "http://www.openwall.com/lists/oss-security/2016/12/05/21" }, { "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=847274", "reference_id": "847274", "reference_type": "", "scores": [], "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=847274" }, { "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=924509", "reference_id": "924509", "reference_type": "", "scores": [], "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=924509" }, { "reference_url": "http://www.securityfocus.com/bid/95131", "reference_id": "95131", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-12-04T16:34:37Z/" } ], "url": "http://www.securityfocus.com/bid/95131" }, { "reference_url": "https://wiki.mozilla.org/MOSS/Secure_Open_Source/Completed#zlib", "reference_id": "Completed#zlib", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-12-04T16:34:37Z/" } ], "url": "https://wiki.mozilla.org/MOSS/Secure_Open_Source/Completed#zlib" }, { "reference_url": "https://github.com/madler/zlib/commit/e54e1299404101a5a9d0cf5e45512b543967f958", "reference_id": "e54e1299404101a5a9d0cf5e45512b543967f958", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-12-04T16:34:37Z/" } ], "url": "https://github.com/madler/zlib/commit/e54e1299404101a5a9d0cf5e45512b543967f958" }, { "reference_url": "https://security.gentoo.org/glsa/201701-56", "reference_id": "GLSA-201701-56", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-12-04T16:34:37Z/" } ], "url": "https://security.gentoo.org/glsa/201701-56" }, { "reference_url": "https://security.gentoo.org/glsa/202007-54", "reference_id": "GLSA-202007-54", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-12-04T16:34:37Z/" } ], "url": "https://security.gentoo.org/glsa/202007-54" }, { "reference_url": "https://lists.debian.org/debian-lts-announce/2019/03/msg00027.html", "reference_id": "msg00027.html", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-12-04T16:34:37Z/" } ], "url": "https://lists.debian.org/debian-lts-announce/2019/03/msg00027.html" }, { "reference_url": "https://lists.debian.org/debian-lts-announce/2020/01/msg00030.html", "reference_id": "msg00030.html", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-12-04T16:34:37Z/" } ], "url": "https://lists.debian.org/debian-lts-announce/2020/01/msg00030.html" }, { "reference_url": "http://lists.opensuse.org/opensuse-updates/2017-01/msg00050.html", "reference_id": "msg00050.html", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-12-04T16:34:37Z/" } ], "url": "http://lists.opensuse.org/opensuse-updates/2017-01/msg00050.html" }, { "reference_url": "http://lists.opensuse.org/opensuse-updates/2017-01/msg00053.html", "reference_id": "msg00053.html", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-12-04T16:34:37Z/" } ], "url": "http://lists.opensuse.org/opensuse-updates/2017-01/msg00053.html" }, { "reference_url": "http://lists.opensuse.org/opensuse-updates/2016-12/msg00127.html", "reference_id": "msg00127.html", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-12-04T16:34:37Z/" } ], "url": "http://lists.opensuse.org/opensuse-updates/2016-12/msg00127.html" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2017:1220", "reference_id": "RHSA-2017:1220", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-12-04T16:34:37Z/" } ], "url": "https://access.redhat.com/errata/RHSA-2017:1220" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2017:1221", "reference_id": "RHSA-2017:1221", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-12-04T16:34:37Z/" } ], "url": "https://access.redhat.com/errata/RHSA-2017:1221" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2017:1222", "reference_id": "RHSA-2017:1222", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-12-04T16:34:37Z/" } ], "url": "https://access.redhat.com/errata/RHSA-2017:1222" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2017:2999", "reference_id": "RHSA-2017:2999", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-12-04T16:34:37Z/" } ], "url": "https://access.redhat.com/errata/RHSA-2017:2999" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2017:3046", "reference_id": "RHSA-2017:3046", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-12-04T16:34:37Z/" } ], "url": "https://access.redhat.com/errata/RHSA-2017:3046" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2017:3047", "reference_id": "RHSA-2017:3047", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-12-04T16:34:37Z/" } ], "url": "https://access.redhat.com/errata/RHSA-2017:3047" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2017:3453", "reference_id": "RHSA-2017:3453", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-12-04T16:34:37Z/" } ], "url": "https://access.redhat.com/errata/RHSA-2017:3453" }, { "reference_url": "https://usn.ubuntu.com/4246-1/", "reference_id": "USN-4246-1", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-12-04T16:34:37Z/" } ], "url": "https://usn.ubuntu.com/4246-1/" }, { "reference_url": "https://usn.ubuntu.com/4292-1/", "reference_id": "USN-4292-1", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-12-04T16:34:37Z/" } ], "url": "https://usn.ubuntu.com/4292-1/" }, { "reference_url": "https://wiki.mozilla.org/images/0/09/Zlib-report.pdf", "reference_id": "Zlib-report.pdf", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-12-04T16:34:37Z/" } ], "url": "https://wiki.mozilla.org/images/0/09/Zlib-report.pdf" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/1050469?format=api", "purl": "pkg:deb/debian/rsync@3.1.3-6", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-472y-7aza-j7c4" }, { "vulnerability": "VCID-78yq-gu4t-rke9" }, { "vulnerability": "VCID-9d7g-bby6-8fb3" }, { "vulnerability": "VCID-c1ec-hvuv-ckgk" }, { "vulnerability": "VCID-q576-uw5g-8kh3" }, { "vulnerability": "VCID-y5ep-xtwr-ckg6" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/rsync@3.1.3-6" } ], "aliases": [ "CVE-2016-9842" ], "risk_score": 4.0, "exploitability": "0.5", "weighted_severity": "7.9", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-m6xx-a91r-sbhu" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/56188?format=api", "vulnerability_id": "VCID-mr6h-6jrp-gyf3", "summary": "Multiple vulnerabilities have been found in rsync, the worst of\n which could result in a Denial of Service condition.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9840.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9840.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2016-9840", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.13004", "scoring_system": "epss", "scoring_elements": "0.94041", "published_at": "2026-04-01T12:55:00Z" }, { "value": "0.13004", "scoring_system": "epss", "scoring_elements": "0.94102", "published_at": "2026-04-18T12:55:00Z" }, { "value": "0.13004", "scoring_system": "epss", "scoring_elements": "0.94081", "published_at": "2026-04-13T12:55:00Z" }, { "value": "0.13004", "scoring_system": "epss", "scoring_elements": "0.94097", "published_at": "2026-04-16T12:55:00Z" }, { "value": "0.13004", "scoring_system": "epss", "scoring_elements": "0.9405", "published_at": "2026-04-02T12:55:00Z" }, { "value": "0.13004", "scoring_system": "epss", "scoring_elements": "0.9406", "published_at": "2026-04-04T12:55:00Z" }, { "value": "0.13004", "scoring_system": "epss", "scoring_elements": "0.94064", "published_at": "2026-04-07T12:55:00Z" }, { "value": "0.13004", "scoring_system": "epss", "scoring_elements": "0.94072", "published_at": "2026-04-08T12:55:00Z" }, { "value": "0.13004", "scoring_system": "epss", "scoring_elements": "0.94076", "published_at": "2026-04-09T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2016-9840" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9840", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9840" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.6", "scoring_system": "cvssv2", "scoring_elements": "AV:N/AC:H/Au:S/C:P/I:P/A:P" }, { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1402345", "reference_id": "1402345", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1402345" }, { "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=847270", "reference_id": "847270", "reference_type": "", "scores": [], "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=847270" }, { "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=924509", "reference_id": "924509", "reference_type": "", "scores": [], "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=924509" }, { "reference_url": "https://security.gentoo.org/glsa/201701-56", "reference_id": "GLSA-201701-56", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/201701-56" }, { "reference_url": "https://security.gentoo.org/glsa/202007-54", "reference_id": "GLSA-202007-54", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/202007-54" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2017:1220", "reference_id": "RHSA-2017:1220", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2017:1220" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2017:1221", "reference_id": "RHSA-2017:1221", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2017:1221" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2017:1222", "reference_id": "RHSA-2017:1222", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2017:1222" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2017:2999", "reference_id": "RHSA-2017:2999", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2017:2999" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2017:3046", "reference_id": "RHSA-2017:3046", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2017:3046" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2017:3047", "reference_id": "RHSA-2017:3047", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2017:3047" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2017:3453", "reference_id": "RHSA-2017:3453", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2017:3453" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:10541", "reference_id": "RHSA-2025:10541", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:10541" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:11048", "reference_id": "RHSA-2025:11048", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:11048" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:12013", "reference_id": "RHSA-2025:12013", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:12013" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:13947", "reference_id": "RHSA-2025:13947", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:13947" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:8284", "reference_id": "RHSA-2025:8284", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:8284" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:8314", "reference_id": "RHSA-2025:8314", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:8314" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:8395", "reference_id": "RHSA-2025:8395", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:8395" }, { "reference_url": "https://usn.ubuntu.com/4246-1/", "reference_id": "USN-4246-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/4246-1/" }, { "reference_url": "https://usn.ubuntu.com/4292-1/", "reference_id": "USN-4292-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/4292-1/" }, { "reference_url": "https://usn.ubuntu.com/6736-1/", "reference_id": "USN-6736-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/6736-1/" }, { "reference_url": "https://usn.ubuntu.com/6736-2/", "reference_id": "USN-6736-2", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/6736-2/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/1050469?format=api", "purl": "pkg:deb/debian/rsync@3.1.3-6", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-472y-7aza-j7c4" }, { "vulnerability": "VCID-78yq-gu4t-rke9" }, { "vulnerability": "VCID-9d7g-bby6-8fb3" }, { "vulnerability": "VCID-c1ec-hvuv-ckgk" }, { "vulnerability": "VCID-q576-uw5g-8kh3" }, { "vulnerability": "VCID-y5ep-xtwr-ckg6" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/rsync@3.1.3-6" } ], "aliases": [ "CVE-2016-9840" ], "risk_score": 4.0, "exploitability": "0.5", "weighted_severity": "7.9", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-mr6h-6jrp-gyf3" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/39074?format=api", "vulnerability_id": "VCID-q576-uw5g-8kh3", "summary": "Multiple vulnerabilities have been discovered in rsync, the worst of which could lead to arbitrary code execution.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2024-12087.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2024-12087.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2024-12087", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.03189", "scoring_system": "epss", "scoring_elements": "0.87", "published_at": "2026-04-18T12:55:00Z" }, { "value": "0.03189", "scoring_system": "epss", "scoring_elements": "0.86971", "published_at": "2026-04-08T12:55:00Z" }, { "value": "0.03189", "scoring_system": "epss", "scoring_elements": "0.86978", "published_at": "2026-04-09T12:55:00Z" }, { "value": "0.03189", "scoring_system": "epss", "scoring_elements": "0.86991", "published_at": "2026-04-11T12:55:00Z" }, { "value": "0.03189", "scoring_system": "epss", "scoring_elements": "0.86986", "published_at": "2026-04-12T12:55:00Z" }, { "value": "0.03189", "scoring_system": "epss", "scoring_elements": "0.8698", "published_at": "2026-04-13T12:55:00Z" }, { "value": "0.03189", "scoring_system": "epss", "scoring_elements": "0.86996", "published_at": "2026-04-16T12:55:00Z" }, { "value": "0.03189", "scoring_system": "epss", "scoring_elements": "0.86939", "published_at": "2026-04-02T12:55:00Z" }, { "value": "0.03189", "scoring_system": "epss", "scoring_elements": "0.86957", "published_at": "2026-04-04T12:55:00Z" }, { "value": "0.03189", "scoring_system": "epss", "scoring_elements": "0.86951", "published_at": "2026-04-07T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2024-12087" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-12087", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-12087" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=2330672", "reference_id": "2330672", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-02-26T14:12:12Z/" } ], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2330672" }, { "reference_url": "https://kb.cert.org/vuls/id/952657", "reference_id": "952657", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-02-26T14:12:12Z/" } ], "url": "https://kb.cert.org/vuls/id/952657" }, { "reference_url": "https://security.archlinux.org/ASA-202501-1", "reference_id": "ASA-202501-1", "reference_type": "", "scores": [], "url": "https://security.archlinux.org/ASA-202501-1" }, { "reference_url": "https://security.archlinux.org/AVG-2858", "reference_id": "AVG-2858", "reference_type": "", "scores": [ { "value": "Critical", "scoring_system": "archlinux", "scoring_elements": "" } ], "url": "https://security.archlinux.org/AVG-2858" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/a:redhat:discovery:1.14::el9", "reference_id": "cpe:/a:redhat:discovery:1.14::el9", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/a:redhat:discovery:1.14::el9" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/a:redhat:enterprise_linux:9::appstream", "reference_id": "cpe:/a:redhat:enterprise_linux:9::appstream", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/a:redhat:enterprise_linux:9::appstream" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/a:redhat:openshift:4", "reference_id": "cpe:/a:redhat:openshift:4", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/a:redhat:openshift:4" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/a:redhat:rhel_e4s:9.0::appstream", "reference_id": "cpe:/a:redhat:rhel_e4s:9.0::appstream", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/a:redhat:rhel_e4s:9.0::appstream" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/a:redhat:rhel_e4s:9.2::appstream", "reference_id": "cpe:/a:redhat:rhel_e4s:9.2::appstream", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/a:redhat:rhel_e4s:9.2::appstream" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/a:redhat:rhel_eus:9.4::appstream", "reference_id": "cpe:/a:redhat:rhel_eus:9.4::appstream", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/a:redhat:rhel_eus:9.4::appstream" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/o:redhat:enterprise_linux:10", "reference_id": "cpe:/o:redhat:enterprise_linux:10", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/o:redhat:enterprise_linux:10" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/o:redhat:enterprise_linux:10.0", "reference_id": "cpe:/o:redhat:enterprise_linux:10.0", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/o:redhat:enterprise_linux:10.0" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/o:redhat:enterprise_linux:8::baseos", "reference_id": "cpe:/o:redhat:enterprise_linux:8::baseos", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/o:redhat:enterprise_linux:8::baseos" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/o:redhat:enterprise_linux:9::baseos", "reference_id": "cpe:/o:redhat:enterprise_linux:9::baseos", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/o:redhat:enterprise_linux:9::baseos" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/o:redhat:rhel_aus:8.2::baseos", "reference_id": "cpe:/o:redhat:rhel_aus:8.2::baseos", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/o:redhat:rhel_aus:8.2::baseos" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/o:redhat:rhel_aus:8.4::baseos", "reference_id": "cpe:/o:redhat:rhel_aus:8.4::baseos", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/o:redhat:rhel_aus:8.4::baseos" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/o:redhat:rhel_aus:8.6::baseos", "reference_id": "cpe:/o:redhat:rhel_aus:8.6::baseos", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/o:redhat:rhel_aus:8.6::baseos" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/o:redhat:rhel_e4s:8.6::baseos", "reference_id": "cpe:/o:redhat:rhel_e4s:8.6::baseos", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/o:redhat:rhel_e4s:8.6::baseos" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/o:redhat:rhel_e4s:8.8::baseos", "reference_id": "cpe:/o:redhat:rhel_e4s:8.8::baseos", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/o:redhat:rhel_e4s:8.8::baseos" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/o:redhat:rhel_e4s:9.0::baseos", "reference_id": "cpe:/o:redhat:rhel_e4s:9.0::baseos", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/o:redhat:rhel_e4s:9.0::baseos" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/o:redhat:rhel_e4s:9.2::baseos", "reference_id": "cpe:/o:redhat:rhel_e4s:9.2::baseos", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/o:redhat:rhel_e4s:9.2::baseos" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/o:redhat:rhel_els:6", "reference_id": "cpe:/o:redhat:rhel_els:6", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/o:redhat:rhel_els:6" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/o:redhat:rhel_els:7", "reference_id": "cpe:/o:redhat:rhel_els:7", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/o:redhat:rhel_els:7" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/o:redhat:rhel_eus:9.4::baseos", "reference_id": "cpe:/o:redhat:rhel_eus:9.4::baseos", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/o:redhat:rhel_eus:9.4::baseos" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/o:redhat:rhel_eus_long_life:8.4::baseos", "reference_id": "cpe:/o:redhat:rhel_eus_long_life:8.4::baseos", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/o:redhat:rhel_eus_long_life:8.4::baseos" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/o:redhat:rhel_tus:8.6::baseos", "reference_id": "cpe:/o:redhat:rhel_tus:8.6::baseos", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/o:redhat:rhel_tus:8.6::baseos" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/o:redhat:rhel_tus:8.8::baseos", "reference_id": "cpe:/o:redhat:rhel_tus:8.8::baseos", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/o:redhat:rhel_tus:8.8::baseos" }, { "reference_url": "https://access.redhat.com/security/cve/CVE-2024-12087", "reference_id": "CVE-2024-12087", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-02-26T14:12:12Z/" } ], "url": "https://access.redhat.com/security/cve/CVE-2024-12087" }, { "reference_url": "https://security.gentoo.org/glsa/202501-01", "reference_id": "GLSA-202501-01", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/202501-01" }, { "reference_url": "https://access.redhat.com/errata/RHBA-2025:6470", "reference_id": "RHBA-2025:6470", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-02-26T14:12:12Z/" } ], "url": "https://access.redhat.com/errata/RHBA-2025:6470" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:23154", "reference_id": "RHSA-2025:23154", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-02-26T14:12:12Z/" } ], "url": "https://access.redhat.com/errata/RHSA-2025:23154" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:23235", "reference_id": "RHSA-2025:23235", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-02-26T14:12:12Z/" } ], "url": "https://access.redhat.com/errata/RHSA-2025:23235" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:23407", "reference_id": "RHSA-2025:23407", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-02-26T14:12:12Z/" } ], "url": "https://access.redhat.com/errata/RHSA-2025:23407" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:23415", "reference_id": "RHSA-2025:23415", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-02-26T14:12:12Z/" } ], "url": "https://access.redhat.com/errata/RHSA-2025:23415" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:23416", "reference_id": "RHSA-2025:23416", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-02-26T14:12:12Z/" } ], "url": "https://access.redhat.com/errata/RHSA-2025:23416" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:23842", "reference_id": "RHSA-2025:23842", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-02-26T14:12:12Z/" } ], "url": "https://access.redhat.com/errata/RHSA-2025:23842" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:23853", "reference_id": "RHSA-2025:23853", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-02-26T14:12:12Z/" } ], "url": "https://access.redhat.com/errata/RHSA-2025:23853" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:23854", "reference_id": "RHSA-2025:23854", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-02-26T14:12:12Z/" } ], "url": "https://access.redhat.com/errata/RHSA-2025:23854" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:23858", "reference_id": "RHSA-2025:23858", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-02-26T14:12:12Z/" } ], "url": "https://access.redhat.com/errata/RHSA-2025:23858" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:2600", "reference_id": "RHSA-2025:2600", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-02-26T14:12:12Z/" } ], "url": "https://access.redhat.com/errata/RHSA-2025:2600" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:7050", "reference_id": "RHSA-2025:7050", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-02-26T14:12:12Z/" } ], "url": "https://access.redhat.com/errata/RHSA-2025:7050" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:8385", "reference_id": "RHSA-2025:8385", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-02-26T14:12:12Z/" } ], "url": "https://access.redhat.com/errata/RHSA-2025:8385" }, { "reference_url": "https://usn.ubuntu.com/7206-1/", "reference_id": "USN-7206-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/7206-1/" }, { "reference_url": "https://usn.ubuntu.com/7206-3/", "reference_id": "USN-7206-3", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/7206-3/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/994518?format=api", "purl": "pkg:deb/debian/rsync@3.2.7-1%2Bdeb12u4", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/rsync@3.2.7-1%252Bdeb12u4" } ], "aliases": [ "CVE-2024-12087" ], "risk_score": 4.5, "exploitability": "0.5", "weighted_severity": "9.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-q576-uw5g-8kh3" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/56191?format=api", "vulnerability_id": "VCID-smft-ms93-6kf1", "summary": "Multiple vulnerabilities have been found in rsync, the worst of\n which could result in a Denial of Service condition.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9843.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9843.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2016-9843", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.15071", "scoring_system": "epss", "scoring_elements": "0.9454", "published_at": "2026-04-01T12:55:00Z" }, { "value": "0.15071", "scoring_system": "epss", "scoring_elements": "0.94547", "published_at": "2026-04-02T12:55:00Z" }, { "value": "0.15071", "scoring_system": "epss", "scoring_elements": "0.94555", "published_at": "2026-04-04T12:55:00Z" }, { "value": "0.15071", "scoring_system": "epss", "scoring_elements": "0.94557", "published_at": "2026-04-07T12:55:00Z" }, { "value": "0.15071", "scoring_system": "epss", "scoring_elements": "0.94567", "published_at": "2026-04-08T12:55:00Z" }, { "value": "0.15071", "scoring_system": "epss", "scoring_elements": "0.94571", "published_at": "2026-04-09T12:55:00Z" }, { "value": "0.15071", "scoring_system": "epss", "scoring_elements": "0.94575", "published_at": "2026-04-11T12:55:00Z" }, { "value": "0.15071", "scoring_system": "epss", "scoring_elements": "0.94577", "published_at": "2026-04-12T12:55:00Z" }, { "value": "0.15071", "scoring_system": "epss", "scoring_elements": "0.94578", "published_at": "2026-04-13T12:55:00Z" }, { "value": "0.15071", "scoring_system": "epss", "scoring_elements": "0.9459", "published_at": "2026-04-16T12:55:00Z" }, { "value": "0.15071", "scoring_system": "epss", "scoring_elements": "0.94595", "published_at": "2026-04-18T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2016-9843" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9843", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9843" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.6", "scoring_system": "cvssv2", "scoring_elements": "AV:N/AC:H/Au:S/C:P/I:P/A:P" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1402351", "reference_id": "1402351", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1402351" }, { "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=847275", "reference_id": "847275", "reference_type": "", "scores": [], "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=847275" }, { "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=924509", "reference_id": "924509", "reference_type": "", "scores": [], "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=924509" }, { "reference_url": "https://security.gentoo.org/glsa/201701-56", "reference_id": "GLSA-201701-56", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/201701-56" }, { "reference_url": "https://security.gentoo.org/glsa/202007-54", "reference_id": "GLSA-202007-54", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/202007-54" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2017:1220", "reference_id": "RHSA-2017:1220", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2017:1220" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2017:1221", "reference_id": "RHSA-2017:1221", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2017:1221" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2017:1222", "reference_id": "RHSA-2017:1222", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2017:1222" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2017:2999", "reference_id": "RHSA-2017:2999", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2017:2999" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2017:3046", "reference_id": "RHSA-2017:3046", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2017:3046" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2017:3047", "reference_id": "RHSA-2017:3047", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2017:3047" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2017:3453", "reference_id": "RHSA-2017:3453", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2017:3453" }, { "reference_url": "https://usn.ubuntu.com/4246-1/", "reference_id": "USN-4246-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/4246-1/" }, { "reference_url": "https://usn.ubuntu.com/4292-1/", "reference_id": "USN-4292-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/4292-1/" }, { "reference_url": "https://usn.ubuntu.com/7959-1/", "reference_id": "USN-7959-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/7959-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/1050469?format=api", "purl": "pkg:deb/debian/rsync@3.1.3-6", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-472y-7aza-j7c4" }, { "vulnerability": "VCID-78yq-gu4t-rke9" }, { "vulnerability": "VCID-9d7g-bby6-8fb3" }, { "vulnerability": "VCID-c1ec-hvuv-ckgk" }, { "vulnerability": "VCID-q576-uw5g-8kh3" }, { "vulnerability": "VCID-y5ep-xtwr-ckg6" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/rsync@3.1.3-6" } ], "aliases": [ "CVE-2016-9843" ], "risk_score": 4.4, "exploitability": "0.5", "weighted_severity": "8.8", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-smft-ms93-6kf1" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/39057?format=api", "vulnerability_id": "VCID-y5ep-xtwr-ckg6", "summary": "Multiple vulnerabilities have been discovered in rsync, the worst of which could lead to arbitrary code execution.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2024-12085.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2024-12085.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2024-12085", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.19143", "scoring_system": "epss", "scoring_elements": "0.95363", "published_at": "2026-04-18T12:55:00Z" }, { "value": "0.19143", "scoring_system": "epss", "scoring_elements": "0.95335", "published_at": "2026-04-07T12:55:00Z" }, { "value": "0.19143", "scoring_system": "epss", "scoring_elements": "0.95342", "published_at": "2026-04-08T12:55:00Z" }, { "value": "0.19143", "scoring_system": "epss", "scoring_elements": "0.95345", "published_at": "2026-04-09T12:55:00Z" }, { "value": "0.19143", "scoring_system": "epss", "scoring_elements": "0.9535", "published_at": "2026-04-12T12:55:00Z" }, { "value": "0.19143", "scoring_system": "epss", "scoring_elements": "0.95352", "published_at": "2026-04-13T12:55:00Z" }, { "value": "0.19143", "scoring_system": "epss", "scoring_elements": "0.9536", "published_at": "2026-04-16T12:55:00Z" }, { "value": "0.19143", "scoring_system": "epss", "scoring_elements": "0.95324", "published_at": "2026-04-02T12:55:00Z" }, { "value": "0.19143", "scoring_system": "epss", "scoring_elements": "0.9533", "published_at": "2026-04-04T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2024-12085" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-12085", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-12085" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=2330539", "reference_id": "2330539", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2025-02-27T04:55:14Z/" } ], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2330539" }, { "reference_url": "https://kb.cert.org/vuls/id/952657", "reference_id": "952657", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2025-02-27T04:55:14Z/" } ], "url": "https://kb.cert.org/vuls/id/952657" }, { "reference_url": "https://security.archlinux.org/ASA-202501-1", "reference_id": "ASA-202501-1", "reference_type": "", "scores": [], "url": "https://security.archlinux.org/ASA-202501-1" }, { "reference_url": "https://security.archlinux.org/AVG-2858", "reference_id": "AVG-2858", "reference_type": "", "scores": [ { "value": "Critical", "scoring_system": "archlinux", "scoring_elements": "" } ], "url": "https://security.archlinux.org/AVG-2858" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/a:redhat:enterprise_linux:9::appstream", "reference_id": "cpe:/a:redhat:enterprise_linux:9::appstream", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/a:redhat:enterprise_linux:9::appstream" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/a:redhat:logging:5.8::el9", "reference_id": "cpe:/a:redhat:logging:5.8::el9", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/a:redhat:logging:5.8::el9" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/a:redhat:logging:5.9::el9", "reference_id": "cpe:/a:redhat:logging:5.9::el9", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/a:redhat:logging:5.9::el9" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/a:redhat:openshift:4.12::el8", "reference_id": "cpe:/a:redhat:openshift:4.12::el8", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/a:redhat:openshift:4.12::el8" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/a:redhat:openshift:4.13::el8", "reference_id": "cpe:/a:redhat:openshift:4.13::el8", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/a:redhat:openshift:4.13::el8" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/a:redhat:openshift:4.13::el9", "reference_id": "cpe:/a:redhat:openshift:4.13::el9", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/a:redhat:openshift:4.13::el9" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/a:redhat:openshift:4.14::el8", "reference_id": "cpe:/a:redhat:openshift:4.14::el8", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/a:redhat:openshift:4.14::el8" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/a:redhat:openshift:4.14::el9", "reference_id": "cpe:/a:redhat:openshift:4.14::el9", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/a:redhat:openshift:4.14::el9" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/a:redhat:openshift:4.15::el8", "reference_id": "cpe:/a:redhat:openshift:4.15::el8", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/a:redhat:openshift:4.15::el8" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/a:redhat:openshift:4.15::el9", "reference_id": "cpe:/a:redhat:openshift:4.15::el9", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/a:redhat:openshift:4.15::el9" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/a:redhat:openshift:4.16::el9", "reference_id": "cpe:/a:redhat:openshift:4.16::el9", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/a:redhat:openshift:4.16::el9" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/a:redhat:openshift:4.17::el9", "reference_id": "cpe:/a:redhat:openshift:4.17::el9", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/a:redhat:openshift:4.17::el9" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/a:redhat:openshift_compliance_operator:1::el9", "reference_id": "cpe:/a:redhat:openshift_compliance_operator:1::el9", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/a:redhat:openshift_compliance_operator:1::el9" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/a:redhat:rhel_e4s:9.0::appstream", "reference_id": "cpe:/a:redhat:rhel_e4s:9.0::appstream", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/a:redhat:rhel_e4s:9.0::appstream" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/a:redhat:rhel_eus:9.2::appstream", "reference_id": "cpe:/a:redhat:rhel_eus:9.2::appstream", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/a:redhat:rhel_eus:9.2::appstream" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/a:redhat:rhel_eus:9.4::appstream", "reference_id": "cpe:/a:redhat:rhel_eus:9.4::appstream", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/a:redhat:rhel_eus:9.4::appstream" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/o:redhat:enterprise_linux:10", "reference_id": "cpe:/o:redhat:enterprise_linux:10", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/o:redhat:enterprise_linux:10" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/o:redhat:enterprise_linux:10.0", "reference_id": "cpe:/o:redhat:enterprise_linux:10.0", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/o:redhat:enterprise_linux:10.0" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/o:redhat:enterprise_linux:8::baseos", "reference_id": "cpe:/o:redhat:enterprise_linux:8::baseos", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/o:redhat:enterprise_linux:8::baseos" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/o:redhat:enterprise_linux:9::baseos", "reference_id": "cpe:/o:redhat:enterprise_linux:9::baseos", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/o:redhat:enterprise_linux:9::baseos" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/o:redhat:rhel_aus:8.2::baseos", "reference_id": "cpe:/o:redhat:rhel_aus:8.2::baseos", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/o:redhat:rhel_aus:8.2::baseos" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/o:redhat:rhel_aus:8.4::baseos", "reference_id": "cpe:/o:redhat:rhel_aus:8.4::baseos", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/o:redhat:rhel_aus:8.4::baseos" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/o:redhat:rhel_aus:8.6::baseos", "reference_id": "cpe:/o:redhat:rhel_aus:8.6::baseos", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/o:redhat:rhel_aus:8.6::baseos" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/o:redhat:rhel_e4s:8.4::baseos", "reference_id": "cpe:/o:redhat:rhel_e4s:8.4::baseos", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/o:redhat:rhel_e4s:8.4::baseos" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/o:redhat:rhel_e4s:8.6::baseos", "reference_id": "cpe:/o:redhat:rhel_e4s:8.6::baseos", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/o:redhat:rhel_e4s:8.6::baseos" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/o:redhat:rhel_e4s:9.0::baseos", "reference_id": "cpe:/o:redhat:rhel_e4s:9.0::baseos", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/o:redhat:rhel_e4s:9.0::baseos" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/o:redhat:rhel_els:6", "reference_id": "cpe:/o:redhat:rhel_els:6", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/o:redhat:rhel_els:6" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/o:redhat:rhel_els:7", "reference_id": "cpe:/o:redhat:rhel_els:7", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/o:redhat:rhel_els:7" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/o:redhat:rhel_eus:8.8::baseos", "reference_id": "cpe:/o:redhat:rhel_eus:8.8::baseos", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/o:redhat:rhel_eus:8.8::baseos" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/o:redhat:rhel_eus:9.2::baseos", "reference_id": "cpe:/o:redhat:rhel_eus:9.2::baseos", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/o:redhat:rhel_eus:9.2::baseos" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/o:redhat:rhel_eus:9.4::baseos", "reference_id": "cpe:/o:redhat:rhel_eus:9.4::baseos", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/o:redhat:rhel_eus:9.4::baseos" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/o:redhat:rhel_tus:8.4::baseos", "reference_id": "cpe:/o:redhat:rhel_tus:8.4::baseos", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/o:redhat:rhel_tus:8.4::baseos" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/o:redhat:rhel_tus:8.6::baseos", "reference_id": "cpe:/o:redhat:rhel_tus:8.6::baseos", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/o:redhat:rhel_tus:8.6::baseos" }, { "reference_url": "https://access.redhat.com/security/cve/CVE-2024-12085", "reference_id": "CVE-2024-12085", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2025-02-27T04:55:14Z/" } ], "url": "https://access.redhat.com/security/cve/CVE-2024-12085" }, { "reference_url": "https://security.gentoo.org/glsa/202501-01", "reference_id": "GLSA-202501-01", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/202501-01" }, { "reference_url": "https://access.redhat.com/errata/RHBA-2025:6470", "reference_id": "RHBA-2025:6470", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2025-02-27T04:55:14Z/" } ], "url": "https://access.redhat.com/errata/RHBA-2025:6470" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:0324", "reference_id": "RHSA-2025:0324", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2025-02-27T04:55:14Z/" } ], "url": "https://access.redhat.com/errata/RHSA-2025:0324" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:0325", "reference_id": "RHSA-2025:0325", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2025-02-27T04:55:14Z/" } ], "url": "https://access.redhat.com/errata/RHSA-2025:0325" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:0637", "reference_id": "RHSA-2025:0637", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2025-02-27T04:55:14Z/" } ], "url": "https://access.redhat.com/errata/RHSA-2025:0637" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:0688", "reference_id": "RHSA-2025:0688", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2025-02-27T04:55:14Z/" } ], "url": "https://access.redhat.com/errata/RHSA-2025:0688" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:0714", "reference_id": "RHSA-2025:0714", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2025-02-27T04:55:14Z/" } ], "url": "https://access.redhat.com/errata/RHSA-2025:0714" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:0774", "reference_id": "RHSA-2025:0774", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2025-02-27T04:55:14Z/" } ], "url": "https://access.redhat.com/errata/RHSA-2025:0774" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:0787", "reference_id": "RHSA-2025:0787", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2025-02-27T04:55:14Z/" } ], "url": "https://access.redhat.com/errata/RHSA-2025:0787" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:0790", "reference_id": "RHSA-2025:0790", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2025-02-27T04:55:14Z/" } ], "url": "https://access.redhat.com/errata/RHSA-2025:0790" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:0849", "reference_id": "RHSA-2025:0849", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2025-02-27T04:55:14Z/" } ], "url": "https://access.redhat.com/errata/RHSA-2025:0849" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:0884", "reference_id": "RHSA-2025:0884", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2025-02-27T04:55:14Z/" } ], "url": "https://access.redhat.com/errata/RHSA-2025:0884" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:0885", "reference_id": "RHSA-2025:0885", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2025-02-27T04:55:14Z/" } ], "url": "https://access.redhat.com/errata/RHSA-2025:0885" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:1120", "reference_id": "RHSA-2025:1120", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2025-02-27T04:55:14Z/" } ], "url": "https://access.redhat.com/errata/RHSA-2025:1120" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:1123", "reference_id": "RHSA-2025:1123", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2025-02-27T04:55:14Z/" } ], "url": "https://access.redhat.com/errata/RHSA-2025:1123" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:1128", "reference_id": "RHSA-2025:1128", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2025-02-27T04:55:14Z/" } ], "url": "https://access.redhat.com/errata/RHSA-2025:1128" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:1225", "reference_id": "RHSA-2025:1225", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2025-02-27T04:55:14Z/" } ], "url": "https://access.redhat.com/errata/RHSA-2025:1225" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:1227", "reference_id": "RHSA-2025:1227", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2025-02-27T04:55:14Z/" } ], "url": "https://access.redhat.com/errata/RHSA-2025:1227" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:1242", "reference_id": "RHSA-2025:1242", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2025-02-27T04:55:14Z/" } ], "url": "https://access.redhat.com/errata/RHSA-2025:1242" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:1451", "reference_id": "RHSA-2025:1451", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2025-02-27T04:55:14Z/" } ], "url": "https://access.redhat.com/errata/RHSA-2025:1451" }, { "reference_url": "https://usn.ubuntu.com/7206-1/", "reference_id": "USN-7206-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/7206-1/" }, { "reference_url": "https://usn.ubuntu.com/7206-3/", "reference_id": "USN-7206-3", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/7206-3/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/994518?format=api", "purl": "pkg:deb/debian/rsync@3.2.7-1%2Bdeb12u4", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/rsync@3.2.7-1%252Bdeb12u4" } ], "aliases": [ "CVE-2024-12085" ], "risk_score": 4.5, "exploitability": "0.5", "weighted_severity": "9.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-y5ep-xtwr-ckg6" } ], "fixing_vulnerabilities": [ { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/49844?format=api", "vulnerability_id": "VCID-1dp2-jcqh-7ket", "summary": "Multiple vulnerabilities have been found in rsync, the worst of\n which could allow remote attackers to bypass access restrictions.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-17434.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.8", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-17434.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2017-17434", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.01156", "scoring_system": "epss", "scoring_elements": "0.7849", "published_at": "2026-04-01T12:55:00Z" }, { "value": "0.01156", "scoring_system": "epss", "scoring_elements": "0.78568", "published_at": "2026-04-18T12:55:00Z" }, { "value": "0.01156", "scoring_system": "epss", "scoring_elements": "0.78542", "published_at": "2026-04-09T12:55:00Z" }, { "value": "0.01156", "scoring_system": "epss", "scoring_elements": "0.78567", "published_at": "2026-04-11T12:55:00Z" }, { "value": "0.01156", "scoring_system": "epss", "scoring_elements": "0.78549", "published_at": "2026-04-12T12:55:00Z" }, { "value": "0.01156", "scoring_system": "epss", "scoring_elements": "0.78541", "published_at": "2026-04-13T12:55:00Z" }, { "value": "0.01156", "scoring_system": "epss", "scoring_elements": "0.78569", "published_at": "2026-04-16T12:55:00Z" }, { "value": "0.01156", "scoring_system": "epss", "scoring_elements": "0.78496", "published_at": "2026-04-02T12:55:00Z" }, { "value": "0.01156", "scoring_system": "epss", "scoring_elements": "0.78527", "published_at": "2026-04-04T12:55:00Z" }, { "value": "0.01156", "scoring_system": "epss", "scoring_elements": "0.7851", "published_at": "2026-04-07T12:55:00Z" }, { "value": "0.01156", "scoring_system": "epss", "scoring_elements": "0.78537", "published_at": "2026-04-08T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2017-17434" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16548", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16548" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17433", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17433" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17434", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17434" }, { "reference_url": "http://security.cucumberlinux.com/security/details.php?id=170", "reference_id": "", "reference_type": "", "scores": [], "url": "http://security.cucumberlinux.com/security/details.php?id=170" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.9", "scoring_system": "cvssv2", "scoring_elements": "AV:N/AC:M/Au:S/C:P/I:P/A:N" }, { "value": "5.4", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://git.samba.org/?p=rsync.git%3Ba=commit%3Bh=5509597decdbd7b91994210f700329d8a35e70a1", "reference_id": "", "reference_type": "", "scores": [], "url": "https://git.samba.org/?p=rsync.git%3Ba=commit%3Bh=5509597decdbd7b91994210f700329d8a35e70a1" }, { "reference_url": "https://git.samba.org/?p=rsync.git%3Ba=commit%3Bh=70aeb5fddd1b2f8e143276f8d5a085db16c593b9", "reference_id": "", "reference_type": "", "scores": [], "url": "https://git.samba.org/?p=rsync.git%3Ba=commit%3Bh=70aeb5fddd1b2f8e143276f8d5a085db16c593b9" }, { "reference_url": "https://lists.debian.org/debian-lts-announce/2017/12/msg00020.html", "reference_id": "", "reference_type": "", "scores": [], "url": "https://lists.debian.org/debian-lts-announce/2017/12/msg00020.html" }, { "reference_url": "https://www.debian.org/security/2017/dsa-4068", "reference_id": "", "reference_type": "", "scores": [], "url": "https://www.debian.org/security/2017/dsa-4068" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1522875", "reference_id": "1522875", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1522875" }, { "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=883665", "reference_id": "883665", "reference_type": "", "scores": [], "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=883665" }, { "reference_url": "https://security.archlinux.org/ASA-201801-21", "reference_id": "ASA-201801-21", "reference_type": "", "scores": [], "url": "https://security.archlinux.org/ASA-201801-21" }, { "reference_url": "https://security.archlinux.org/AVG-542", "reference_id": "AVG-542", "reference_type": "", "scores": [ { "value": "Critical", "scoring_system": "archlinux", "scoring_elements": "" } ], "url": "https://security.archlinux.org/AVG-542" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:samba:rsync:*:*:*:*:*:*:*:*", "reference_id": "cpe:2.3:a:samba:rsync:*:*:*:*:*:*:*:*", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:samba:rsync:*:*:*:*:*:*:*:*" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*", "reference_id": "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*", "reference_id": "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2017-17434", "reference_id": "CVE-2017-17434", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv2", "scoring_elements": "AV:N/AC:L/Au:N/C:P/I:P/A:P" }, { "value": "9.8", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-17434" }, { "reference_url": "https://security.gentoo.org/glsa/201801-16", "reference_id": "GLSA-201801-16", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/201801-16" }, { "reference_url": "https://usn.ubuntu.com/3506-1/", "reference_id": "USN-3506-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/3506-1/" }, { "reference_url": "https://usn.ubuntu.com/3506-2/", "reference_id": "USN-3506-2", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/3506-2/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/1036272?format=api", "purl": "pkg:deb/debian/rsync@3.1.1-3%2Bdeb8u1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1dp2-jcqh-7ket" }, { "vulnerability": "VCID-1snq-bkw3-3kff" }, { "vulnerability": "VCID-472y-7aza-j7c4" }, { "vulnerability": "VCID-4g8w-n139-dfbn" }, { "vulnerability": "VCID-78yq-gu4t-rke9" }, { "vulnerability": "VCID-9d7g-bby6-8fb3" }, { "vulnerability": "VCID-c1ec-hvuv-ckgk" }, { "vulnerability": "VCID-eyjp-7kks-jbfr" }, { "vulnerability": "VCID-h2jt-8ppk-nbh9" }, { "vulnerability": "VCID-m6xx-a91r-sbhu" }, { "vulnerability": "VCID-mr6h-6jrp-gyf3" }, { "vulnerability": "VCID-q576-uw5g-8kh3" }, { "vulnerability": "VCID-smft-ms93-6kf1" }, { "vulnerability": "VCID-y5ep-xtwr-ckg6" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/rsync@3.1.1-3%252Bdeb8u1" }, { "url": "http://public2.vulnerablecode.io/api/packages/1037003?format=api", "purl": "pkg:deb/debian/rsync@3.1.2-1%2Bdeb9u2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1dp2-jcqh-7ket" }, { "vulnerability": "VCID-1snq-bkw3-3kff" }, { "vulnerability": "VCID-472y-7aza-j7c4" }, { "vulnerability": "VCID-4g8w-n139-dfbn" }, { "vulnerability": "VCID-78yq-gu4t-rke9" }, { "vulnerability": "VCID-9d7g-bby6-8fb3" }, { "vulnerability": "VCID-c1ec-hvuv-ckgk" }, { "vulnerability": "VCID-eyjp-7kks-jbfr" }, { "vulnerability": "VCID-h2jt-8ppk-nbh9" }, { "vulnerability": "VCID-m6xx-a91r-sbhu" }, { "vulnerability": "VCID-mr6h-6jrp-gyf3" }, { "vulnerability": "VCID-q576-uw5g-8kh3" }, { "vulnerability": "VCID-smft-ms93-6kf1" }, { "vulnerability": "VCID-y5ep-xtwr-ckg6" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/rsync@3.1.2-1%252Bdeb9u2" }, { "url": "http://public2.vulnerablecode.io/api/packages/1050469?format=api", "purl": "pkg:deb/debian/rsync@3.1.3-6", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-472y-7aza-j7c4" }, { "vulnerability": "VCID-78yq-gu4t-rke9" }, { "vulnerability": "VCID-9d7g-bby6-8fb3" }, { "vulnerability": "VCID-c1ec-hvuv-ckgk" }, { "vulnerability": "VCID-q576-uw5g-8kh3" }, { "vulnerability": "VCID-y5ep-xtwr-ckg6" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/rsync@3.1.3-6" } ], "aliases": [ "CVE-2017-17434" ], "risk_score": 4.5, "exploitability": "0.5", "weighted_severity": "9.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-1dp2-jcqh-7ket" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/49842?format=api", "vulnerability_id": "VCID-1snq-bkw3-3kff", "summary": "Multiple vulnerabilities have been found in rsync, the worst of\n which could allow remote attackers to bypass access restrictions.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-16548.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-16548.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2017-16548", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.02941", "scoring_system": "epss", "scoring_elements": "0.86372", "published_at": "2026-04-01T12:55:00Z" }, { "value": "0.02941", "scoring_system": "epss", "scoring_elements": "0.86459", "published_at": "2026-04-18T12:55:00Z" }, { "value": "0.02941", "scoring_system": "epss", "scoring_elements": "0.86445", "published_at": "2026-04-11T12:55:00Z" }, { "value": "0.02941", "scoring_system": "epss", "scoring_elements": "0.86443", "published_at": "2026-04-12T12:55:00Z" }, { "value": "0.02941", "scoring_system": "epss", "scoring_elements": "0.86438", "published_at": "2026-04-13T12:55:00Z" }, { "value": "0.02941", "scoring_system": "epss", "scoring_elements": "0.86454", "published_at": "2026-04-16T12:55:00Z" }, { "value": "0.02941", "scoring_system": "epss", "scoring_elements": "0.86383", "published_at": "2026-04-02T12:55:00Z" }, { "value": "0.02941", "scoring_system": "epss", "scoring_elements": "0.864", "published_at": "2026-04-04T12:55:00Z" }, { "value": "0.02941", "scoring_system": "epss", "scoring_elements": "0.86402", "published_at": "2026-04-07T12:55:00Z" }, { "value": "0.02941", "scoring_system": "epss", "scoring_elements": "0.8642", "published_at": "2026-04-08T12:55:00Z" }, { "value": "0.02941", "scoring_system": "epss", "scoring_elements": "0.8643", "published_at": "2026-04-09T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2017-16548" }, { "reference_url": "https://bugzilla.samba.org/show_bug.cgi?id=13112", "reference_id": "", "reference_type": "", "scores": [], "url": "https://bugzilla.samba.org/show_bug.cgi?id=13112" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16548", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16548" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17433", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17433" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17434", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17434" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "3.5", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://git.samba.org/rsync.git/?p=rsync.git%3Ba=commit%3Bh=47a63d90e71d3e19e0e96052bb8c6b9cb140ecc1", "reference_id": "", "reference_type": "", "scores": [], "url": "https://git.samba.org/rsync.git/?p=rsync.git%3Ba=commit%3Bh=47a63d90e71d3e19e0e96052bb8c6b9cb140ecc1" }, { "reference_url": "https://lists.debian.org/debian-lts-announce/2017/12/msg00020.html", "reference_id": "", "reference_type": "", "scores": [], "url": "https://lists.debian.org/debian-lts-announce/2017/12/msg00020.html" }, { "reference_url": "https://www.debian.org/security/2017/dsa-4068", "reference_id": "", "reference_type": "", "scores": [], "url": "https://www.debian.org/security/2017/dsa-4068" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1511411", "reference_id": "1511411", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1511411" }, { "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=880954", "reference_id": "880954", "reference_type": "", "scores": [], "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=880954" }, { "reference_url": "https://security.archlinux.org/ASA-201801-21", "reference_id": "ASA-201801-21", "reference_type": "", "scores": [], "url": "https://security.archlinux.org/ASA-201801-21" }, { "reference_url": "https://security.archlinux.org/AVG-542", "reference_id": "AVG-542", "reference_type": "", "scores": [ { "value": "Critical", "scoring_system": "archlinux", "scoring_elements": "" } ], "url": "https://security.archlinux.org/AVG-542" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:samba:rsync:*:*:*:*:*:*:*:*", "reference_id": "cpe:2.3:a:samba:rsync:*:*:*:*:*:*:*:*", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:samba:rsync:*:*:*:*:*:*:*:*" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:esm:*:*:*", "reference_id": "cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:esm:*:*:*", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:esm:*:*:*" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*", "reference_id": "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*", "reference_id": "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:canonical:ubuntu_linux:17.10:*:*:*:*:*:*:*", "reference_id": "cpe:2.3:o:canonical:ubuntu_linux:17.10:*:*:*:*:*:*:*", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:canonical:ubuntu_linux:17.10:*:*:*:*:*:*:*" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*", "reference_id": "cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*", "reference_id": "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*", "reference_id": "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2017-16548", "reference_id": "CVE-2017-16548", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv2", "scoring_elements": "AV:N/AC:L/Au:N/C:P/I:P/A:P" }, { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-16548" }, { "reference_url": "https://security.gentoo.org/glsa/201801-16", "reference_id": "GLSA-201801-16", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/201801-16" }, { "reference_url": "https://usn.ubuntu.com/3543-1/", "reference_id": "USN-3543-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/3543-1/" }, { "reference_url": "https://usn.ubuntu.com/3543-2/", "reference_id": "USN-3543-2", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/3543-2/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/1036272?format=api", "purl": "pkg:deb/debian/rsync@3.1.1-3%2Bdeb8u1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1dp2-jcqh-7ket" }, { "vulnerability": "VCID-1snq-bkw3-3kff" }, { "vulnerability": "VCID-472y-7aza-j7c4" }, { "vulnerability": "VCID-4g8w-n139-dfbn" }, { "vulnerability": "VCID-78yq-gu4t-rke9" }, { "vulnerability": "VCID-9d7g-bby6-8fb3" }, { "vulnerability": "VCID-c1ec-hvuv-ckgk" }, { "vulnerability": "VCID-eyjp-7kks-jbfr" }, { "vulnerability": "VCID-h2jt-8ppk-nbh9" }, { "vulnerability": "VCID-m6xx-a91r-sbhu" }, { "vulnerability": "VCID-mr6h-6jrp-gyf3" }, { "vulnerability": "VCID-q576-uw5g-8kh3" }, { "vulnerability": "VCID-smft-ms93-6kf1" }, { "vulnerability": "VCID-y5ep-xtwr-ckg6" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/rsync@3.1.1-3%252Bdeb8u1" }, { "url": "http://public2.vulnerablecode.io/api/packages/1037003?format=api", "purl": "pkg:deb/debian/rsync@3.1.2-1%2Bdeb9u2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1dp2-jcqh-7ket" }, { "vulnerability": "VCID-1snq-bkw3-3kff" }, { "vulnerability": "VCID-472y-7aza-j7c4" }, { "vulnerability": "VCID-4g8w-n139-dfbn" }, { "vulnerability": "VCID-78yq-gu4t-rke9" }, { "vulnerability": "VCID-9d7g-bby6-8fb3" }, { "vulnerability": "VCID-c1ec-hvuv-ckgk" }, { "vulnerability": "VCID-eyjp-7kks-jbfr" }, { "vulnerability": "VCID-h2jt-8ppk-nbh9" }, { "vulnerability": "VCID-m6xx-a91r-sbhu" }, { "vulnerability": "VCID-mr6h-6jrp-gyf3" }, { "vulnerability": "VCID-q576-uw5g-8kh3" }, { "vulnerability": "VCID-smft-ms93-6kf1" }, { "vulnerability": "VCID-y5ep-xtwr-ckg6" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/rsync@3.1.2-1%252Bdeb9u2" }, { "url": "http://public2.vulnerablecode.io/api/packages/1050469?format=api", "purl": "pkg:deb/debian/rsync@3.1.3-6", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-472y-7aza-j7c4" }, { "vulnerability": "VCID-78yq-gu4t-rke9" }, { "vulnerability": "VCID-9d7g-bby6-8fb3" }, { "vulnerability": "VCID-c1ec-hvuv-ckgk" }, { "vulnerability": "VCID-q576-uw5g-8kh3" }, { "vulnerability": "VCID-y5ep-xtwr-ckg6" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/rsync@3.1.3-6" } ], "aliases": [ "CVE-2017-16548" ], "risk_score": 4.5, "exploitability": "0.5", "weighted_severity": "9.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-1snq-bkw3-3kff" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/49843?format=api", "vulnerability_id": "VCID-h2jt-8ppk-nbh9", "summary": "Multiple vulnerabilities have been found in rsync, the worst of\n which could allow remote attackers to bypass access restrictions.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-17433.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.8", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-17433.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2017-17433", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.01555", "scoring_system": "epss", "scoring_elements": "0.81371", "published_at": "2026-04-01T12:55:00Z" }, { "value": "0.01555", "scoring_system": "epss", "scoring_elements": "0.81475", "published_at": "2026-04-18T12:55:00Z" }, { "value": "0.01555", "scoring_system": "epss", "scoring_elements": "0.81435", "published_at": "2026-04-09T12:55:00Z" }, { "value": "0.01555", "scoring_system": "epss", "scoring_elements": "0.81457", "published_at": "2026-04-11T12:55:00Z" }, { "value": "0.01555", "scoring_system": "epss", "scoring_elements": "0.81444", "published_at": "2026-04-12T12:55:00Z" }, { "value": "0.01555", "scoring_system": "epss", "scoring_elements": "0.81437", "published_at": "2026-04-13T12:55:00Z" }, { "value": "0.01555", "scoring_system": "epss", "scoring_elements": "0.81474", "published_at": "2026-04-16T12:55:00Z" }, { "value": "0.01555", "scoring_system": "epss", "scoring_elements": "0.8138", "published_at": "2026-04-02T12:55:00Z" }, { "value": "0.01555", "scoring_system": "epss", "scoring_elements": "0.81403", "published_at": "2026-04-04T12:55:00Z" }, { "value": "0.01555", "scoring_system": "epss", "scoring_elements": "0.81401", "published_at": "2026-04-07T12:55:00Z" }, { "value": "0.01555", "scoring_system": "epss", "scoring_elements": "0.8143", "published_at": "2026-04-08T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2017-17433" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1522874#c4", "reference_id": "", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1522874#c4" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16548", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16548" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17433", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17433" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17434", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17434" }, { "reference_url": "http://security.cucumberlinux.com/security/details.php?id=169", "reference_id": "", "reference_type": "", "scores": [], "url": "http://security.cucumberlinux.com/security/details.php?id=169" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.9", "scoring_system": "cvssv2", "scoring_elements": "AV:N/AC:M/Au:S/C:P/I:P/A:N" }, { "value": "5.4", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://git.samba.org/?p=rsync.git%3Ba=commit%3Bh=3e06d40029cfdce9d0f73d87cfd4edaf54be9c51", "reference_id": "", "reference_type": "", "scores": [], "url": "https://git.samba.org/?p=rsync.git%3Ba=commit%3Bh=3e06d40029cfdce9d0f73d87cfd4edaf54be9c51" }, { "reference_url": "https://lists.debian.org/debian-lts-announce/2017/12/msg00020.html", "reference_id": "", "reference_type": "", "scores": [], "url": "https://lists.debian.org/debian-lts-announce/2017/12/msg00020.html" }, { "reference_url": "https://www.debian.org/security/2017/dsa-4068", "reference_id": "", "reference_type": "", "scores": [], "url": "https://www.debian.org/security/2017/dsa-4068" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1522874", "reference_id": "1522874", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1522874" }, { "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=883667", "reference_id": "883667", "reference_type": "", "scores": [], "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=883667" }, { "reference_url": "https://security.archlinux.org/ASA-201801-21", "reference_id": "ASA-201801-21", "reference_type": "", "scores": [], "url": "https://security.archlinux.org/ASA-201801-21" }, { "reference_url": "https://security.archlinux.org/AVG-542", "reference_id": "AVG-542", "reference_type": "", "scores": [ { "value": "Critical", "scoring_system": "archlinux", "scoring_elements": "" } ], "url": "https://security.archlinux.org/AVG-542" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:samba:rsync:3.1.2:*:*:*:*:*:*:*", "reference_id": "cpe:2.3:a:samba:rsync:3.1.2:*:*:*:*:*:*:*", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:samba:rsync:3.1.2:*:*:*:*:*:*:*" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*", "reference_id": "cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*", "reference_id": "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*", "reference_id": "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2017-17433", "reference_id": "CVE-2017-17433", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv2", "scoring_elements": "AV:N/AC:M/Au:N/C:N/I:P/A:N" }, { "value": "3.7", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-17433" }, { "reference_url": "https://security.gentoo.org/glsa/201801-16", "reference_id": "GLSA-201801-16", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/201801-16" }, { "reference_url": "https://usn.ubuntu.com/3506-1/", "reference_id": "USN-3506-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/3506-1/" }, { "reference_url": "https://usn.ubuntu.com/3506-2/", "reference_id": "USN-3506-2", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/3506-2/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/1036272?format=api", "purl": "pkg:deb/debian/rsync@3.1.1-3%2Bdeb8u1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1dp2-jcqh-7ket" }, { "vulnerability": "VCID-1snq-bkw3-3kff" }, { "vulnerability": "VCID-472y-7aza-j7c4" }, { "vulnerability": "VCID-4g8w-n139-dfbn" }, { "vulnerability": "VCID-78yq-gu4t-rke9" }, { "vulnerability": "VCID-9d7g-bby6-8fb3" }, { "vulnerability": "VCID-c1ec-hvuv-ckgk" }, { "vulnerability": "VCID-eyjp-7kks-jbfr" }, { "vulnerability": "VCID-h2jt-8ppk-nbh9" }, { "vulnerability": "VCID-m6xx-a91r-sbhu" }, { "vulnerability": "VCID-mr6h-6jrp-gyf3" }, { "vulnerability": "VCID-q576-uw5g-8kh3" }, { "vulnerability": "VCID-smft-ms93-6kf1" }, { "vulnerability": "VCID-y5ep-xtwr-ckg6" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/rsync@3.1.1-3%252Bdeb8u1" }, { "url": "http://public2.vulnerablecode.io/api/packages/1037003?format=api", "purl": "pkg:deb/debian/rsync@3.1.2-1%2Bdeb9u2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1dp2-jcqh-7ket" }, { "vulnerability": "VCID-1snq-bkw3-3kff" }, { "vulnerability": "VCID-472y-7aza-j7c4" }, { "vulnerability": "VCID-4g8w-n139-dfbn" }, { "vulnerability": "VCID-78yq-gu4t-rke9" }, { "vulnerability": "VCID-9d7g-bby6-8fb3" }, { "vulnerability": "VCID-c1ec-hvuv-ckgk" }, { "vulnerability": "VCID-eyjp-7kks-jbfr" }, { "vulnerability": "VCID-h2jt-8ppk-nbh9" }, { "vulnerability": "VCID-m6xx-a91r-sbhu" }, { "vulnerability": "VCID-mr6h-6jrp-gyf3" }, { "vulnerability": "VCID-q576-uw5g-8kh3" }, { "vulnerability": "VCID-smft-ms93-6kf1" }, { "vulnerability": "VCID-y5ep-xtwr-ckg6" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/rsync@3.1.2-1%252Bdeb9u2" }, { "url": "http://public2.vulnerablecode.io/api/packages/1050469?format=api", "purl": "pkg:deb/debian/rsync@3.1.3-6", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-472y-7aza-j7c4" }, { "vulnerability": "VCID-78yq-gu4t-rke9" }, { "vulnerability": "VCID-9d7g-bby6-8fb3" }, { "vulnerability": "VCID-c1ec-hvuv-ckgk" }, { "vulnerability": "VCID-q576-uw5g-8kh3" }, { "vulnerability": "VCID-y5ep-xtwr-ckg6" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/rsync@3.1.3-6" } ], "aliases": [ "CVE-2017-17433" ], "risk_score": 4.5, "exploitability": "0.5", "weighted_severity": "9.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-h2jt-8ppk-nbh9" } ], "risk_score": "4.5", "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/rsync@3.1.2-1%252Bdeb9u2" }