Lookup for vulnerable packages by Package URL.

Purlpkg:rpm/redhat/pidgin@1.5.1-6?arch=el3
Typerpm
Namespaceredhat
Namepidgin
Version1.5.1-6
Qualifiers
arch el3
Subpath
Is_vulnerabletrue
Next_non_vulnerable_versionnull
Latest_non_vulnerable_versionnull
Affected_by_vulnerabilities
0
url VCID-6178-958q-dugb
vulnerability_id VCID-6178-958q-dugb
summary The OSCAR protocol plugin in libpurple in Pidgin before 2.6.3 and Adium before 1.3.7 allows remote attackers to cause a denial of service (application crash) via crafted contact-list data for (1) ICQ and possibly (2) AIM, as demonstrated by the SIM IM client.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-3615.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-3615.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2009-3615
reference_id
reference_type
scores
0
value 0.08411
scoring_system epss
scoring_elements 0.92512
published_at 2026-06-11T12:55:00Z
1
value 0.08411
scoring_system epss
scoring_elements 0.92538
published_at 2026-06-12T12:55:00Z
2
value 0.08411
scoring_system epss
scoring_elements 0.9254
published_at 2026-06-13T12:55:00Z
3
value 0.08411
scoring_system epss
scoring_elements 0.92541
published_at 2026-06-14T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2009-3615
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3615
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3615
3
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=529357
reference_id 529357
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=529357
4
reference_url https://access.redhat.com/errata/RHSA-2009:1535
reference_id RHSA-2009:1535
reference_type
scores
url https://access.redhat.com/errata/RHSA-2009:1535
5
reference_url https://access.redhat.com/errata/RHSA-2009:1536
reference_id RHSA-2009:1536
reference_type
scores
url https://access.redhat.com/errata/RHSA-2009:1536
6
reference_url https://usn.ubuntu.com/886-1/
reference_id USN-886-1
reference_type
scores
url https://usn.ubuntu.com/886-1/
fixed_packages
aliases CVE-2009-3615
risk_score 0.1
exploitability 0.5
weighted_severity 0.1
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-6178-958q-dugb
1
url VCID-r98g-ggwd-j7fk
vulnerability_id VCID-r98g-ggwd-j7fk
summary The msn_slp_sip_recv function in libpurple/protocols/msn/slp.c in the MSN protocol plugin in libpurple in Pidgin before 2.6.2 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via an SLP invite message that lacks certain required fields, as demonstrated by a malformed message from a KMess client.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-3083.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-3083.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2009-3083
reference_id
reference_type
scores
0
value 0.01284
scoring_system epss
scoring_elements 0.80025
published_at 2026-06-11T12:55:00Z
1
value 0.01284
scoring_system epss
scoring_elements 0.80088
published_at 2026-06-12T12:55:00Z
2
value 0.01284
scoring_system epss
scoring_elements 0.80104
published_at 2026-06-13T12:55:00Z
3
value 0.01284
scoring_system epss
scoring_elements 0.80096
published_at 2026-06-14T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2009-3083
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3083
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3083
3
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=521832
reference_id 521832
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=521832
4
reference_url https://access.redhat.com/errata/RHSA-2009:1453
reference_id RHSA-2009:1453
reference_type
scores
url https://access.redhat.com/errata/RHSA-2009:1453
5
reference_url https://access.redhat.com/errata/RHSA-2009:1535
reference_id RHSA-2009:1535
reference_type
scores
url https://access.redhat.com/errata/RHSA-2009:1535
6
reference_url https://usn.ubuntu.com/886-1/
reference_id USN-886-1
reference_type
scores
url https://usn.ubuntu.com/886-1/
fixed_packages
aliases CVE-2009-3083
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-r98g-ggwd-j7fk
2
url VCID-z5vt-kryc-2fer
vulnerability_id VCID-z5vt-kryc-2fer
summary libpurple/protocols/irc/msgs.c in the IRC protocol plugin in libpurple in Pidgin before 2.6.2 allows remote IRC servers to cause a denial of service (NULL pointer dereference and application crash) via a TOPIC message that lacks a topic string.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-2703.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-2703.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2009-2703
reference_id
reference_type
scores
0
value 0.00643
scoring_system epss
scoring_elements 0.71127
published_at 2026-06-11T12:55:00Z
1
value 0.00643
scoring_system epss
scoring_elements 0.71217
published_at 2026-06-12T12:55:00Z
2
value 0.00643
scoring_system epss
scoring_elements 0.7123
published_at 2026-06-13T12:55:00Z
3
value 0.00643
scoring_system epss
scoring_elements 0.71228
published_at 2026-06-14T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2009-2703
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2703
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2703
3
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=521823
reference_id 521823
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=521823
4
reference_url https://access.redhat.com/errata/RHSA-2009:1453
reference_id RHSA-2009:1453
reference_type
scores
url https://access.redhat.com/errata/RHSA-2009:1453
5
reference_url https://access.redhat.com/errata/RHSA-2009:1535
reference_id RHSA-2009:1535
reference_type
scores
url https://access.redhat.com/errata/RHSA-2009:1535
6
reference_url https://usn.ubuntu.com/886-1/
reference_id USN-886-1
reference_type
scores
url https://usn.ubuntu.com/886-1/
fixed_packages
aliases CVE-2009-2703
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-z5vt-kryc-2fer
Fixing_vulnerabilities
Risk_score0.1
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:rpm/redhat/pidgin@1.5.1-6%3Farch=el3