Django REST framework

Lookup for vulnerable packages by Package URL.

Purl pkg:rpm/redhat/libtiff@3.8.2-15?arch=el5_8

Type rpm

Namespace redhat

Name libtiff

Version 3.8.2-15

Qualifiers

arch	el5_8

Subpath

Is_vulnerable true

Next_non_vulnerable_version null

Latest_non_vulnerable_version null

Affected_by_vulnerabilities

url VCID-sdda-nfpd-wkeq

vulnerability_id VCID-sdda-nfpd-wkeq

summary Multiple integer overflows in tiff2pdf in libtiff before 4.0.2 allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted tiff image, which triggers a heap-based buffer overflow.

references

reference_url	https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-2113.json
reference_id
reference_type
scores
url	https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-2113.json

reference_url

https://api.first.org/data/v1/epss?cve=CVE-2012-2113

reference_id

reference_type

scores

value	0.0117
scoring_system	epss
scoring_elements	0.79003
published_at	2026-06-04T12:55:00Z

value	0.0117
scoring_system	epss
scoring_elements	0.7903
published_at	2026-06-05T12:55:00Z

url

https://api.first.org/data/v1/epss?cve=CVE-2012-2113

reference_url	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2113
reference_id
reference_type
scores
url	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2113

reference_url	https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=678140
reference_id	678140
reference_type
scores
url	https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=678140

reference_url	https://bugzilla.redhat.com/show_bug.cgi?id=810551
reference_id	810551
reference_type
scores
url	https://bugzilla.redhat.com/show_bug.cgi?id=810551

reference_url	https://security.gentoo.org/glsa/201209-02
reference_id	GLSA-201209-02
reference_type
scores
url	https://security.gentoo.org/glsa/201209-02

reference_url	https://access.redhat.com/errata/RHSA-2012:1054
reference_id	RHSA-2012:1054
reference_type
scores
url	https://access.redhat.com/errata/RHSA-2012:1054

reference_url	https://usn.ubuntu.com/1498-1/
reference_id	USN-1498-1
reference_type
scores
url	https://usn.ubuntu.com/1498-1/

fixed_packages

aliases CVE-2012-2113

risk_score null

exploitability 0.5

weighted_severity 0.0

resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-sdda-nfpd-wkeq

url VCID-vpnh-b4rq-wqhy

vulnerability_id VCID-vpnh-b4rq-wqhy

summary Integer signedness error in the TIFFReadDirectory function in tif_dirread.c in libtiff 3.9.4 and earlier allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a negative tile depth in a tiff image, which triggers an improper conversion between signed and unsigned types, leading to a heap-based buffer overflow.

references

reference_url	https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-2088.json
reference_id
reference_type
scores
url	https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-2088.json

reference_url

https://api.first.org/data/v1/epss?cve=CVE-2012-2088

reference_id

reference_type

scores

value	0.02978
scoring_system	epss
scoring_elements	0.86777
published_at	2026-06-04T12:55:00Z

value	0.02978
scoring_system	epss
scoring_elements	0.86799
published_at	2026-06-05T12:55:00Z

url

https://api.first.org/data/v1/epss?cve=CVE-2012-2088

reference_url	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2088
reference_id
reference_type
scores
url	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2088

reference_url	https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=678140
reference_id	678140
reference_type
scores
url	https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=678140

reference_url	https://bugzilla.redhat.com/show_bug.cgi?id=832864
reference_id	832864
reference_type
scores
url	https://bugzilla.redhat.com/show_bug.cgi?id=832864

reference_url	https://security.gentoo.org/glsa/201209-02
reference_id	GLSA-201209-02
reference_type
scores
url	https://security.gentoo.org/glsa/201209-02

reference_url	https://access.redhat.com/errata/RHSA-2012:1054
reference_id	RHSA-2012:1054
reference_type
scores
url	https://access.redhat.com/errata/RHSA-2012:1054

reference_url	https://usn.ubuntu.com/1498-1/
reference_id	USN-1498-1
reference_type
scores
url	https://usn.ubuntu.com/1498-1/

fixed_packages

aliases CVE-2012-2088

risk_score null

exploitability 0.5

weighted_severity 0.0

resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-vpnh-b4rq-wqhy

Fixing_vulnerabilities

Risk_score null

Resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/libtiff@3.8.2-15%3Farch=el5_8

Package Instance