Django REST framework

Package Instance

Lookup for vulnerable packages by Package URL.

Purlpkg:apk/alpine/tiff@4.0.9-r7?arch=armhf&distroversion=v3.8&reponame=main
Typeapk
Namespacealpine
Nametiff
Version4.0.9-r7
Qualifiers
arch armhf
distroversion v3.8
reponame main
Subpath
Is_vulnerablefalse
Next_non_vulnerable_version4.0.10-r0
Latest_non_vulnerable_version4.0.10-r3
Affected_by_vulnerabilities
Fixing_vulnerabilities
0
url VCID-pf7r-7sdb-ayfk
vulnerability_id VCID-pf7r-7sdb-ayfk
summary An issue was discovered in LibTIFF 4.0.9. There are two out-of-bounds writes in cpTags in tools/tiff2bw.c and tools/pal2rgb.c, which can cause a denial of service (application crash) or possibly have unspecified other impact via a crafted image file.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-17101.json
reference_id
reference_type
scores
0
value 4.7
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-17101.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2018-17101
reference_id
reference_type
scores
0
value 0.00539
scoring_system epss
scoring_elements 0.67922
published_at 2026-06-04T12:55:00Z
1
value 0.00539
scoring_system epss
scoring_elements 0.67961
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2018-17101
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11613
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11613
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17095
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17095
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-10963
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-10963
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-15209
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-15209
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-16335
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-16335
7
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-17101
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-17101
8
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-18557
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-18557
9
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-5784
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-5784
10
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-7456
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-7456
11
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-8905
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-8905
12
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 4.4
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
13
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1631078
reference_id 1631078
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1631078
14
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=909037
reference_id 909037
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=909037
15
reference_url https://access.redhat.com/errata/RHSA-2019:2053
reference_id RHSA-2019:2053
reference_type
scores
url https://access.redhat.com/errata/RHSA-2019:2053
16
reference_url https://usn.ubuntu.com/3864-1/
reference_id USN-3864-1
reference_type
scores
url https://usn.ubuntu.com/3864-1/
17
reference_url https://usn.ubuntu.com/3906-2/
reference_id USN-3906-2
reference_type
scores
url https://usn.ubuntu.com/3906-2/
fixed_packages
0
url pkg:apk/alpine/tiff@4.0.9-r7?arch=armhf&distroversion=v3.8&reponame=main
purl pkg:apk/alpine/tiff@4.0.9-r7?arch=armhf&distroversion=v3.8&reponame=main
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/tiff@4.0.9-r7%3Farch=armhf&distroversion=v3.8&reponame=main
aliases CVE-2018-17101
risk_score 2.1
exploitability 0.5
weighted_severity 4.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-pf7r-7sdb-ayfk
1
url VCID-tu3t-rdy1-eqa7
vulnerability_id VCID-tu3t-rdy1-eqa7
summary An issue was discovered in LibTIFF 4.0.9. There is a int32 overflow in multiply_ms in tools/ppm2tiff.c, which can cause a denial of service (crash) or possibly have unspecified other impact via a crafted image file.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-17100.json
reference_id
reference_type
scores
0
value 4.7
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-17100.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2018-17100
reference_id
reference_type
scores
0
value 0.00302
scoring_system epss
scoring_elements 0.53766
published_at 2026-06-04T12:55:00Z
1
value 0.00302
scoring_system epss
scoring_elements 0.53823
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2018-17100
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12900
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12900
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-17000
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-17000
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-17100
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-17100
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-19210
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-19210
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14973
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14973
7
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-17546
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-17546
8
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-7663
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-7663
9
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 3.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
10
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1631069
reference_id 1631069
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1631069
11
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=909038
reference_id 909038
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=909038
12
reference_url https://access.redhat.com/errata/RHSA-2019:2053
reference_id RHSA-2019:2053
reference_type
scores
url https://access.redhat.com/errata/RHSA-2019:2053
13
reference_url https://usn.ubuntu.com/3864-1/
reference_id USN-3864-1
reference_type
scores
url https://usn.ubuntu.com/3864-1/
14
reference_url https://usn.ubuntu.com/3906-2/
reference_id USN-3906-2
reference_type
scores
url https://usn.ubuntu.com/3906-2/
fixed_packages
0
url pkg:apk/alpine/tiff@4.0.9-r7?arch=armhf&distroversion=v3.8&reponame=main
purl pkg:apk/alpine/tiff@4.0.9-r7?arch=armhf&distroversion=v3.8&reponame=main
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/tiff@4.0.9-r7%3Farch=armhf&distroversion=v3.8&reponame=main
aliases CVE-2018-17100
risk_score 2.1
exploitability 0.5
weighted_severity 4.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-tu3t-rdy1-eqa7
2
url VCID-uran-x628-rffb
vulnerability_id VCID-uran-x628-rffb
summary multiple issues
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10779.json
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10779.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2018-10779
reference_id
reference_type
scores
0
value 0.00509
scoring_system epss
scoring_elements 0.66719
published_at 2026-06-04T12:55:00Z
1
value 0.00509
scoring_system epss
scoring_elements 0.6676
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2018-10779
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-10779
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-10779
3
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 3.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
4
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1577311
reference_id 1577311
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1577311
5
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=898359
reference_id 898359
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=898359
6
reference_url https://security.archlinux.org/ASA-201811-18
reference_id ASA-201811-18
reference_type
scores
url https://security.archlinux.org/ASA-201811-18
7
reference_url https://security.archlinux.org/AVG-791
reference_id AVG-791
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-791
8
reference_url https://security.archlinux.org/AVG-816
reference_id AVG-816
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-816
9
reference_url https://access.redhat.com/errata/RHSA-2019:2053
reference_id RHSA-2019:2053
reference_type
scores
url https://access.redhat.com/errata/RHSA-2019:2053
10
reference_url https://usn.ubuntu.com/3906-1/
reference_id USN-3906-1
reference_type
scores
url https://usn.ubuntu.com/3906-1/
11
reference_url https://usn.ubuntu.com/3906-2/
reference_id USN-3906-2
reference_type
scores
url https://usn.ubuntu.com/3906-2/
fixed_packages
0
url pkg:apk/alpine/tiff@4.0.9-r7?arch=armhf&distroversion=v3.8&reponame=main
purl pkg:apk/alpine/tiff@4.0.9-r7?arch=armhf&distroversion=v3.8&reponame=main
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/tiff@4.0.9-r7%3Farch=armhf&distroversion=v3.8&reponame=main
aliases CVE-2018-10779
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-uran-x628-rffb
Risk_scorenull
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:apk/alpine/tiff@4.0.9-r7%3Farch=armhf&distroversion=v3.8&reponame=main