Lookup for vulnerable packages by Package URL.

Purlpkg:deb/debian/dropbear@2012.55-1.4?distro=trixie
Typedeb
Namespacedebian
Namedropbear
Version2012.55-1.4
Qualifiers
distro trixie
Subpath
Is_vulnerablefalse
Next_non_vulnerable_version2013.60-1
Latest_non_vulnerable_version2025.89-1
Affected_by_vulnerabilities
Fixing_vulnerabilities
0
url VCID-adtn-2cnz-wfb9
vulnerability_id VCID-adtn-2cnz-wfb9
summary The buf_decompress function in packet.c in Dropbear SSH Server before 2013.59 allows remote attackers to cause a denial of service (memory consumption) via a compressed packet that has a large size when it is decompressed.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2013-4421
reference_id
reference_type
scores
0
value 0.25913
scoring_system epss
scoring_elements 0.96232
published_at 2026-04-01T12:55:00Z
1
value 0.25913
scoring_system epss
scoring_elements 0.96239
published_at 2026-04-02T12:55:00Z
2
value 0.25913
scoring_system epss
scoring_elements 0.96246
published_at 2026-04-04T12:55:00Z
3
value 0.25913
scoring_system epss
scoring_elements 0.96251
published_at 2026-04-07T12:55:00Z
4
value 0.25913
scoring_system epss
scoring_elements 0.9626
published_at 2026-04-08T12:55:00Z
5
value 0.25913
scoring_system epss
scoring_elements 0.96263
published_at 2026-04-09T12:55:00Z
6
value 0.25913
scoring_system epss
scoring_elements 0.96267
published_at 2026-04-12T12:55:00Z
7
value 0.25913
scoring_system epss
scoring_elements 0.9627
published_at 2026-04-13T12:55:00Z
8
value 0.25913
scoring_system epss
scoring_elements 0.96279
published_at 2026-04-16T12:55:00Z
9
value 0.25913
scoring_system epss
scoring_elements 0.96283
published_at 2026-04-18T12:55:00Z
10
value 0.25913
scoring_system epss
scoring_elements 0.96285
published_at 2026-04-21T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2013-4421
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4421
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4421
2
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=726019
reference_id 726019
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=726019
fixed_packages
0
url pkg:deb/debian/dropbear@2012.55-1.4?distro=trixie
purl pkg:deb/debian/dropbear@2012.55-1.4?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/dropbear@2012.55-1.4%3Fdistro=trixie
1
url pkg:deb/debian/dropbear@2020.81-3%2Bdeb11u2?distro=trixie
purl pkg:deb/debian/dropbear@2020.81-3%2Bdeb11u2?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/dropbear@2020.81-3%252Bdeb11u2%3Fdistro=trixie
2
url pkg:deb/debian/dropbear@2022.83-1%2Bdeb12u3?distro=trixie
purl pkg:deb/debian/dropbear@2022.83-1%2Bdeb12u3?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/dropbear@2022.83-1%252Bdeb12u3%3Fdistro=trixie
3
url pkg:deb/debian/dropbear@2025.89-1~deb13u1?distro=trixie
purl pkg:deb/debian/dropbear@2025.89-1~deb13u1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/dropbear@2025.89-1~deb13u1%3Fdistro=trixie
4
url pkg:deb/debian/dropbear@2025.89-1?distro=trixie
purl pkg:deb/debian/dropbear@2025.89-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/dropbear@2025.89-1%3Fdistro=trixie
aliases CVE-2013-4421
risk_score 0.1
exploitability 0.5
weighted_severity 0.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-adtn-2cnz-wfb9
1
url VCID-w5xg-8n7z-zqcs
vulnerability_id VCID-w5xg-8n7z-zqcs
summary Dropbear SSH Server before 2013.59 generates error messages for a failed logon attempt with different time delays depending on whether the user account exists, which allows remote attackers to discover valid usernames.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2013-4434
reference_id
reference_type
scores
0
value 0.01912
scoring_system epss
scoring_elements 0.83223
published_at 2026-04-01T12:55:00Z
1
value 0.01912
scoring_system epss
scoring_elements 0.83239
published_at 2026-04-02T12:55:00Z
2
value 0.01912
scoring_system epss
scoring_elements 0.83254
published_at 2026-04-04T12:55:00Z
3
value 0.01912
scoring_system epss
scoring_elements 0.83253
published_at 2026-04-07T12:55:00Z
4
value 0.01912
scoring_system epss
scoring_elements 0.83277
published_at 2026-04-08T12:55:00Z
5
value 0.01912
scoring_system epss
scoring_elements 0.83286
published_at 2026-04-09T12:55:00Z
6
value 0.01912
scoring_system epss
scoring_elements 0.83302
published_at 2026-04-11T12:55:00Z
7
value 0.01912
scoring_system epss
scoring_elements 0.83296
published_at 2026-04-12T12:55:00Z
8
value 0.01912
scoring_system epss
scoring_elements 0.83292
published_at 2026-04-13T12:55:00Z
9
value 0.01912
scoring_system epss
scoring_elements 0.83327
published_at 2026-04-16T12:55:00Z
10
value 0.01912
scoring_system epss
scoring_elements 0.83328
published_at 2026-04-18T12:55:00Z
11
value 0.01912
scoring_system epss
scoring_elements 0.8333
published_at 2026-04-21T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2013-4434
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4434
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4434
2
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=726118
reference_id 726118
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=726118
fixed_packages
0
url pkg:deb/debian/dropbear@2012.55-1.4?distro=trixie
purl pkg:deb/debian/dropbear@2012.55-1.4?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/dropbear@2012.55-1.4%3Fdistro=trixie
1
url pkg:deb/debian/dropbear@2020.81-3%2Bdeb11u2?distro=trixie
purl pkg:deb/debian/dropbear@2020.81-3%2Bdeb11u2?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/dropbear@2020.81-3%252Bdeb11u2%3Fdistro=trixie
2
url pkg:deb/debian/dropbear@2022.83-1%2Bdeb12u3?distro=trixie
purl pkg:deb/debian/dropbear@2022.83-1%2Bdeb12u3?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/dropbear@2022.83-1%252Bdeb12u3%3Fdistro=trixie
3
url pkg:deb/debian/dropbear@2025.89-1~deb13u1?distro=trixie
purl pkg:deb/debian/dropbear@2025.89-1~deb13u1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/dropbear@2025.89-1~deb13u1%3Fdistro=trixie
4
url pkg:deb/debian/dropbear@2025.89-1?distro=trixie
purl pkg:deb/debian/dropbear@2025.89-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/dropbear@2025.89-1%3Fdistro=trixie
aliases CVE-2013-4434
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-w5xg-8n7z-zqcs
Risk_scorenull
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:deb/debian/dropbear@2012.55-1.4%3Fdistro=trixie