Lookup for vulnerable packages by Package URL.

Purlpkg:deb/debian/clamav@0.86.1-1?distro=trixie
Typedeb
Namespacedebian
Nameclamav
Version0.86.1-1
Qualifiers
distro trixie
Subpath
Is_vulnerablefalse
Next_non_vulnerable_version0.86.2-1
Latest_non_vulnerable_version1.4.4+dfsg-1
Affected_by_vulnerabilities
Fixing_vulnerabilities
0
url VCID-pppa-uub5-gyb6
vulnerability_id VCID-pppa-uub5-gyb6
summary The Quantum archive decompressor in Clam AntiVirus (ClamAV) before 0.86.1 allows remote attackers to cause a denial of service (application crash) via a crafted Quantum archive.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2005-2056
reference_id
reference_type
scores
0
value 0.01101
scoring_system epss
scoring_elements 0.78345
published_at 2026-05-29T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2005-2056
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2056
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2056
2
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=318756
reference_id 318756
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=318756
3
reference_url https://security.gentoo.org/glsa/200506-23
reference_id GLSA-200506-23
reference_type
scores
url https://security.gentoo.org/glsa/200506-23
fixed_packages
0
url pkg:deb/debian/clamav@0.86.1-1?distro=trixie
purl pkg:deb/debian/clamav@0.86.1-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/clamav@0.86.1-1%3Fdistro=trixie
1
url pkg:deb/debian/clamav@0.103.10%2Bdfsg-0%2Bdeb11u1?distro=trixie
purl pkg:deb/debian/clamav@0.103.10%2Bdfsg-0%2Bdeb11u1?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-81rs-8fs7-3yfp
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/clamav@0.103.10%252Bdfsg-0%252Bdeb11u1%3Fdistro=trixie
2
url pkg:deb/debian/clamav@1.4.3%2Bdfsg-1~deb12u2?distro=trixie
purl pkg:deb/debian/clamav@1.4.3%2Bdfsg-1~deb12u2?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-81rs-8fs7-3yfp
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/clamav@1.4.3%252Bdfsg-1~deb12u2%3Fdistro=trixie
3
url pkg:deb/debian/clamav@1.4.3%2Bdfsg-1?distro=trixie
purl pkg:deb/debian/clamav@1.4.3%2Bdfsg-1?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-81rs-8fs7-3yfp
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/clamav@1.4.3%252Bdfsg-1%3Fdistro=trixie
4
url pkg:deb/debian/clamav@1.4.4%2Bdfsg-1?distro=trixie
purl pkg:deb/debian/clamav@1.4.4%2Bdfsg-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/clamav@1.4.4%252Bdfsg-1%3Fdistro=trixie
aliases CVE-2005-2056
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-pppa-uub5-gyb6
1
url VCID-shya-j6d6-7fd5
vulnerability_id VCID-shya-j6d6-7fd5
summary The MS-Expand file handling in Clam AntiVirus (ClamAV) before 0.86 allows remote attackers to cause a denial of service (file descriptor and memory consumption) via a crafted file that causes repeated errors in the cli_msexpand function.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2005-1922
reference_id
reference_type
scores
0
value 0.00739
scoring_system epss
scoring_elements 0.73211
published_at 2026-05-29T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2005-1922
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-1922
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-1922
fixed_packages
0
url pkg:deb/debian/clamav@0.86.1-1?distro=trixie
purl pkg:deb/debian/clamav@0.86.1-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/clamav@0.86.1-1%3Fdistro=trixie
1
url pkg:deb/debian/clamav@0.103.10%2Bdfsg-0%2Bdeb11u1?distro=trixie
purl pkg:deb/debian/clamav@0.103.10%2Bdfsg-0%2Bdeb11u1?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-81rs-8fs7-3yfp
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/clamav@0.103.10%252Bdfsg-0%252Bdeb11u1%3Fdistro=trixie
2
url pkg:deb/debian/clamav@1.4.3%2Bdfsg-1~deb12u2?distro=trixie
purl pkg:deb/debian/clamav@1.4.3%2Bdfsg-1~deb12u2?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-81rs-8fs7-3yfp
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/clamav@1.4.3%252Bdfsg-1~deb12u2%3Fdistro=trixie
3
url pkg:deb/debian/clamav@1.4.3%2Bdfsg-1?distro=trixie
purl pkg:deb/debian/clamav@1.4.3%2Bdfsg-1?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-81rs-8fs7-3yfp
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/clamav@1.4.3%252Bdfsg-1%3Fdistro=trixie
4
url pkg:deb/debian/clamav@1.4.4%2Bdfsg-1?distro=trixie
purl pkg:deb/debian/clamav@1.4.4%2Bdfsg-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/clamav@1.4.4%252Bdfsg-1%3Fdistro=trixie
aliases CVE-2005-1922
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-shya-j6d6-7fd5
Risk_scorenull
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:deb/debian/clamav@0.86.1-1%3Fdistro=trixie