Lookup for vulnerable packages by Package URL.

Purlpkg:deb/debian/bacula@2.4.4-1
Typedeb
Namespacedebian
Namebacula
Version2.4.4-1
Qualifiers
Subpath
Is_vulnerabletrue
Next_non_vulnerable_version9.6.7-3
Latest_non_vulnerable_version9.6.7-3
Affected_by_vulnerabilities
0
url VCID-dasb-atv1-53ck
vulnerability_id VCID-dasb-atv1-53ck
summary In Bareos Director less than or equal to 16.2.10, 17.2.9, 18.2.8, and 19.2.7, a heap overflow allows a malicious client to corrupt the director's memory via oversized digest strings sent during initialization of a verify job. Disabling verify jobs mitigates the problem. This issue is also patched in Bareos versions 19.2.8, 18.2.9 and 17.2.10.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2020-11061
reference_id
reference_type
scores
0
value 0.00913
scoring_system epss
scoring_elements 0.75805
published_at 2026-04-01T12:55:00Z
1
value 0.00913
scoring_system epss
scoring_elements 0.75808
published_at 2026-04-02T12:55:00Z
2
value 0.00913
scoring_system epss
scoring_elements 0.75841
published_at 2026-04-04T12:55:00Z
3
value 0.00913
scoring_system epss
scoring_elements 0.75819
published_at 2026-04-07T12:55:00Z
4
value 0.00913
scoring_system epss
scoring_elements 0.75852
published_at 2026-04-08T12:55:00Z
5
value 0.00913
scoring_system epss
scoring_elements 0.75864
published_at 2026-04-09T12:55:00Z
6
value 0.00913
scoring_system epss
scoring_elements 0.75888
published_at 2026-04-11T12:55:00Z
7
value 0.00913
scoring_system epss
scoring_elements 0.75869
published_at 2026-04-12T12:55:00Z
8
value 0.00913
scoring_system epss
scoring_elements 0.75862
published_at 2026-04-13T12:55:00Z
9
value 0.00913
scoring_system epss
scoring_elements 0.75899
published_at 2026-04-16T12:55:00Z
10
value 0.00913
scoring_system epss
scoring_elements 0.75903
published_at 2026-04-18T12:55:00Z
11
value 0.00913
scoring_system epss
scoring_elements 0.75889
published_at 2026-04-21T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2020-11061
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-11061
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-11061
fixed_packages
0
url pkg:deb/debian/bacula@9.6.7-3
purl pkg:deb/debian/bacula@9.6.7-3
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/bacula@9.6.7-3
aliases CVE-2020-11061
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-dasb-atv1-53ck
1
url VCID-p2nz-7xyf-jqbw
vulnerability_id VCID-p2nz-7xyf-jqbw
summary
A vulnerability in Bacula may allow remote attackers to obtain
    sensitive information.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-4430.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-4430.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2012-4430
reference_id
reference_type
scores
0
value 0.00607
scoring_system epss
scoring_elements 0.69693
published_at 2026-04-21T12:55:00Z
1
value 0.00607
scoring_system epss
scoring_elements 0.69595
published_at 2026-04-01T12:55:00Z
2
value 0.00607
scoring_system epss
scoring_elements 0.69608
published_at 2026-04-02T12:55:00Z
3
value 0.00607
scoring_system epss
scoring_elements 0.69624
published_at 2026-04-04T12:55:00Z
4
value 0.00607
scoring_system epss
scoring_elements 0.69603
published_at 2026-04-07T12:55:00Z
5
value 0.00607
scoring_system epss
scoring_elements 0.69654
published_at 2026-04-08T12:55:00Z
6
value 0.00607
scoring_system epss
scoring_elements 0.6967
published_at 2026-04-09T12:55:00Z
7
value 0.00607
scoring_system epss
scoring_elements 0.69692
published_at 2026-04-11T12:55:00Z
8
value 0.00607
scoring_system epss
scoring_elements 0.69677
published_at 2026-04-12T12:55:00Z
9
value 0.00607
scoring_system epss
scoring_elements 0.69663
published_at 2026-04-13T12:55:00Z
10
value 0.00607
scoring_system epss
scoring_elements 0.69704
published_at 2026-04-16T12:55:00Z
11
value 0.00607
scoring_system epss
scoring_elements 0.69713
published_at 2026-04-18T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2012-4430
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4430
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4430
3
reference_url http://secunia.com/advisories/50535
reference_id
reference_type
scores
url http://secunia.com/advisories/50535
4
reference_url http://secunia.com/advisories/50808
reference_id
reference_type
scores
url http://secunia.com/advisories/50808
5
reference_url http://sourceforge.net/projects/bacula/files/bacula/5.2.12/ReleaseNotes/view
reference_id
reference_type
scores
url http://sourceforge.net/projects/bacula/files/bacula/5.2.12/ReleaseNotes/view
6
reference_url http://www.bacula.org/en/?page=news
reference_id
reference_type
scores
url http://www.bacula.org/en/?page=news
7
reference_url http://www.bacula.org/git/cgit.cgi/bacula/commit/?id=67debcecd3d530c429e817e1d778e79dcd1db905
reference_id
reference_type
scores
url http://www.bacula.org/git/cgit.cgi/bacula/commit/?id=67debcecd3d530c429e817e1d778e79dcd1db905
8
reference_url http://www.debian.org/security/2012/dsa-2558
reference_id
reference_type
scores
url http://www.debian.org/security/2012/dsa-2558
9
reference_url http://www.mandriva.com/security/advisories?name=MDVSA-2012:166
reference_id
reference_type
scores
url http://www.mandriva.com/security/advisories?name=MDVSA-2012:166
10
reference_url http://www.openwall.com/lists/oss-security/2012/09/14/11
reference_id
reference_type
scores
url http://www.openwall.com/lists/oss-security/2012/09/14/11
11
reference_url http://www.openwall.com/lists/oss-security/2012/09/14/12
reference_id
reference_type
scores
url http://www.openwall.com/lists/oss-security/2012/09/14/12
12
reference_url http://www.openwall.com/lists/oss-security/2012/09/15/2
reference_id
reference_type
scores
url http://www.openwall.com/lists/oss-security/2012/09/15/2
13
reference_url http://www.securityfocus.com/bid/55505
reference_id
reference_type
scores
url http://www.securityfocus.com/bid/55505
14
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=687923
reference_id 687923
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=687923
15
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=857955
reference_id 857955
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=857955
16
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:bacula:bacula:*:*:*:*:*:*:*:*
reference_id cpe:2.3:a:bacula:bacula:*:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:bacula:bacula:*:*:*:*:*:*:*:*
17
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:debian:debian_linux:6.0:*:*:*:*:*:*:*
reference_id cpe:2.3:o:debian:debian_linux:6.0:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:debian:debian_linux:6.0:*:*:*:*:*:*:*
18
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*
reference_id cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*
19
reference_url https://nvd.nist.gov/vuln/detail/CVE-2012-4430
reference_id CVE-2012-4430
reference_type
scores
0
value 4.0
scoring_system cvssv2
scoring_elements AV:N/AC:L/Au:S/C:P/I:N/A:N
url https://nvd.nist.gov/vuln/detail/CVE-2012-4430
20
reference_url https://security.gentoo.org/glsa/201405-11
reference_id GLSA-201405-11
reference_type
scores
url https://security.gentoo.org/glsa/201405-11
fixed_packages
0
url pkg:deb/debian/bacula@5.2.6%2Bdfsg-9
purl pkg:deb/debian/bacula@5.2.6%2Bdfsg-9
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-dasb-atv1-53ck
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/bacula@5.2.6%252Bdfsg-9
aliases CVE-2012-4430
risk_score 1.8
exploitability 0.5
weighted_severity 3.6
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-p2nz-7xyf-jqbw
2
url VCID-v7mu-11py-d7ek
vulnerability_id VCID-v7mu-11py-d7ek
summary
A vulnerability in Bacula may allow local attackers to obtain sensitive
    information.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2007-5626
reference_id
reference_type
scores
0
value 0.00036
scoring_system epss
scoring_elements 0.10546
published_at 2026-04-01T12:55:00Z
1
value 0.00036
scoring_system epss
scoring_elements 0.1069
published_at 2026-04-02T12:55:00Z
2
value 0.00036
scoring_system epss
scoring_elements 0.10753
published_at 2026-04-04T12:55:00Z
3
value 0.00036
scoring_system epss
scoring_elements 0.10613
published_at 2026-04-07T12:55:00Z
4
value 0.00036
scoring_system epss
scoring_elements 0.10688
published_at 2026-04-08T12:55:00Z
5
value 0.00036
scoring_system epss
scoring_elements 0.10744
published_at 2026-04-09T12:55:00Z
6
value 0.00036
scoring_system epss
scoring_elements 0.10758
published_at 2026-04-11T12:55:00Z
7
value 0.00036
scoring_system epss
scoring_elements 0.10726
published_at 2026-04-12T12:55:00Z
8
value 0.00036
scoring_system epss
scoring_elements 0.10702
published_at 2026-04-13T12:55:00Z
9
value 0.00036
scoring_system epss
scoring_elements 0.10563
published_at 2026-04-16T12:55:00Z
10
value 0.00036
scoring_system epss
scoring_elements 0.10579
published_at 2026-04-18T12:55:00Z
11
value 0.00036
scoring_system epss
scoring_elements 0.10707
published_at 2026-04-21T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2007-5626
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5626
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5626
2
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=446809
reference_id 446809
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=446809
3
reference_url https://security.gentoo.org/glsa/200807-10
reference_id GLSA-200807-10
reference_type
scores
url https://security.gentoo.org/glsa/200807-10
fixed_packages
0
url pkg:deb/debian/bacula@5.0.2-2.2%2Bsqueeze1
purl pkg:deb/debian/bacula@5.0.2-2.2%2Bsqueeze1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-dasb-atv1-53ck
1
vulnerability VCID-p2nz-7xyf-jqbw
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/bacula@5.0.2-2.2%252Bsqueeze1
aliases CVE-2007-5626
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-v7mu-11py-d7ek
Fixing_vulnerabilities
0
url VCID-k9yc-qbqn-uyaf
vulnerability_id VCID-k9yc-qbqn-uyaf
summary bacula-common: Insecure temporary file use in autochangers (symlink attack)
references
0
reference_url http://lists.debian.org/debian-devel/2008/08/msg00347.html
reference_id
reference_type
scores
url http://lists.debian.org/debian-devel/2008/08/msg00347.html
1
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-5373.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-5373.json
2
reference_url https://api.first.org/data/v1/epss?cve=CVE-2008-5373
reference_id
reference_type
scores
0
value 0.00034
scoring_system epss
scoring_elements 0.09978
published_at 2026-04-01T12:55:00Z
1
value 0.00034
scoring_system epss
scoring_elements 0.10099
published_at 2026-04-02T12:55:00Z
2
value 0.00034
scoring_system epss
scoring_elements 0.10162
published_at 2026-04-04T12:55:00Z
3
value 0.00034
scoring_system epss
scoring_elements 0.10057
published_at 2026-04-07T12:55:00Z
4
value 0.00034
scoring_system epss
scoring_elements 0.10133
published_at 2026-04-08T12:55:00Z
5
value 0.00034
scoring_system epss
scoring_elements 0.10194
published_at 2026-04-09T12:55:00Z
6
value 0.00034
scoring_system epss
scoring_elements 0.10233
published_at 2026-04-11T12:55:00Z
7
value 0.00125
scoring_system epss
scoring_elements 0.31746
published_at 2026-04-21T12:55:00Z
8
value 0.00125
scoring_system epss
scoring_elements 0.318
published_at 2026-04-12T12:55:00Z
9
value 0.00125
scoring_system epss
scoring_elements 0.31765
published_at 2026-04-13T12:55:00Z
10
value 0.00125
scoring_system epss
scoring_elements 0.31797
published_at 2026-04-16T12:55:00Z
11
value 0.00125
scoring_system epss
scoring_elements 0.31775
published_at 2026-04-18T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2008-5373
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5373
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5373
4
reference_url http://uvw.ru/report.sid.txt
reference_id
reference_type
scores
url http://uvw.ru/report.sid.txt
5
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=475469
reference_id 475469
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=475469
6
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=509301
reference_id 509301
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=509301
7
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:bacula:bacula:2.4.2:*:*:*:*:*:*:*
reference_id cpe:2.3:a:bacula:bacula:2.4.2:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:bacula:bacula:2.4.2:*:*:*:*:*:*:*
8
reference_url https://nvd.nist.gov/vuln/detail/CVE-2008-5373
reference_id CVE-2008-5373
reference_type
scores
0
value 6.9
scoring_system cvssv2
scoring_elements AV:L/AC:M/Au:N/C:C/I:C/A:C
url https://nvd.nist.gov/vuln/detail/CVE-2008-5373
fixed_packages
0
url pkg:deb/debian/bacula@2.4.4-1
purl pkg:deb/debian/bacula@2.4.4-1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-dasb-atv1-53ck
1
vulnerability VCID-p2nz-7xyf-jqbw
2
vulnerability VCID-v7mu-11py-d7ek
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/bacula@2.4.4-1
aliases CVE-2008-5373
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-k9yc-qbqn-uyaf
Risk_score1.8
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:deb/debian/bacula@2.4.4-1