Lookup for vulnerable packages by Package URL.

Purlpkg:deb/debian/asterisk@1:13.17.1~dfsg-1?distro=sid
Typedeb
Namespacedebian
Nameasterisk
Version1:13.17.1~dfsg-1
Qualifiers
distro sid
Subpath
Is_vulnerablefalse
Next_non_vulnerable_version1:13.17.2~dfsg-1
Latest_non_vulnerable_version1:22.9.0+dfsg+~cs6.16.60671434-1
Affected_by_vulnerabilities
Fixing_vulnerabilities
0
url VCID-a2n5-xpy5-gyfh
vulnerability_id VCID-a2n5-xpy5-gyfh
summary
Multiple vulnerabilities have been found in Asterisk, the worst of
    which allows remote execution of arbitrary shell commands.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2017-14100
reference_id
reference_type
scores
0
value 0.34964
scoring_system epss
scoring_elements 0.96995
published_at 2026-04-01T12:55:00Z
1
value 0.34964
scoring_system epss
scoring_elements 0.97003
published_at 2026-04-02T12:55:00Z
2
value 0.34964
scoring_system epss
scoring_elements 0.97007
published_at 2026-04-04T12:55:00Z
3
value 0.34964
scoring_system epss
scoring_elements 0.97008
published_at 2026-04-07T12:55:00Z
4
value 0.34964
scoring_system epss
scoring_elements 0.97018
published_at 2026-04-08T12:55:00Z
5
value 0.34964
scoring_system epss
scoring_elements 0.97019
published_at 2026-04-09T12:55:00Z
6
value 0.34964
scoring_system epss
scoring_elements 0.97021
published_at 2026-04-11T12:55:00Z
7
value 0.34964
scoring_system epss
scoring_elements 0.97023
published_at 2026-04-13T12:55:00Z
8
value 0.34964
scoring_system epss
scoring_elements 0.97033
published_at 2026-04-16T12:55:00Z
9
value 0.34964
scoring_system epss
scoring_elements 0.97037
published_at 2026-04-18T12:55:00Z
10
value 0.34964
scoring_system epss
scoring_elements 0.97041
published_at 2026-04-21T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2017-14100
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14099
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14099
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14100
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14100
3
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=873908
reference_id 873908
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=873908
4
reference_url https://security.gentoo.org/glsa/201710-29
reference_id GLSA-201710-29
reference_type
scores
url https://security.gentoo.org/glsa/201710-29
fixed_packages
0
url pkg:deb/debian/asterisk@1:13.17.1~dfsg-1?distro=sid
purl pkg:deb/debian/asterisk@1:13.17.1~dfsg-1?distro=sid
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/asterisk@1:13.17.1~dfsg-1%3Fdistro=sid
1
url pkg:deb/debian/asterisk@1:16.28.0~dfsg-0%2Bdeb11u4?distro=sid
purl pkg:deb/debian/asterisk@1:16.28.0~dfsg-0%2Bdeb11u4?distro=sid
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-r54j-ydjm-4uca
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/asterisk@1:16.28.0~dfsg-0%252Bdeb11u4%3Fdistro=sid
2
url pkg:deb/debian/asterisk@1:22.8.2%2Bdfsg%2B~cs6.15.60671435-1?distro=sid
purl pkg:deb/debian/asterisk@1:22.8.2%2Bdfsg%2B~cs6.15.60671435-1?distro=sid
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/asterisk@1:22.8.2%252Bdfsg%252B~cs6.15.60671435-1%3Fdistro=sid
3
url pkg:deb/debian/asterisk@1:22.9.0%2Bdfsg%2B~cs6.16.60671434-1?distro=sid
purl pkg:deb/debian/asterisk@1:22.9.0%2Bdfsg%2B~cs6.16.60671434-1?distro=sid
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/asterisk@1:22.9.0%252Bdfsg%252B~cs6.16.60671434-1%3Fdistro=sid
aliases CVE-2017-14100
risk_score 0.1
exploitability 0.5
weighted_severity 0.3
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-a2n5-xpy5-gyfh
1
url VCID-r6s6-y3q8-vydc
vulnerability_id VCID-r6s6-y3q8-vydc
summary
Multiple vulnerabilities have been found in Asterisk, the worst of
    which allows remote execution of arbitrary shell commands.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2017-14099
reference_id
reference_type
scores
0
value 0.00368
scoring_system epss
scoring_elements 0.58598
published_at 2026-04-01T12:55:00Z
1
value 0.00368
scoring_system epss
scoring_elements 0.58681
published_at 2026-04-02T12:55:00Z
2
value 0.00368
scoring_system epss
scoring_elements 0.58702
published_at 2026-04-04T12:55:00Z
3
value 0.00368
scoring_system epss
scoring_elements 0.58669
published_at 2026-04-07T12:55:00Z
4
value 0.00368
scoring_system epss
scoring_elements 0.58721
published_at 2026-04-08T12:55:00Z
5
value 0.00368
scoring_system epss
scoring_elements 0.58727
published_at 2026-04-12T12:55:00Z
6
value 0.00368
scoring_system epss
scoring_elements 0.58746
published_at 2026-04-11T12:55:00Z
7
value 0.00368
scoring_system epss
scoring_elements 0.58707
published_at 2026-04-13T12:55:00Z
8
value 0.00368
scoring_system epss
scoring_elements 0.58741
published_at 2026-04-16T12:55:00Z
9
value 0.00368
scoring_system epss
scoring_elements 0.58745
published_at 2026-04-18T12:55:00Z
10
value 0.00368
scoring_system epss
scoring_elements 0.58723
published_at 2026-04-21T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2017-14099
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14099
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14099
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14100
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14100
3
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=873907
reference_id 873907
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=873907
4
reference_url https://security.gentoo.org/glsa/201710-29
reference_id GLSA-201710-29
reference_type
scores
url https://security.gentoo.org/glsa/201710-29
fixed_packages
0
url pkg:deb/debian/asterisk@1:13.17.1~dfsg-1?distro=sid
purl pkg:deb/debian/asterisk@1:13.17.1~dfsg-1?distro=sid
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/asterisk@1:13.17.1~dfsg-1%3Fdistro=sid
1
url pkg:deb/debian/asterisk@1:16.28.0~dfsg-0%2Bdeb11u4?distro=sid
purl pkg:deb/debian/asterisk@1:16.28.0~dfsg-0%2Bdeb11u4?distro=sid
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-r54j-ydjm-4uca
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/asterisk@1:16.28.0~dfsg-0%252Bdeb11u4%3Fdistro=sid
2
url pkg:deb/debian/asterisk@1:22.8.2%2Bdfsg%2B~cs6.15.60671435-1?distro=sid
purl pkg:deb/debian/asterisk@1:22.8.2%2Bdfsg%2B~cs6.15.60671435-1?distro=sid
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/asterisk@1:22.8.2%252Bdfsg%252B~cs6.15.60671435-1%3Fdistro=sid
3
url pkg:deb/debian/asterisk@1:22.9.0%2Bdfsg%2B~cs6.16.60671434-1?distro=sid
purl pkg:deb/debian/asterisk@1:22.9.0%2Bdfsg%2B~cs6.16.60671434-1?distro=sid
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/asterisk@1:22.9.0%252Bdfsg%252B~cs6.16.60671434-1%3Fdistro=sid
aliases CVE-2017-14099
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-r6s6-y3q8-vydc
2
url VCID-u4gv-ss9p-sqe9
vulnerability_id VCID-u4gv-ss9p-sqe9
summary
Multiple vulnerabilities have been found in Asterisk, the worst of
    which allows remote execution of arbitrary shell commands.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2017-14098
reference_id
reference_type
scores
0
value 0.40123
scoring_system epss
scoring_elements 0.97314
published_at 2026-04-01T12:55:00Z
1
value 0.40123
scoring_system epss
scoring_elements 0.9732
published_at 2026-04-02T12:55:00Z
2
value 0.40123
scoring_system epss
scoring_elements 0.97324
published_at 2026-04-04T12:55:00Z
3
value 0.40123
scoring_system epss
scoring_elements 0.97325
published_at 2026-04-07T12:55:00Z
4
value 0.40123
scoring_system epss
scoring_elements 0.97332
published_at 2026-04-09T12:55:00Z
5
value 0.40123
scoring_system epss
scoring_elements 0.97334
published_at 2026-04-11T12:55:00Z
6
value 0.40123
scoring_system epss
scoring_elements 0.97335
published_at 2026-04-12T12:55:00Z
7
value 0.40123
scoring_system epss
scoring_elements 0.97336
published_at 2026-04-13T12:55:00Z
8
value 0.40123
scoring_system epss
scoring_elements 0.97344
published_at 2026-04-16T12:55:00Z
9
value 0.40123
scoring_system epss
scoring_elements 0.97347
published_at 2026-04-18T12:55:00Z
10
value 0.40123
scoring_system epss
scoring_elements 0.97348
published_at 2026-04-21T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2017-14098
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14098
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14098
2
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=873909
reference_id 873909
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=873909
3
reference_url https://security.gentoo.org/glsa/201710-29
reference_id GLSA-201710-29
reference_type
scores
url https://security.gentoo.org/glsa/201710-29
fixed_packages
0
url pkg:deb/debian/asterisk@1:13.17.1~dfsg-1?distro=sid
purl pkg:deb/debian/asterisk@1:13.17.1~dfsg-1?distro=sid
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/asterisk@1:13.17.1~dfsg-1%3Fdistro=sid
1
url pkg:deb/debian/asterisk@1:16.28.0~dfsg-0%2Bdeb11u4?distro=sid
purl pkg:deb/debian/asterisk@1:16.28.0~dfsg-0%2Bdeb11u4?distro=sid
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-r54j-ydjm-4uca
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/asterisk@1:16.28.0~dfsg-0%252Bdeb11u4%3Fdistro=sid
2
url pkg:deb/debian/asterisk@1:22.8.2%2Bdfsg%2B~cs6.15.60671435-1?distro=sid
purl pkg:deb/debian/asterisk@1:22.8.2%2Bdfsg%2B~cs6.15.60671435-1?distro=sid
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/asterisk@1:22.8.2%252Bdfsg%252B~cs6.15.60671435-1%3Fdistro=sid
3
url pkg:deb/debian/asterisk@1:22.9.0%2Bdfsg%2B~cs6.16.60671434-1?distro=sid
purl pkg:deb/debian/asterisk@1:22.9.0%2Bdfsg%2B~cs6.16.60671434-1?distro=sid
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/asterisk@1:22.9.0%252Bdfsg%252B~cs6.16.60671434-1%3Fdistro=sid
aliases CVE-2017-14098
risk_score 0.2
exploitability 0.5
weighted_severity 0.4
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-u4gv-ss9p-sqe9
Risk_scorenull
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:deb/debian/asterisk@1:13.17.1~dfsg-1%3Fdistro=sid