Package Instance
Lookup for vulnerable packages by Package URL.
GET /api/packages/110232?format=api
{ "url": "http://public2.vulnerablecode.io/api/packages/110232?format=api", "purl": "pkg:rpm/redhat/openssh@7.4p1-11?arch=el7", "type": "rpm", "namespace": "redhat", "name": "openssh", "version": "7.4p1-11", "qualifiers": { "arch": "el7" }, "subpath": "", "is_vulnerable": true, "next_non_vulnerable_version": null, "latest_non_vulnerable_version": null, "affected_by_vulnerabilities": [ { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/84974?format=api", "vulnerability_id": "VCID-11sf-sq1n-8ybk", "summary": "openssh: Denial of service via very long passwords", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6515.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6515.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2016-6515", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.81624", "scoring_system": "epss", "scoring_elements": "0.99185", "published_at": "2026-04-13T12:55:00Z" }, { "value": "0.81624", "scoring_system": "epss", "scoring_elements": "0.99184", "published_at": "2026-04-07T12:55:00Z" }, { "value": "0.81624", "scoring_system": "epss", "scoring_elements": "0.99186", "published_at": "2026-04-16T12:55:00Z" }, { "value": "0.81624", "scoring_system": "epss", "scoring_elements": "0.99188", "published_at": "2026-04-18T12:55:00Z" }, { "value": "0.82549", "scoring_system": "epss", "scoring_elements": "0.99238", "published_at": "2026-04-26T12:55:00Z" }, { "value": "0.82549", "scoring_system": "epss", "scoring_elements": "0.9924", "published_at": "2026-04-29T12:55:00Z" }, { "value": "0.82549", "scoring_system": "epss", "scoring_elements": "0.99235", "published_at": "2026-04-21T12:55:00Z" }, { "value": "0.85051", "scoring_system": "epss", "scoring_elements": "0.99345", "published_at": "2026-04-02T12:55:00Z" }, { "value": "0.85051", "scoring_system": "epss", "scoring_elements": "0.99347", "published_at": "2026-04-04T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2016-6515" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6515", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6515" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "5", "scoring_system": "cvssv2", "scoring_elements": "AV:N/AC:L/Au:N/C:N/I:N/A:P" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1364935", "reference_id": "1364935", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1364935" }, { "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=833823", "reference_id": "833823", "reference_type": "", "scores": [], "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=833823" }, { "reference_url": "https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/linux/dos/40888.py", "reference_id": "CVE-2016-6515", "reference_type": "exploit", "scores": [], "url": "https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/linux/dos/40888.py" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2017:2029", "reference_id": "RHSA-2017:2029", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2017:2029" }, { "reference_url": "https://usn.ubuntu.com/3061-1/", "reference_id": "USN-3061-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/3061-1/" } ], "fixed_packages": [], "aliases": [ "CVE-2016-6515" ], "risk_score": 9.6, "exploitability": "2.0", "weighted_severity": "4.8", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-11sf-sq1n-8ybk" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/60627?format=api", "vulnerability_id": "VCID-27t6-mvt2-6kcd", "summary": "Multiple vulnerabilities have been found in OpenSSH, the worst of\n which allows remote attackers to cause Denial of Service.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6210.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6210.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2016-6210", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.90046", "scoring_system": "epss", "scoring_elements": "0.99588", "published_at": "2026-04-29T12:55:00Z" }, { "value": "0.90046", "scoring_system": "epss", "scoring_elements": "0.99586", "published_at": "2026-04-24T12:55:00Z" }, { "value": "0.90046", "scoring_system": "epss", "scoring_elements": "0.99587", "published_at": "2026-04-26T12:55:00Z" }, { "value": "0.92487", "scoring_system": "epss", "scoring_elements": "0.99733", "published_at": "2026-04-04T12:55:00Z" }, { "value": "0.92487", "scoring_system": "epss", "scoring_elements": "0.99734", "published_at": "2026-04-13T12:55:00Z" }, { "value": "0.92487", "scoring_system": "epss", "scoring_elements": "0.99735", "published_at": "2026-04-16T12:55:00Z" }, { "value": "0.92487", "scoring_system": "epss", "scoring_elements": "0.99736", "published_at": "2026-04-18T12:55:00Z" }, { "value": "0.92487", "scoring_system": "epss", "scoring_elements": "0.99737", "published_at": "2026-04-21T12:55:00Z" }, { "value": "0.92487", "scoring_system": "epss", "scoring_elements": "0.99731", "published_at": "2026-04-02T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2016-6210" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6210", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6210" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "5", "scoring_system": "cvssv2", "scoring_elements": "AV:N/AC:L/Au:N/C:P/I:N/A:N" }, { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1357442", "reference_id": "1357442", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1357442" }, { "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=831902", "reference_id": "831902", "reference_type": "", "scores": [], "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=831902" }, { "reference_url": "http://seclists.org/fulldisclosure/2016/Jul/51", "reference_id": "CVE-2016-6210", "reference_type": "exploit", "scores": [], "url": "http://seclists.org/fulldisclosure/2016/Jul/51" }, { "reference_url": "https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/linux/remote/40113.txt", "reference_id": "CVE-2016-6210", "reference_type": "exploit", "scores": [], "url": "https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/linux/remote/40113.txt" }, { "reference_url": "https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/linux/remote/40136.py", "reference_id": "CVE-2016-6210", "reference_type": "exploit", "scores": [], "url": "https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/linux/remote/40136.py" }, { "reference_url": "https://security.gentoo.org/glsa/201612-18", "reference_id": "GLSA-201612-18", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/201612-18" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2017:2029", "reference_id": "RHSA-2017:2029", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2017:2029" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2017:2563", "reference_id": "RHSA-2017:2563", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2017:2563" }, { "reference_url": "https://usn.ubuntu.com/3061-1/", "reference_id": "USN-3061-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/3061-1/" } ], "fixed_packages": [], "aliases": [ "CVE-2016-6210" ], "risk_score": 9.6, "exploitability": "2.0", "weighted_severity": "4.8", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-27t6-mvt2-6kcd" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/83710?format=api", "vulnerability_id": "VCID-c72q-f2cy-eqgc", "summary": "openssh: Out of sequence NEWKEYS message can allow remote attacker to cause denial of service", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10708.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10708.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2016-10708", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.0312", "scoring_system": "epss", "scoring_elements": "0.86783", "published_at": "2026-04-01T12:55:00Z" }, { "value": "0.0312", "scoring_system": "epss", "scoring_elements": "0.86827", "published_at": "2026-04-08T12:55:00Z" }, { "value": "0.0312", "scoring_system": "epss", "scoring_elements": "0.86835", "published_at": "2026-04-09T12:55:00Z" }, { "value": "0.0312", "scoring_system": "epss", "scoring_elements": "0.86848", "published_at": "2026-04-11T12:55:00Z" }, { "value": "0.0312", "scoring_system": "epss", "scoring_elements": "0.86844", "published_at": "2026-04-12T12:55:00Z" }, { "value": "0.0312", "scoring_system": "epss", "scoring_elements": "0.8684", "published_at": "2026-04-13T12:55:00Z" }, { "value": "0.0312", "scoring_system": "epss", "scoring_elements": "0.86857", "published_at": "2026-04-16T12:55:00Z" }, { "value": "0.0312", "scoring_system": "epss", "scoring_elements": "0.86861", "published_at": "2026-04-21T12:55:00Z" }, { "value": "0.0312", "scoring_system": "epss", "scoring_elements": "0.86877", "published_at": "2026-04-24T12:55:00Z" }, { "value": "0.0312", "scoring_system": "epss", "scoring_elements": "0.86884", "published_at": "2026-04-26T12:55:00Z" }, { "value": "0.0312", "scoring_system": "epss", "scoring_elements": "0.86885", "published_at": "2026-04-29T12:55:00Z" }, { "value": "0.0312", "scoring_system": "epss", "scoring_elements": "0.86807", "published_at": "2026-04-07T12:55:00Z" }, { "value": "0.0312", "scoring_system": "epss", "scoring_elements": "0.86813", "published_at": "2026-04-04T12:55:00Z" }, { "value": "0.0312", "scoring_system": "epss", "scoring_elements": "0.86794", "published_at": "2026-04-02T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2016-10708" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10708", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10708" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "http://www.securityfocus.com/bid/102780", "reference_id": "102780", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-28T15:50:42Z/" } ], "url": "http://www.securityfocus.com/bid/102780" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1537929", "reference_id": "1537929", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1537929" }, { "reference_url": "http://blog.swiecki.net/2018/01/fuzzing-tcp-servers.html", "reference_id": "fuzzing-tcp-servers.html", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-28T15:50:42Z/" } ], "url": "http://blog.swiecki.net/2018/01/fuzzing-tcp-servers.html" }, { "reference_url": "https://anongit.mindrot.org/openssh.git/commit/?id=28652bca29046f62c7045e933e6b931de1d16737", "reference_id": "?id=28652bca29046f62c7045e933e6b931de1d16737", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-28T15:50:42Z/" } ], "url": "https://anongit.mindrot.org/openssh.git/commit/?id=28652bca29046f62c7045e933e6b931de1d16737" }, { "reference_url": "https://support.f5.com/csp/article/K32485746?utm_source=f5support&%3Butm_medium=RSS", "reference_id": "K32485746?utm_source=f5support&%3Butm_medium=RSS", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-28T15:50:42Z/" } ], "url": "https://support.f5.com/csp/article/K32485746?utm_source=f5support&%3Butm_medium=RSS" }, { "reference_url": "https://lists.debian.org/debian-lts-announce/2018/01/msg00031.html", "reference_id": "msg00031.html", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-28T15:50:42Z/" } ], "url": "https://lists.debian.org/debian-lts-announce/2018/01/msg00031.html" }, { "reference_url": "https://security.netapp.com/advisory/ntap-20180423-0003/", "reference_id": "ntap-20180423-0003", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-28T15:50:42Z/" } ], "url": "https://security.netapp.com/advisory/ntap-20180423-0003/" }, { "reference_url": "https://www.openssh.com/releasenotes.html", "reference_id": "releasenotes.html", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-28T15:50:42Z/" } ], "url": "https://www.openssh.com/releasenotes.html" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2017:2029", "reference_id": "RHSA-2017:2029", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2017:2029" }, { "reference_url": "https://cert-portal.siemens.com/productcert/pdf/ssa-676336.pdf", "reference_id": "ssa-676336.pdf", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-28T15:50:42Z/" } ], "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-676336.pdf" }, { "reference_url": "https://usn.ubuntu.com/3809-1/", "reference_id": "USN-3809-1", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-28T15:50:42Z/" } ], "url": "https://usn.ubuntu.com/3809-1/" } ], "fixed_packages": [], "aliases": [ "CVE-2016-10708" ], "risk_score": 3.4, "exploitability": "0.5", "weighted_severity": "6.8", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-c72q-f2cy-eqgc" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/84680?format=api", "vulnerability_id": "VCID-qt1x-kyuf-gker", "summary": "openssh: Leak of host private key material to privilege-separated child process via realloc()", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10011.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "2.5", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10011.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2016-10011", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00016", "scoring_system": "epss", "scoring_elements": "0.03769", "published_at": "2026-04-29T12:55:00Z" }, { "value": "0.00016", "scoring_system": "epss", "scoring_elements": "0.03715", "published_at": "2026-04-21T12:55:00Z" }, { "value": "0.00016", "scoring_system": "epss", "scoring_elements": "0.0372", "published_at": "2026-04-24T12:55:00Z" }, { "value": "0.00016", "scoring_system": "epss", "scoring_elements": "0.03722", "published_at": "2026-04-26T12:55:00Z" }, { "value": "0.00017", "scoring_system": "epss", "scoring_elements": "0.03928", "published_at": "2026-04-02T12:55:00Z" }, { "value": "0.00017", "scoring_system": "epss", "scoring_elements": "0.03948", "published_at": "2026-04-07T12:55:00Z" }, { "value": "0.00017", "scoring_system": "epss", "scoring_elements": "0.03954", "published_at": "2026-04-08T12:55:00Z" }, { "value": "0.00017", "scoring_system": "epss", "scoring_elements": "0.03978", "published_at": "2026-04-09T12:55:00Z" }, { "value": "0.00017", "scoring_system": "epss", "scoring_elements": "0.03946", "published_at": "2026-04-11T12:55:00Z" }, { "value": "0.00017", "scoring_system": "epss", "scoring_elements": "0.03929", "published_at": "2026-04-12T12:55:00Z" }, { "value": "0.00017", "scoring_system": "epss", "scoring_elements": "0.03899", "published_at": "2026-04-13T12:55:00Z" }, { "value": "0.00017", "scoring_system": "epss", "scoring_elements": "0.03879", "published_at": "2026-04-16T12:55:00Z" }, { "value": "0.00017", "scoring_system": "epss", "scoring_elements": "0.03889", "published_at": "2026-04-18T12:55:00Z" }, { "value": "0.00017", "scoring_system": "epss", "scoring_elements": "0.03937", "published_at": "2026-04-04T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2016-10011" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10011", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10011" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "1", "scoring_system": "cvssv2", "scoring_elements": "AV:L/AC:H/Au:S/C:P/I:N/A:N" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1406286", "reference_id": "1406286", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1406286" }, { "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=848716", "reference_id": "848716", "reference_type": "", "scores": [], "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=848716" }, { "reference_url": "https://security.archlinux.org/ASA-201612-20", "reference_id": "ASA-201612-20", "reference_type": "", "scores": [], "url": "https://security.archlinux.org/ASA-201612-20" }, { "reference_url": "https://security.archlinux.org/AVG-110", "reference_id": "AVG-110", "reference_type": "", "scores": [ { "value": "Medium", "scoring_system": "archlinux", "scoring_elements": "" } ], "url": "https://security.archlinux.org/AVG-110" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2017:2029", "reference_id": "RHSA-2017:2029", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2017:2029" }, { "reference_url": "https://usn.ubuntu.com/3538-1/", "reference_id": "USN-3538-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/3538-1/" } ], "fixed_packages": [], "aliases": [ "CVE-2016-10011" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-qt1x-kyuf-gker" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/84681?format=api", "vulnerability_id": "VCID-u21t-acnr-dub2", "summary": "openssh: Bounds check can be evaded in the shared memory manager used by pre-authentication compression support", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10012.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.2", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10012.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2016-10012", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00021", "scoring_system": "epss", "scoring_elements": "0.05928", "published_at": "2026-04-29T12:55:00Z" }, { "value": "0.00021", "scoring_system": "epss", "scoring_elements": "0.05689", "published_at": "2026-04-16T12:55:00Z" }, { "value": "0.00021", "scoring_system": "epss", "scoring_elements": "0.05699", "published_at": "2026-04-18T12:55:00Z" }, { "value": "0.00021", "scoring_system": "epss", "scoring_elements": "0.0585", "published_at": "2026-04-21T12:55:00Z" }, { "value": "0.00021", "scoring_system": "epss", "scoring_elements": "0.05882", "published_at": "2026-04-24T12:55:00Z" }, { "value": "0.00021", "scoring_system": "epss", "scoring_elements": "0.05918", "published_at": "2026-04-26T12:55:00Z" }, { "value": "0.00021", "scoring_system": "epss", "scoring_elements": "0.05702", "published_at": "2026-04-07T12:55:00Z" }, { "value": "0.00021", "scoring_system": "epss", "scoring_elements": "0.05742", "published_at": "2026-04-08T12:55:00Z" }, { "value": "0.00021", "scoring_system": "epss", "scoring_elements": "0.05768", "published_at": "2026-04-09T12:55:00Z" }, { "value": "0.00021", "scoring_system": "epss", "scoring_elements": "0.05746", "published_at": "2026-04-11T12:55:00Z" }, { "value": "0.00021", "scoring_system": "epss", "scoring_elements": "0.05738", "published_at": "2026-04-12T12:55:00Z" }, { "value": "0.00021", "scoring_system": "epss", "scoring_elements": "0.05733", "published_at": "2026-04-13T12:55:00Z" }, { "value": "0.00022", "scoring_system": "epss", "scoring_elements": "0.05871", "published_at": "2026-04-02T12:55:00Z" }, { "value": "0.00022", "scoring_system": "epss", "scoring_elements": "0.05904", "published_at": "2026-04-04T12:55:00Z" }, { "value": "0.00022", "scoring_system": "epss", "scoring_elements": "0.05837", "published_at": "2026-04-01T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2016-10012" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10012", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10012" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "3.6", "scoring_system": "cvssv2", "scoring_elements": "AV:N/AC:H/Au:S/C:P/I:P/A:N" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1406293", "reference_id": "1406293", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1406293" }, { "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=848717", "reference_id": "848717", "reference_type": "", "scores": [], "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=848717" }, { "reference_url": "https://security.archlinux.org/ASA-201612-20", "reference_id": "ASA-201612-20", "reference_type": "", "scores": [], "url": "https://security.archlinux.org/ASA-201612-20" }, { "reference_url": "https://security.archlinux.org/AVG-110", "reference_id": "AVG-110", "reference_type": "", "scores": [ { "value": "Medium", "scoring_system": "archlinux", "scoring_elements": "" } ], "url": "https://security.archlinux.org/AVG-110" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2017:2029", "reference_id": "RHSA-2017:2029", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2017:2029" }, { "reference_url": "https://usn.ubuntu.com/3538-1/", "reference_id": "USN-3538-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/3538-1/" } ], "fixed_packages": [], "aliases": [ "CVE-2016-10012" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-u21t-acnr-dub2" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/84678?format=api", "vulnerability_id": "VCID-v1vq-wecd-1ud9", "summary": "openssh: loading of untrusted PKCS#11 modules in ssh-agent", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10009.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.6", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10009.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2016-10009", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.01579", "scoring_system": "epss", "scoring_elements": "0.815", "published_at": "2026-04-01T12:55:00Z" }, { "value": "0.01579", "scoring_system": "epss", "scoring_elements": "0.81643", "published_at": "2026-04-29T12:55:00Z" }, { "value": "0.01579", "scoring_system": "epss", "scoring_elements": "0.8163", "published_at": "2026-04-24T12:55:00Z" }, { "value": "0.01579", "scoring_system": "epss", "scoring_elements": "0.81638", "published_at": "2026-04-26T12:55:00Z" }, { "value": "0.01579", "scoring_system": "epss", "scoring_elements": "0.81511", "published_at": "2026-04-02T12:55:00Z" }, { "value": "0.01579", "scoring_system": "epss", "scoring_elements": "0.81533", "published_at": "2026-04-04T12:55:00Z" }, { "value": "0.01579", "scoring_system": "epss", "scoring_elements": "0.81531", "published_at": "2026-04-07T12:55:00Z" }, { "value": "0.01579", "scoring_system": "epss", "scoring_elements": "0.81559", "published_at": "2026-04-08T12:55:00Z" }, { "value": "0.01579", "scoring_system": "epss", "scoring_elements": "0.81564", "published_at": "2026-04-09T12:55:00Z" }, { "value": "0.01579", "scoring_system": "epss", "scoring_elements": "0.81584", "published_at": "2026-04-11T12:55:00Z" }, { "value": "0.01579", "scoring_system": "epss", "scoring_elements": "0.81572", "published_at": "2026-04-12T12:55:00Z" }, { "value": "0.01579", "scoring_system": "epss", "scoring_elements": "0.81565", "published_at": "2026-04-13T12:55:00Z" }, { "value": "0.01579", "scoring_system": "epss", "scoring_elements": "0.81602", "published_at": "2026-04-16T12:55:00Z" }, { "value": "0.01579", "scoring_system": "epss", "scoring_elements": "0.81604", "published_at": "2026-04-18T12:55:00Z" }, { "value": "0.01579", "scoring_system": "epss", "scoring_elements": "0.81608", "published_at": "2026-04-21T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2016-10009" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10009", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10009" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.6", "scoring_system": "cvssv2", "scoring_elements": "AV:N/AC:H/Au:S/C:P/I:P/A:P" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1406269", "reference_id": "1406269", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1406269" }, { "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=848714", "reference_id": "848714", "reference_type": "", "scores": [], "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=848714" }, { "reference_url": "https://security.archlinux.org/ASA-201612-20", "reference_id": "ASA-201612-20", "reference_type": "", "scores": [], "url": "https://security.archlinux.org/ASA-201612-20" }, { "reference_url": "https://security.archlinux.org/AVG-110", "reference_id": "AVG-110", "reference_type": "", "scores": [ { "value": "Medium", "scoring_system": "archlinux", "scoring_elements": "" } ], "url": "https://security.archlinux.org/AVG-110" }, { "reference_url": "https://bugs.chromium.org/p/project-zero/issues/detail?id=1009", "reference_id": "CVE-2016-10009", "reference_type": "exploit", "scores": [], "url": "https://bugs.chromium.org/p/project-zero/issues/detail?id=1009" }, { "reference_url": "https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/linux/remote/40963.txt", "reference_id": "CVE-2016-10009", "reference_type": "exploit", "scores": [], "url": "https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/linux/remote/40963.txt" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2017:2029", "reference_id": "RHSA-2017:2029", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2017:2029" }, { "reference_url": "https://usn.ubuntu.com/3538-1/", "reference_id": "USN-3538-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/3538-1/" } ], "fixed_packages": [], "aliases": [ "CVE-2016-10009" ], "risk_score": 10.0, "exploitability": "2.0", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-v1vq-wecd-1ud9" } ], "fixing_vulnerabilities": [], "risk_score": "10.0", "resource_url": "http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/openssh@7.4p1-11%3Farch=el7" }