Django REST framework

Package Instance

Lookup for vulnerable packages by Package URL.

Purlpkg:deb/debian/libvorbis@1.1.2.dfsg-1.2
Typedeb
Namespacedebian
Namelibvorbis
Version1.1.2.dfsg-1.2
Qualifiers
Subpath
Is_vulnerabletrue
Next_non_vulnerable_version1.3.6-2
Latest_non_vulnerable_version1.3.6-2
Affected_by_vulnerabilities
0
url VCID-1ntd-28nj-cuex
vulnerability_id VCID-1ntd-28nj-cuex
summary multiple issues
references
0
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11333
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11333
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14632
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14632
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14633
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14633
3
reference_url https://security.archlinux.org/ASA-201803-12
reference_id ASA-201803-12
reference_type
scores
url https://security.archlinux.org/ASA-201803-12
4
reference_url https://security.archlinux.org/ASA-201803-21
reference_id ASA-201803-21
reference_type
scores
url https://security.archlinux.org/ASA-201803-21
5
reference_url https://security.archlinux.org/AVG-367
reference_id AVG-367
reference_type
scores
0
value Critical
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-367
6
reference_url https://security.archlinux.org/AVG-658
reference_id AVG-658
reference_type
scores
0
value Critical
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-658
fixed_packages
0
url pkg:deb/debian/libvorbis@1.3.5-4%2Bdeb9u2
purl pkg:deb/debian/libvorbis@1.3.5-4%2Bdeb9u2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ntd-28nj-cuex
1
vulnerability VCID-6dfq-gbf6-7fc7
2
vulnerability VCID-kad4-b6ez-y3dx
3
vulnerability VCID-yw14-7xmq-g3e6
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/libvorbis@1.3.5-4%252Bdeb9u2
1
url pkg:deb/debian/libvorbis@1.3.6-2
purl pkg:deb/debian/libvorbis@1.3.6-2
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/libvorbis@1.3.6-2
aliases CVE-2017-14632
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-1ntd-28nj-cuex
1
url VCID-6dfq-gbf6-7fc7
vulnerability_id VCID-6dfq-gbf6-7fc7
summary multiple issues
references
0
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11333
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11333
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14632
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14632
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14633
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14633
3
reference_url https://security.archlinux.org/ASA-201803-12
reference_id ASA-201803-12
reference_type
scores
url https://security.archlinux.org/ASA-201803-12
4
reference_url https://security.archlinux.org/AVG-367
reference_id AVG-367
reference_type
scores
0
value Critical
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-367
fixed_packages
0
url pkg:deb/debian/libvorbis@1.3.5-4%2Bdeb9u2
purl pkg:deb/debian/libvorbis@1.3.5-4%2Bdeb9u2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ntd-28nj-cuex
1
vulnerability VCID-6dfq-gbf6-7fc7
2
vulnerability VCID-kad4-b6ez-y3dx
3
vulnerability VCID-yw14-7xmq-g3e6
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/libvorbis@1.3.5-4%252Bdeb9u2
1
url pkg:deb/debian/libvorbis@1.3.6-2
purl pkg:deb/debian/libvorbis@1.3.6-2
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/libvorbis@1.3.6-2
aliases CVE-2017-11333
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-6dfq-gbf6-7fc7
2
url VCID-j8zw-dg26-hfbe
vulnerability_id VCID-j8zw-dg26-hfbe
summary 
Mozilla upgraded several third party libraries used in media
rendering to address multiple memory safety and stability bugs
identified by members of the Mozilla community.  Some of the bugs
discovered could potentially be used by an attacker to crash a
victim's browser and execute arbitrary code on their
computer.  liboggz, libvorbis,
and liboggplay were all upgraded to address these
issues.Audio and video capabilities were added in Firefox 3.5
so prior releases of Firefox were not affected.
references
0
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3379
reference_id CVE-2009-3379
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3379
1
reference_url https://www.mozilla.org/en-US/security/advisories/mfsa2009-63
reference_id mfsa2009-63
reference_type
scores
0
value critical
scoring_system generic_textual
scoring_elements
url https://www.mozilla.org/en-US/security/advisories/mfsa2009-63
fixed_packages
0
url pkg:deb/debian/libvorbis@1.3.1-1%2Bsqueeze1
purl pkg:deb/debian/libvorbis@1.3.1-1%2Bsqueeze1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ntd-28nj-cuex
1
vulnerability VCID-6dfq-gbf6-7fc7
2
vulnerability VCID-kad4-b6ez-y3dx
3
vulnerability VCID-nbbh-ws5y-3uh4
4
vulnerability VCID-yw14-7xmq-g3e6
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/libvorbis@1.3.1-1%252Bsqueeze1
aliases CVE-2009-3379
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-j8zw-dg26-hfbe
3
url VCID-k4pn-yxd9-h3ad
vulnerability_id VCID-k4pn-yxd9-h3ad
summary 
Mozilla upgraded several third party libraries used in media
rendering to address multiple memory safety and stability bugs
identified by members of the Mozilla community.  Some of the bugs
discovered could potentially be used by an attacker to crash a
victim's browser and execute arbitrary code on their
computer.  liboggz, libvorbis,
and liboggplay were all upgraded to address these
issues.Audio and video capabilities were added in Firefox 3.5
so prior releases of Firefox were not affected.
references
0
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2663
reference_id CVE-2009-2663
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2663
1
reference_url https://www.mozilla.org/en-US/security/advisories/mfsa2009-45
reference_id mfsa2009-45
reference_type
scores
0
value critical
scoring_system generic_textual
scoring_elements
url https://www.mozilla.org/en-US/security/advisories/mfsa2009-45
2
reference_url https://www.mozilla.org/en-US/security/advisories/mfsa2009-63
reference_id mfsa2009-63
reference_type
scores
0
value critical
scoring_system generic_textual
scoring_elements
url https://www.mozilla.org/en-US/security/advisories/mfsa2009-63
fixed_packages
0
url pkg:deb/debian/libvorbis@1.3.1-1%2Bsqueeze1
purl pkg:deb/debian/libvorbis@1.3.1-1%2Bsqueeze1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ntd-28nj-cuex
1
vulnerability VCID-6dfq-gbf6-7fc7
2
vulnerability VCID-kad4-b6ez-y3dx
3
vulnerability VCID-nbbh-ws5y-3uh4
4
vulnerability VCID-yw14-7xmq-g3e6
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/libvorbis@1.3.1-1%252Bsqueeze1
aliases CVE-2009-2663
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-k4pn-yxd9-h3ad
4
url VCID-kad4-b6ez-y3dx
vulnerability_id VCID-kad4-b6ez-y3dx
summary multiple issues
references
0
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11333
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11333
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14632
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14632
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14633
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14633
3
reference_url https://security.archlinux.org/ASA-201803-12
reference_id ASA-201803-12
reference_type
scores
url https://security.archlinux.org/ASA-201803-12
4
reference_url https://security.archlinux.org/ASA-201803-21
reference_id ASA-201803-21
reference_type
scores
url https://security.archlinux.org/ASA-201803-21
5
reference_url https://security.archlinux.org/AVG-367
reference_id AVG-367
reference_type
scores
0
value Critical
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-367
6
reference_url https://security.archlinux.org/AVG-658
reference_id AVG-658
reference_type
scores
0
value Critical
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-658
fixed_packages
0
url pkg:deb/debian/libvorbis@1.3.5-4%2Bdeb9u2
purl pkg:deb/debian/libvorbis@1.3.5-4%2Bdeb9u2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ntd-28nj-cuex
1
vulnerability VCID-6dfq-gbf6-7fc7
2
vulnerability VCID-kad4-b6ez-y3dx
3
vulnerability VCID-yw14-7xmq-g3e6
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/libvorbis@1.3.5-4%252Bdeb9u2
1
url pkg:deb/debian/libvorbis@1.3.6-2
purl pkg:deb/debian/libvorbis@1.3.6-2
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/libvorbis@1.3.6-2
aliases CVE-2017-14633
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-kad4-b6ez-y3dx
5
url VCID-nbbh-ws5y-3uh4
vulnerability_id VCID-nbbh-ws5y-3uh4
summary 
Security researcher regenrecht reported via
TippingPoint's Zero Day Initiative the possibility of memory corruption during
the decoding of Ogg Vorbis files. This can cause a crash during decoding and has
the potential for remote code execution.
references
0
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0444
reference_id CVE-2012-0444
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0444
1
reference_url https://www.mozilla.org/en-US/security/advisories/mfsa2012-07
reference_id mfsa2012-07
reference_type
scores
0
value critical
scoring_system generic_textual
scoring_elements
url https://www.mozilla.org/en-US/security/advisories/mfsa2012-07
fixed_packages
0
url pkg:deb/debian/libvorbis@1.3.2-1.3
purl pkg:deb/debian/libvorbis@1.3.2-1.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ntd-28nj-cuex
1
vulnerability VCID-6dfq-gbf6-7fc7
2
vulnerability VCID-kad4-b6ez-y3dx
3
vulnerability VCID-yw14-7xmq-g3e6
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/libvorbis@1.3.2-1.3
aliases CVE-2012-0444
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-nbbh-ws5y-3uh4
6
url VCID-yw14-7xmq-g3e6
vulnerability_id VCID-yw14-7xmq-g3e6
summary An out of bounds memory write while processing Vorbis audio data was reported through the Pwn2Own contest.
references
0
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-5146
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-5146
1
reference_url https://security.archlinux.org/ASA-201803-12
reference_id ASA-201803-12
reference_type
scores
url https://security.archlinux.org/ASA-201803-12
2
reference_url https://security.archlinux.org/ASA-201803-13
reference_id ASA-201803-13
reference_type
scores
url https://security.archlinux.org/ASA-201803-13
3
reference_url https://security.archlinux.org/ASA-201803-21
reference_id ASA-201803-21
reference_type
scores
url https://security.archlinux.org/ASA-201803-21
4
reference_url https://security.archlinux.org/ASA-201803-22
reference_id ASA-201803-22
reference_type
scores
url https://security.archlinux.org/ASA-201803-22
5
reference_url https://security.archlinux.org/AVG-367
reference_id AVG-367
reference_type
scores
0
value Critical
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-367
6
reference_url https://security.archlinux.org/AVG-657
reference_id AVG-657
reference_type
scores
0
value Critical
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-657
7
reference_url https://security.archlinux.org/AVG-658
reference_id AVG-658
reference_type
scores
0
value Critical
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-658
8
reference_url https://security.archlinux.org/AVG-663
reference_id AVG-663
reference_type
scores
0
value Critical
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-663
9
reference_url https://www.mozilla.org/en-US/security/advisories/mfsa2018-08
reference_id mfsa2018-08
reference_type
scores
0
value critical
scoring_system generic_textual
scoring_elements
url https://www.mozilla.org/en-US/security/advisories/mfsa2018-08
10
reference_url https://www.mozilla.org/en-US/security/advisories/mfsa2018-09
reference_id mfsa2018-09
reference_type
scores
0
value critical
scoring_system generic_textual
scoring_elements
url https://www.mozilla.org/en-US/security/advisories/mfsa2018-09
fixed_packages
0
url pkg:deb/debian/libvorbis@1.3.4-2%2Bdeb8u1
purl pkg:deb/debian/libvorbis@1.3.4-2%2Bdeb8u1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ntd-28nj-cuex
1
vulnerability VCID-6dfq-gbf6-7fc7
2
vulnerability VCID-kad4-b6ez-y3dx
3
vulnerability VCID-yw14-7xmq-g3e6
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/libvorbis@1.3.4-2%252Bdeb8u1
1
url pkg:deb/debian/libvorbis@1.3.5-4%2Bdeb9u2
purl pkg:deb/debian/libvorbis@1.3.5-4%2Bdeb9u2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ntd-28nj-cuex
1
vulnerability VCID-6dfq-gbf6-7fc7
2
vulnerability VCID-kad4-b6ez-y3dx
3
vulnerability VCID-yw14-7xmq-g3e6
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/libvorbis@1.3.5-4%252Bdeb9u2
2
url pkg:deb/debian/libvorbis@1.3.6-2
purl pkg:deb/debian/libvorbis@1.3.6-2
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/libvorbis@1.3.6-2
aliases CVE-2018-5146
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-yw14-7xmq-g3e6
Fixing_vulnerabilities
Risk_scorenull
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:deb/debian/libvorbis@1.1.2.dfsg-1.2