Django REST framework

Lookup for vulnerable packages by Package URL.

Purl pkg:rpm/redhat/automake15@1.5-16.el5?arch=2

Type rpm

Namespace redhat

Name automake15

Version 1.5-16.el5

Qualifiers

arch	2

Subpath

Is_vulnerable true

Next_non_vulnerable_version null

Latest_non_vulnerable_version null

Affected_by_vulnerabilities

url VCID-z2sy-q9qr-1uh2

vulnerability_id VCID-z2sy-q9qr-1uh2

summary The (1) dist or (2) distcheck rules in GNU Automake 1.11.1, 1.10.3, and release branches branch-1-4 through branch-1-9, when producing a distribution tarball for a package that uses Automake, assign insecure permissions (777) to directories in the build tree, which introduces a race condition that allows local users to modify the contents of package files, introduce Trojan horse programs, or conduct other attacks before the build is complete.

references

reference_url	https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-4029.json
reference_id
reference_type
scores
url	https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-4029.json

reference_url

https://api.first.org/data/v1/epss?cve=CVE-2009-4029

reference_id

reference_type

scores

value	0.00716
scoring_system	epss
scoring_elements	0.72747
published_at	2026-06-04T12:55:00Z

url

https://api.first.org/data/v1/epss?cve=CVE-2009-4029

reference_url	https://bugzilla.redhat.com/show_bug.cgi?id=542609
reference_id	542609
reference_type
scores
url	https://bugzilla.redhat.com/show_bug.cgi?id=542609

reference_url	https://security.gentoo.org/glsa/201310-15
reference_id	GLSA-201310-15
reference_type
scores
url	https://security.gentoo.org/glsa/201310-15

reference_url	https://access.redhat.com/errata/RHSA-2010:0321
reference_id	RHSA-2010:0321
reference_type
scores
url	https://access.redhat.com/errata/RHSA-2010:0321

fixed_packages

aliases CVE-2009-4029

risk_score null

exploitability 0.5

weighted_severity 0.0

resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-z2sy-q9qr-1uh2

Fixing_vulnerabilities

Risk_score null

Resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/automake15@1.5-16.el5%3Farch=2

Package Instance