Lookup for vulnerable packages by Package URL.

Purlpkg:apk/alpine/clamav@0.99.3-r0?arch=aarch64&distroversion=v3.21&reponame=community
Typeapk
Namespacealpine
Nameclamav
Version0.99.3-r0
Qualifiers
arch aarch64
distroversion v3.21
reponame community
Subpath
Is_vulnerablefalse
Next_non_vulnerable_version0.99.4-r0
Latest_non_vulnerable_version1.4.2-r0
Affected_by_vulnerabilities
Fixing_vulnerabilities
0
url VCID-j2gt-uvam-hufk
vulnerability_id VCID-j2gt-uvam-hufk
summary
Multiple vulnerabilities have been found in ClamAV, the worst of
    which may allow execution of arbitrary code.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2017-12377
reference_id
reference_type
scores
0
value 0.21357
scoring_system epss
scoring_elements 0.95701
published_at 2026-04-16T12:55:00Z
1
value 0.21357
scoring_system epss
scoring_elements 0.95684
published_at 2026-04-08T12:55:00Z
2
value 0.21357
scoring_system epss
scoring_elements 0.95688
published_at 2026-04-09T12:55:00Z
3
value 0.21357
scoring_system epss
scoring_elements 0.95692
published_at 2026-04-11T12:55:00Z
4
value 0.21357
scoring_system epss
scoring_elements 0.95691
published_at 2026-04-12T12:55:00Z
5
value 0.21357
scoring_system epss
scoring_elements 0.95693
published_at 2026-04-13T12:55:00Z
6
value 0.21357
scoring_system epss
scoring_elements 0.95659
published_at 2026-04-01T12:55:00Z
7
value 0.21357
scoring_system epss
scoring_elements 0.95667
published_at 2026-04-02T12:55:00Z
8
value 0.21357
scoring_system epss
scoring_elements 0.95673
published_at 2026-04-04T12:55:00Z
9
value 0.21357
scoring_system epss
scoring_elements 0.95676
published_at 2026-04-07T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2017-12377
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12377
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12377
2
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
3
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=888484
reference_id 888484
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=888484
4
reference_url https://security.archlinux.org/ASA-201802-1
reference_id ASA-201802-1
reference_type
scores
url https://security.archlinux.org/ASA-201802-1
5
reference_url https://security.archlinux.org/AVG-601
reference_id AVG-601
reference_type
scores
0
value Critical
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-601
6
reference_url http://blog.clamav.net/2018/01/clamav-0993-has-been-released.html
reference_id clamav-0993-has-been-released.html
reference_type
scores
0
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2024-12-02T19:24:17Z/
url http://blog.clamav.net/2018/01/clamav-0993-has-been-released.html
7
reference_url https://security.gentoo.org/glsa/201801-19
reference_id GLSA-201801-19
reference_type
scores
url https://security.gentoo.org/glsa/201801-19
8
reference_url https://lists.debian.org/debian-lts-announce/2018/01/msg00035.html
reference_id msg00035.html
reference_type
scores
0
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2024-12-02T19:24:17Z/
url https://lists.debian.org/debian-lts-announce/2018/01/msg00035.html
9
reference_url https://bugzilla.clamav.net/show_bug.cgi?id=11943
reference_id show_bug.cgi?id=11943
reference_type
scores
0
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2024-12-02T19:24:17Z/
url https://bugzilla.clamav.net/show_bug.cgi?id=11943
10
reference_url https://usn.ubuntu.com/3550-1/
reference_id USN-3550-1
reference_type
scores
0
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2024-12-02T19:24:17Z/
url https://usn.ubuntu.com/3550-1/
11
reference_url https://usn.ubuntu.com/3550-2/
reference_id USN-3550-2
reference_type
scores
0
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2024-12-02T19:24:17Z/
url https://usn.ubuntu.com/3550-2/
fixed_packages
0
url pkg:apk/alpine/clamav@0.99.3-r0?arch=aarch64&distroversion=v3.21&reponame=community
purl pkg:apk/alpine/clamav@0.99.3-r0?arch=aarch64&distroversion=v3.21&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/clamav@0.99.3-r0%3Farch=aarch64&distroversion=v3.21&reponame=community
aliases CVE-2017-12377
risk_score 4.5
exploitability 0.5
weighted_severity 9.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-j2gt-uvam-hufk
1
url VCID-qwwa-mf8k-2fdc
vulnerability_id VCID-qwwa-mf8k-2fdc
summary
Multiple vulnerabilities have been found in ClamAV, the worst of
    which may allow execution of arbitrary code.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2017-12378
reference_id
reference_type
scores
0
value 0.07706
scoring_system epss
scoring_elements 0.91941
published_at 2026-04-16T12:55:00Z
1
value 0.07706
scoring_system epss
scoring_elements 0.91917
published_at 2026-04-08T12:55:00Z
2
value 0.07706
scoring_system epss
scoring_elements 0.91923
published_at 2026-04-09T12:55:00Z
3
value 0.07706
scoring_system epss
scoring_elements 0.91926
published_at 2026-04-11T12:55:00Z
4
value 0.07706
scoring_system epss
scoring_elements 0.91925
published_at 2026-04-12T12:55:00Z
5
value 0.07706
scoring_system epss
scoring_elements 0.91922
published_at 2026-04-13T12:55:00Z
6
value 0.07706
scoring_system epss
scoring_elements 0.91882
published_at 2026-04-01T12:55:00Z
7
value 0.07706
scoring_system epss
scoring_elements 0.9189
published_at 2026-04-02T12:55:00Z
8
value 0.07706
scoring_system epss
scoring_elements 0.91898
published_at 2026-04-04T12:55:00Z
9
value 0.07706
scoring_system epss
scoring_elements 0.91905
published_at 2026-04-07T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2017-12378
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12378
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12378
2
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
3
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=888484
reference_id 888484
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=888484
4
reference_url https://security.archlinux.org/ASA-201802-1
reference_id ASA-201802-1
reference_type
scores
url https://security.archlinux.org/ASA-201802-1
5
reference_url https://security.archlinux.org/AVG-601
reference_id AVG-601
reference_type
scores
0
value Critical
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-601
6
reference_url http://blog.clamav.net/2018/01/clamav-0993-has-been-released.html
reference_id clamav-0993-has-been-released.html
reference_type
scores
0
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-12-02T18:55:32Z/
url http://blog.clamav.net/2018/01/clamav-0993-has-been-released.html
7
reference_url https://security.gentoo.org/glsa/201801-19
reference_id GLSA-201801-19
reference_type
scores
url https://security.gentoo.org/glsa/201801-19
8
reference_url https://lists.debian.org/debian-lts-announce/2018/01/msg00035.html
reference_id msg00035.html
reference_type
scores
0
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-12-02T18:55:32Z/
url https://lists.debian.org/debian-lts-announce/2018/01/msg00035.html
9
reference_url https://bugzilla.clamav.net/show_bug.cgi?id=11946
reference_id show_bug.cgi?id=11946
reference_type
scores
0
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-12-02T18:55:32Z/
url https://bugzilla.clamav.net/show_bug.cgi?id=11946
10
reference_url https://usn.ubuntu.com/3550-1/
reference_id USN-3550-1
reference_type
scores
0
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-12-02T18:55:32Z/
url https://usn.ubuntu.com/3550-1/
11
reference_url https://usn.ubuntu.com/3550-2/
reference_id USN-3550-2
reference_type
scores
0
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-12-02T18:55:32Z/
url https://usn.ubuntu.com/3550-2/
fixed_packages
0
url pkg:apk/alpine/clamav@0.99.3-r0?arch=aarch64&distroversion=v3.21&reponame=community
purl pkg:apk/alpine/clamav@0.99.3-r0?arch=aarch64&distroversion=v3.21&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/clamav@0.99.3-r0%3Farch=aarch64&distroversion=v3.21&reponame=community
aliases CVE-2017-12378
risk_score 4.5
exploitability 0.5
weighted_severity 9.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-qwwa-mf8k-2fdc
2
url VCID-seed-bera-73ez
vulnerability_id VCID-seed-bera-73ez
summary
Multiple vulnerabilities have been found in ClamAV, the worst of
    which may allow execution of arbitrary code.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2017-12379
reference_id
reference_type
scores
0
value 0.15693
scoring_system epss
scoring_elements 0.94673
published_at 2026-04-01T12:55:00Z
1
value 0.15693
scoring_system epss
scoring_elements 0.94696
published_at 2026-04-08T12:55:00Z
2
value 0.15693
scoring_system epss
scoring_elements 0.94701
published_at 2026-04-09T12:55:00Z
3
value 0.15693
scoring_system epss
scoring_elements 0.94705
published_at 2026-04-11T12:55:00Z
4
value 0.15693
scoring_system epss
scoring_elements 0.94709
published_at 2026-04-12T12:55:00Z
5
value 0.15693
scoring_system epss
scoring_elements 0.9471
published_at 2026-04-13T12:55:00Z
6
value 0.15693
scoring_system epss
scoring_elements 0.94719
published_at 2026-04-16T12:55:00Z
7
value 0.15693
scoring_system epss
scoring_elements 0.94681
published_at 2026-04-02T12:55:00Z
8
value 0.15693
scoring_system epss
scoring_elements 0.94685
published_at 2026-04-04T12:55:00Z
9
value 0.15693
scoring_system epss
scoring_elements 0.94686
published_at 2026-04-07T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2017-12379
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12379
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12379
2
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 7.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
3
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=888484
reference_id 888484
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=888484
4
reference_url https://security.archlinux.org/ASA-201802-1
reference_id ASA-201802-1
reference_type
scores
url https://security.archlinux.org/ASA-201802-1
5
reference_url https://security.archlinux.org/AVG-601
reference_id AVG-601
reference_type
scores
0
value Critical
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-601
6
reference_url http://blog.clamav.net/2018/01/clamav-0993-has-been-released.html
reference_id clamav-0993-has-been-released.html
reference_type
scores
0
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2024-12-02T19:24:16Z/
url http://blog.clamav.net/2018/01/clamav-0993-has-been-released.html
7
reference_url https://security.gentoo.org/glsa/201801-19
reference_id GLSA-201801-19
reference_type
scores
url https://security.gentoo.org/glsa/201801-19
8
reference_url https://lists.debian.org/debian-lts-announce/2018/01/msg00035.html
reference_id msg00035.html
reference_type
scores
0
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2024-12-02T19:24:16Z/
url https://lists.debian.org/debian-lts-announce/2018/01/msg00035.html
9
reference_url https://bugzilla.clamav.net/show_bug.cgi?id=11944
reference_id show_bug.cgi?id=11944
reference_type
scores
0
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2024-12-02T19:24:16Z/
url https://bugzilla.clamav.net/show_bug.cgi?id=11944
10
reference_url https://usn.ubuntu.com/3550-1/
reference_id USN-3550-1
reference_type
scores
0
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2024-12-02T19:24:16Z/
url https://usn.ubuntu.com/3550-1/
11
reference_url https://usn.ubuntu.com/3550-2/
reference_id USN-3550-2
reference_type
scores
0
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2024-12-02T19:24:16Z/
url https://usn.ubuntu.com/3550-2/
fixed_packages
0
url pkg:apk/alpine/clamav@0.99.3-r0?arch=aarch64&distroversion=v3.21&reponame=community
purl pkg:apk/alpine/clamav@0.99.3-r0?arch=aarch64&distroversion=v3.21&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/clamav@0.99.3-r0%3Farch=aarch64&distroversion=v3.21&reponame=community
aliases CVE-2017-12379
risk_score 4.5
exploitability 0.5
weighted_severity 9.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-seed-bera-73ez
3
url VCID-u4qp-vcnh-c3dd
vulnerability_id VCID-u4qp-vcnh-c3dd
summary
Multiple vulnerabilities have been found in ClamAV, the worst of
    which may allow execution of arbitrary code.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2017-12374
reference_id
reference_type
scores
0
value 0.07329
scoring_system epss
scoring_elements 0.91652
published_at 2026-04-01T12:55:00Z
1
value 0.07329
scoring_system epss
scoring_elements 0.91687
published_at 2026-04-08T12:55:00Z
2
value 0.07329
scoring_system epss
scoring_elements 0.91694
published_at 2026-04-09T12:55:00Z
3
value 0.07329
scoring_system epss
scoring_elements 0.91697
published_at 2026-04-11T12:55:00Z
4
value 0.07329
scoring_system epss
scoring_elements 0.91699
published_at 2026-04-12T12:55:00Z
5
value 0.07329
scoring_system epss
scoring_elements 0.91696
published_at 2026-04-13T12:55:00Z
6
value 0.07329
scoring_system epss
scoring_elements 0.91717
published_at 2026-04-16T12:55:00Z
7
value 0.07329
scoring_system epss
scoring_elements 0.9166
published_at 2026-04-02T12:55:00Z
8
value 0.07329
scoring_system epss
scoring_elements 0.91666
published_at 2026-04-04T12:55:00Z
9
value 0.07329
scoring_system epss
scoring_elements 0.91675
published_at 2026-04-07T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2017-12374
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12374
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12374
2
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
3
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=888484
reference_id 888484
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=888484
4
reference_url https://security.archlinux.org/ASA-201802-1
reference_id ASA-201802-1
reference_type
scores
url https://security.archlinux.org/ASA-201802-1
5
reference_url https://security.archlinux.org/AVG-601
reference_id AVG-601
reference_type
scores
0
value Critical
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-601
6
reference_url http://blog.clamav.net/2018/01/clamav-0993-has-been-released.html
reference_id clamav-0993-has-been-released.html
reference_type
scores
0
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-12-02T19:11:39Z/
url http://blog.clamav.net/2018/01/clamav-0993-has-been-released.html
7
reference_url https://security.gentoo.org/glsa/201801-19
reference_id GLSA-201801-19
reference_type
scores
url https://security.gentoo.org/glsa/201801-19
8
reference_url https://lists.debian.org/debian-lts-announce/2018/01/msg00035.html
reference_id msg00035.html
reference_type
scores
0
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-12-02T19:11:39Z/
url https://lists.debian.org/debian-lts-announce/2018/01/msg00035.html
9
reference_url https://bugzilla.clamav.net/show_bug.cgi?id=11939
reference_id show_bug.cgi?id=11939
reference_type
scores
0
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-12-02T19:11:39Z/
url https://bugzilla.clamav.net/show_bug.cgi?id=11939
10
reference_url https://usn.ubuntu.com/3550-1/
reference_id USN-3550-1
reference_type
scores
0
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-12-02T19:11:39Z/
url https://usn.ubuntu.com/3550-1/
11
reference_url https://usn.ubuntu.com/3550-2/
reference_id USN-3550-2
reference_type
scores
0
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-12-02T19:11:39Z/
url https://usn.ubuntu.com/3550-2/
fixed_packages
0
url pkg:apk/alpine/clamav@0.99.3-r0?arch=aarch64&distroversion=v3.21&reponame=community
purl pkg:apk/alpine/clamav@0.99.3-r0?arch=aarch64&distroversion=v3.21&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/clamav@0.99.3-r0%3Farch=aarch64&distroversion=v3.21&reponame=community
aliases CVE-2017-12374
risk_score 4.5
exploitability 0.5
weighted_severity 9.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-u4qp-vcnh-c3dd
4
url VCID-y3k7-e14w-xqbn
vulnerability_id VCID-y3k7-e14w-xqbn
summary
Multiple vulnerabilities have been found in ClamAV, the worst of
    which may allow execution of arbitrary code.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2017-12375
reference_id
reference_type
scores
0
value 0.09673
scoring_system epss
scoring_elements 0.92918
published_at 2026-04-16T12:55:00Z
1
value 0.09673
scoring_system epss
scoring_elements 0.929
published_at 2026-04-08T12:55:00Z
2
value 0.09673
scoring_system epss
scoring_elements 0.92904
published_at 2026-04-09T12:55:00Z
3
value 0.09673
scoring_system epss
scoring_elements 0.92909
published_at 2026-04-11T12:55:00Z
4
value 0.09673
scoring_system epss
scoring_elements 0.92907
published_at 2026-04-12T12:55:00Z
5
value 0.09673
scoring_system epss
scoring_elements 0.92908
published_at 2026-04-13T12:55:00Z
6
value 0.09673
scoring_system epss
scoring_elements 0.92881
published_at 2026-04-01T12:55:00Z
7
value 0.09673
scoring_system epss
scoring_elements 0.92889
published_at 2026-04-02T12:55:00Z
8
value 0.09673
scoring_system epss
scoring_elements 0.92894
published_at 2026-04-04T12:55:00Z
9
value 0.09673
scoring_system epss
scoring_elements 0.92892
published_at 2026-04-07T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2017-12375
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12375
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12375
2
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
3
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=888484
reference_id 888484
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=888484
4
reference_url https://security.archlinux.org/ASA-201802-1
reference_id ASA-201802-1
reference_type
scores
url https://security.archlinux.org/ASA-201802-1
5
reference_url https://security.archlinux.org/AVG-601
reference_id AVG-601
reference_type
scores
0
value Critical
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-601
6
reference_url http://blog.clamav.net/2018/01/clamav-0993-has-been-released.html
reference_id clamav-0993-has-been-released.html
reference_type
scores
0
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-12-02T19:11:38Z/
url http://blog.clamav.net/2018/01/clamav-0993-has-been-released.html
7
reference_url https://security.gentoo.org/glsa/201801-19
reference_id GLSA-201801-19
reference_type
scores
url https://security.gentoo.org/glsa/201801-19
8
reference_url https://lists.debian.org/debian-lts-announce/2018/01/msg00035.html
reference_id msg00035.html
reference_type
scores
0
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-12-02T19:11:38Z/
url https://lists.debian.org/debian-lts-announce/2018/01/msg00035.html
9
reference_url https://bugzilla.clamav.net/show_bug.cgi?id=11940
reference_id show_bug.cgi?id=11940
reference_type
scores
0
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-12-02T19:11:38Z/
url https://bugzilla.clamav.net/show_bug.cgi?id=11940
10
reference_url https://usn.ubuntu.com/3550-1/
reference_id USN-3550-1
reference_type
scores
0
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-12-02T19:11:38Z/
url https://usn.ubuntu.com/3550-1/
11
reference_url https://usn.ubuntu.com/3550-2/
reference_id USN-3550-2
reference_type
scores
0
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-12-02T19:11:38Z/
url https://usn.ubuntu.com/3550-2/
fixed_packages
0
url pkg:apk/alpine/clamav@0.99.3-r0?arch=aarch64&distroversion=v3.21&reponame=community
purl pkg:apk/alpine/clamav@0.99.3-r0?arch=aarch64&distroversion=v3.21&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/clamav@0.99.3-r0%3Farch=aarch64&distroversion=v3.21&reponame=community
aliases CVE-2017-12375
risk_score 4.5
exploitability 0.5
weighted_severity 9.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-y3k7-e14w-xqbn
5
url VCID-zbkr-bd4m-77cs
vulnerability_id VCID-zbkr-bd4m-77cs
summary
Multiple vulnerabilities have been found in ClamAV, the worst of
    which may allow execution of arbitrary code.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2017-12380
reference_id
reference_type
scores
0
value 0.13224
scoring_system epss
scoring_elements 0.94101
published_at 2026-04-01T12:55:00Z
1
value 0.13224
scoring_system epss
scoring_elements 0.94126
published_at 2026-04-07T12:55:00Z
2
value 0.13224
scoring_system epss
scoring_elements 0.94135
published_at 2026-04-08T12:55:00Z
3
value 0.13224
scoring_system epss
scoring_elements 0.94139
published_at 2026-04-09T12:55:00Z
4
value 0.13224
scoring_system epss
scoring_elements 0.94143
published_at 2026-04-11T12:55:00Z
5
value 0.13224
scoring_system epss
scoring_elements 0.94144
published_at 2026-04-13T12:55:00Z
6
value 0.13224
scoring_system epss
scoring_elements 0.9416
published_at 2026-04-16T12:55:00Z
7
value 0.13224
scoring_system epss
scoring_elements 0.94111
published_at 2026-04-02T12:55:00Z
8
value 0.13224
scoring_system epss
scoring_elements 0.94122
published_at 2026-04-04T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2017-12380
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12380
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12380
2
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
3
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=888484
reference_id 888484
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=888484
4
reference_url https://security.archlinux.org/ASA-201802-1
reference_id ASA-201802-1
reference_type
scores
url https://security.archlinux.org/ASA-201802-1
5
reference_url https://security.archlinux.org/AVG-601
reference_id AVG-601
reference_type
scores
0
value Critical
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-601
6
reference_url http://blog.clamav.net/2018/01/clamav-0993-has-been-released.html
reference_id clamav-0993-has-been-released.html
reference_type
scores
0
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-12-02T19:11:35Z/
url http://blog.clamav.net/2018/01/clamav-0993-has-been-released.html
7
reference_url https://security.gentoo.org/glsa/201801-19
reference_id GLSA-201801-19
reference_type
scores
url https://security.gentoo.org/glsa/201801-19
8
reference_url https://lists.debian.org/debian-lts-announce/2018/01/msg00035.html
reference_id msg00035.html
reference_type
scores
0
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-12-02T19:11:35Z/
url https://lists.debian.org/debian-lts-announce/2018/01/msg00035.html
9
reference_url https://bugzilla.clamav.net/show_bug.cgi?id=11945
reference_id show_bug.cgi?id=11945
reference_type
scores
0
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-12-02T19:11:35Z/
url https://bugzilla.clamav.net/show_bug.cgi?id=11945
10
reference_url https://usn.ubuntu.com/3550-1/
reference_id USN-3550-1
reference_type
scores
0
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-12-02T19:11:35Z/
url https://usn.ubuntu.com/3550-1/
11
reference_url https://usn.ubuntu.com/3550-2/
reference_id USN-3550-2
reference_type
scores
0
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-12-02T19:11:35Z/
url https://usn.ubuntu.com/3550-2/
fixed_packages
0
url pkg:apk/alpine/clamav@0.99.3-r0?arch=aarch64&distroversion=v3.21&reponame=community
purl pkg:apk/alpine/clamav@0.99.3-r0?arch=aarch64&distroversion=v3.21&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/clamav@0.99.3-r0%3Farch=aarch64&distroversion=v3.21&reponame=community
aliases CVE-2017-12380
risk_score 4.5
exploitability 0.5
weighted_severity 9.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-zbkr-bd4m-77cs
6
url VCID-zys1-2pnp-h3an
vulnerability_id VCID-zys1-2pnp-h3an
summary
Multiple vulnerabilities have been found in ClamAV, the worst of
    which may allow execution of arbitrary code.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2017-12376
reference_id
reference_type
scores
0
value 0.17824
scoring_system epss
scoring_elements 0.95141
published_at 2026-04-16T12:55:00Z
1
value 0.17824
scoring_system epss
scoring_elements 0.95118
published_at 2026-04-08T12:55:00Z
2
value 0.17824
scoring_system epss
scoring_elements 0.95122
published_at 2026-04-09T12:55:00Z
3
value 0.17824
scoring_system epss
scoring_elements 0.95128
published_at 2026-04-11T12:55:00Z
4
value 0.17824
scoring_system epss
scoring_elements 0.9513
published_at 2026-04-12T12:55:00Z
5
value 0.17824
scoring_system epss
scoring_elements 0.95133
published_at 2026-04-13T12:55:00Z
6
value 0.17824
scoring_system epss
scoring_elements 0.95096
published_at 2026-04-01T12:55:00Z
7
value 0.17824
scoring_system epss
scoring_elements 0.95107
published_at 2026-04-02T12:55:00Z
8
value 0.17824
scoring_system epss
scoring_elements 0.95109
published_at 2026-04-04T12:55:00Z
9
value 0.17824
scoring_system epss
scoring_elements 0.95111
published_at 2026-04-07T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2017-12376
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12376
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12376
2
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
3
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=888484
reference_id 888484
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=888484
4
reference_url https://security.archlinux.org/ASA-201802-1
reference_id ASA-201802-1
reference_type
scores
url https://security.archlinux.org/ASA-201802-1
5
reference_url https://security.archlinux.org/AVG-601
reference_id AVG-601
reference_type
scores
0
value Critical
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-601
6
reference_url http://blog.clamav.net/2018/01/clamav-0993-has-been-released.html
reference_id clamav-0993-has-been-released.html
reference_type
scores
0
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2024-12-02T19:09:02Z/
url http://blog.clamav.net/2018/01/clamav-0993-has-been-released.html
7
reference_url https://security.gentoo.org/glsa/201801-19
reference_id GLSA-201801-19
reference_type
scores
url https://security.gentoo.org/glsa/201801-19
8
reference_url https://lists.debian.org/debian-lts-announce/2018/01/msg00035.html
reference_id msg00035.html
reference_type
scores
0
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2024-12-02T19:09:02Z/
url https://lists.debian.org/debian-lts-announce/2018/01/msg00035.html
9
reference_url https://bugzilla.clamav.net/show_bug.cgi?id=11942
reference_id show_bug.cgi?id=11942
reference_type
scores
0
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2024-12-02T19:09:02Z/
url https://bugzilla.clamav.net/show_bug.cgi?id=11942
10
reference_url https://usn.ubuntu.com/3550-1/
reference_id USN-3550-1
reference_type
scores
0
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2024-12-02T19:09:02Z/
url https://usn.ubuntu.com/3550-1/
11
reference_url https://usn.ubuntu.com/3550-2/
reference_id USN-3550-2
reference_type
scores
0
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2024-12-02T19:09:02Z/
url https://usn.ubuntu.com/3550-2/
fixed_packages
0
url pkg:apk/alpine/clamav@0.99.3-r0?arch=aarch64&distroversion=v3.21&reponame=community
purl pkg:apk/alpine/clamav@0.99.3-r0?arch=aarch64&distroversion=v3.21&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/clamav@0.99.3-r0%3Farch=aarch64&distroversion=v3.21&reponame=community
aliases CVE-2017-12376
risk_score 4.5
exploitability 0.5
weighted_severity 9.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-zys1-2pnp-h3an
Risk_scorenull
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:apk/alpine/clamav@0.99.3-r0%3Farch=aarch64&distroversion=v3.21&reponame=community