Django REST framework

Package Instance

Lookup for vulnerable packages by Package URL.

Purlpkg:deb/debian/libvorbis@1.3.2-1.3
Typedeb
Namespacedebian
Namelibvorbis
Version1.3.2-1.3
Qualifiers
Subpath
Is_vulnerabletrue
Next_non_vulnerable_version1.3.6-2
Latest_non_vulnerable_version1.3.6-2
Affected_by_vulnerabilities
0
url VCID-1ntd-28nj-cuex
vulnerability_id VCID-1ntd-28nj-cuex
summary multiple issues
references
0
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11333
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11333
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14632
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14632
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14633
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14633
3
reference_url https://security.archlinux.org/ASA-201803-12
reference_id ASA-201803-12
reference_type
scores
url https://security.archlinux.org/ASA-201803-12
4
reference_url https://security.archlinux.org/ASA-201803-21
reference_id ASA-201803-21
reference_type
scores
url https://security.archlinux.org/ASA-201803-21
5
reference_url https://security.archlinux.org/AVG-367
reference_id AVG-367
reference_type
scores
0
value Critical
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-367
6
reference_url https://security.archlinux.org/AVG-658
reference_id AVG-658
reference_type
scores
0
value Critical
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-658
fixed_packages
0
url pkg:deb/debian/libvorbis@1.3.5-4%2Bdeb9u2
purl pkg:deb/debian/libvorbis@1.3.5-4%2Bdeb9u2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ntd-28nj-cuex
1
vulnerability VCID-6dfq-gbf6-7fc7
2
vulnerability VCID-kad4-b6ez-y3dx
3
vulnerability VCID-yw14-7xmq-g3e6
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/libvorbis@1.3.5-4%252Bdeb9u2
1
url pkg:deb/debian/libvorbis@1.3.6-2
purl pkg:deb/debian/libvorbis@1.3.6-2
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/libvorbis@1.3.6-2
aliases CVE-2017-14632
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-1ntd-28nj-cuex
1
url VCID-6dfq-gbf6-7fc7
vulnerability_id VCID-6dfq-gbf6-7fc7
summary multiple issues
references
0
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11333
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11333
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14632
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14632
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14633
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14633
3
reference_url https://security.archlinux.org/ASA-201803-12
reference_id ASA-201803-12
reference_type
scores
url https://security.archlinux.org/ASA-201803-12
4
reference_url https://security.archlinux.org/AVG-367
reference_id AVG-367
reference_type
scores
0
value Critical
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-367
fixed_packages
0
url pkg:deb/debian/libvorbis@1.3.5-4%2Bdeb9u2
purl pkg:deb/debian/libvorbis@1.3.5-4%2Bdeb9u2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ntd-28nj-cuex
1
vulnerability VCID-6dfq-gbf6-7fc7
2
vulnerability VCID-kad4-b6ez-y3dx
3
vulnerability VCID-yw14-7xmq-g3e6
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/libvorbis@1.3.5-4%252Bdeb9u2
1
url pkg:deb/debian/libvorbis@1.3.6-2
purl pkg:deb/debian/libvorbis@1.3.6-2
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/libvorbis@1.3.6-2
aliases CVE-2017-11333
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-6dfq-gbf6-7fc7
2
url VCID-kad4-b6ez-y3dx
vulnerability_id VCID-kad4-b6ez-y3dx
summary multiple issues
references
0
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11333
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11333
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14632
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14632
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14633
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14633
3
reference_url https://security.archlinux.org/ASA-201803-12
reference_id ASA-201803-12
reference_type
scores
url https://security.archlinux.org/ASA-201803-12
4
reference_url https://security.archlinux.org/ASA-201803-21
reference_id ASA-201803-21
reference_type
scores
url https://security.archlinux.org/ASA-201803-21
5
reference_url https://security.archlinux.org/AVG-367
reference_id AVG-367
reference_type
scores
0
value Critical
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-367
6
reference_url https://security.archlinux.org/AVG-658
reference_id AVG-658
reference_type
scores
0
value Critical
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-658
fixed_packages
0
url pkg:deb/debian/libvorbis@1.3.5-4%2Bdeb9u2
purl pkg:deb/debian/libvorbis@1.3.5-4%2Bdeb9u2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ntd-28nj-cuex
1
vulnerability VCID-6dfq-gbf6-7fc7
2
vulnerability VCID-kad4-b6ez-y3dx
3
vulnerability VCID-yw14-7xmq-g3e6
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/libvorbis@1.3.5-4%252Bdeb9u2
1
url pkg:deb/debian/libvorbis@1.3.6-2
purl pkg:deb/debian/libvorbis@1.3.6-2
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/libvorbis@1.3.6-2
aliases CVE-2017-14633
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-kad4-b6ez-y3dx
3
url VCID-yw14-7xmq-g3e6
vulnerability_id VCID-yw14-7xmq-g3e6
summary An out of bounds memory write while processing Vorbis audio data was reported through the Pwn2Own contest.
references
0
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-5146
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-5146
1
reference_url https://security.archlinux.org/ASA-201803-12
reference_id ASA-201803-12
reference_type
scores
url https://security.archlinux.org/ASA-201803-12
2
reference_url https://security.archlinux.org/ASA-201803-13
reference_id ASA-201803-13
reference_type
scores
url https://security.archlinux.org/ASA-201803-13
3
reference_url https://security.archlinux.org/ASA-201803-21
reference_id ASA-201803-21
reference_type
scores
url https://security.archlinux.org/ASA-201803-21
4
reference_url https://security.archlinux.org/ASA-201803-22
reference_id ASA-201803-22
reference_type
scores
url https://security.archlinux.org/ASA-201803-22
5
reference_url https://security.archlinux.org/AVG-367
reference_id AVG-367
reference_type
scores
0
value Critical
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-367
6
reference_url https://security.archlinux.org/AVG-657
reference_id AVG-657
reference_type
scores
0
value Critical
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-657
7
reference_url https://security.archlinux.org/AVG-658
reference_id AVG-658
reference_type
scores
0
value Critical
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-658
8
reference_url https://security.archlinux.org/AVG-663
reference_id AVG-663
reference_type
scores
0
value Critical
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-663
9
reference_url https://www.mozilla.org/en-US/security/advisories/mfsa2018-08
reference_id mfsa2018-08
reference_type
scores
0
value critical
scoring_system generic_textual
scoring_elements
url https://www.mozilla.org/en-US/security/advisories/mfsa2018-08
10
reference_url https://www.mozilla.org/en-US/security/advisories/mfsa2018-09
reference_id mfsa2018-09
reference_type
scores
0
value critical
scoring_system generic_textual
scoring_elements
url https://www.mozilla.org/en-US/security/advisories/mfsa2018-09
fixed_packages
0
url pkg:deb/debian/libvorbis@1.3.4-2%2Bdeb8u1
purl pkg:deb/debian/libvorbis@1.3.4-2%2Bdeb8u1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ntd-28nj-cuex
1
vulnerability VCID-6dfq-gbf6-7fc7
2
vulnerability VCID-kad4-b6ez-y3dx
3
vulnerability VCID-yw14-7xmq-g3e6
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/libvorbis@1.3.4-2%252Bdeb8u1
1
url pkg:deb/debian/libvorbis@1.3.5-4%2Bdeb9u2
purl pkg:deb/debian/libvorbis@1.3.5-4%2Bdeb9u2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ntd-28nj-cuex
1
vulnerability VCID-6dfq-gbf6-7fc7
2
vulnerability VCID-kad4-b6ez-y3dx
3
vulnerability VCID-yw14-7xmq-g3e6
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/libvorbis@1.3.5-4%252Bdeb9u2
2
url pkg:deb/debian/libvorbis@1.3.6-2
purl pkg:deb/debian/libvorbis@1.3.6-2
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/libvorbis@1.3.6-2
aliases CVE-2018-5146
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-yw14-7xmq-g3e6
Fixing_vulnerabilities
0
url VCID-nbbh-ws5y-3uh4
vulnerability_id VCID-nbbh-ws5y-3uh4
summary 
Security researcher regenrecht reported via
TippingPoint's Zero Day Initiative the possibility of memory corruption during
the decoding of Ogg Vorbis files. This can cause a crash during decoding and has
the potential for remote code execution.
references
0
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0444
reference_id CVE-2012-0444
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0444
1
reference_url https://www.mozilla.org/en-US/security/advisories/mfsa2012-07
reference_id mfsa2012-07
reference_type
scores
0
value critical
scoring_system generic_textual
scoring_elements
url https://www.mozilla.org/en-US/security/advisories/mfsa2012-07
fixed_packages
0
url pkg:deb/debian/libvorbis@1.3.2-1.3
purl pkg:deb/debian/libvorbis@1.3.2-1.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ntd-28nj-cuex
1
vulnerability VCID-6dfq-gbf6-7fc7
2
vulnerability VCID-kad4-b6ez-y3dx
3
vulnerability VCID-yw14-7xmq-g3e6
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/libvorbis@1.3.2-1.3
aliases CVE-2012-0444
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-nbbh-ws5y-3uh4
Risk_scorenull
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:deb/debian/libvorbis@1.3.2-1.3