Package Instance
Lookup for vulnerable packages by Package URL.
GET /api/packages/87665?format=api
{ "url": "http://public2.vulnerablecode.io/api/packages/87665?format=api", "purl": "pkg:deb/debian/389-ds-base@0?distro=trixie", "type": "deb", "namespace": "debian", "name": "389-ds-base", "version": "0", "qualifiers": { "distro": "trixie" }, "subpath": "", "is_vulnerable": false, "next_non_vulnerable_version": "1.2.11.15-1", "latest_non_vulnerable_version": "3.1.2+vendor1-2", "affected_by_vulnerabilities": [], "fixing_vulnerabilities": [ { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/58358?format=api", "vulnerability_id": "VCID-4v7k-pbgh-r7e8", "summary": "The acllas__handle_group_entry function in servers/plugins/acl/acllas.c in 389 Directory Server before 1.2.10 does not properly handled access control instructions (ACIs) that use certificate groups, which allows remote authenticated LDAP users with a certificate group to cause a denial of service (infinite loop and CPU consumption) by binding to the server.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-0833.json", "reference_id": "", "reference_type": "", "scores": [], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-0833.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2012-0833", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00209", "scoring_system": "epss", "scoring_elements": "0.43344", "published_at": "2026-06-04T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2012-0833" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=787014", "reference_id": "787014", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=787014" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2012:0813", "reference_id": "RHSA-2012:0813", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2012:0813" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2013:0549", "reference_id": "RHSA-2013:0549", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2013:0549" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/87665?format=api", "purl": "pkg:deb/debian/389-ds-base@0?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/389-ds-base@0%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/87666?format=api", "purl": "pkg:deb/debian/389-ds-base@1.4.4.11-2?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-5mdk-bqm7-mkeu" }, { "vulnerability": "VCID-7dna-4mcn-jqd5" }, { "vulnerability": "VCID-ft29-jr9j-jbbm" }, { "vulnerability": "VCID-k27f-tsq5-73fn" }, { "vulnerability": "VCID-ud9m-jz3k-bfhm" }, { "vulnerability": "VCID-vadc-mdbp-q3g9" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/389-ds-base@1.4.4.11-2%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/87664?format=api", "purl": "pkg:deb/debian/389-ds-base@2.3.1%2Bdfsg1-1%2Bdeb12u1?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-5mdk-bqm7-mkeu" }, { "vulnerability": "VCID-7dna-4mcn-jqd5" }, { "vulnerability": "VCID-ft29-jr9j-jbbm" }, { "vulnerability": "VCID-k27f-tsq5-73fn" }, { "vulnerability": "VCID-ud9m-jz3k-bfhm" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/389-ds-base@2.3.1%252Bdfsg1-1%252Bdeb12u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/87668?format=api", "purl": "pkg:deb/debian/389-ds-base@3.1.2%2Bdfsg1-1%2Bdeb13u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/389-ds-base@3.1.2%252Bdfsg1-1%252Bdeb13u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/87667?format=api", "purl": "pkg:deb/debian/389-ds-base@3.1.2%2Bvendor1-2?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/389-ds-base@3.1.2%252Bvendor1-2%3Fdistro=trixie" } ], "aliases": [ "CVE-2012-0833" ], "risk_score": null, "exploitability": "0.5", "weighted_severity": "0.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-4v7k-pbgh-r7e8" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/58360?format=api", "vulnerability_id": "VCID-7vgg-99uc-vycr", "summary": "389 Directory Server before 1.2.11.6 (aka Red Hat Directory Server before 8.2.10-3), when the password of a LDAP user has been changed and audit logging is enabled, saves the new password to the log in plain text, which allows remote authenticated users to read the password.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-2746.json", "reference_id": "", "reference_type": "", "scores": [], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-2746.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2012-2746", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00509", "scoring_system": "epss", "scoring_elements": "0.66689", "published_at": "2026-06-04T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2012-2746" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=833482", "reference_id": "833482", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=833482" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2012:0997", "reference_id": "RHSA-2012:0997", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2012:0997" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2012:1041", "reference_id": "RHSA-2012:1041", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2012:1041" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/87665?format=api", "purl": "pkg:deb/debian/389-ds-base@0?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/389-ds-base@0%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/87666?format=api", "purl": "pkg:deb/debian/389-ds-base@1.4.4.11-2?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-5mdk-bqm7-mkeu" }, { "vulnerability": "VCID-7dna-4mcn-jqd5" }, { "vulnerability": "VCID-ft29-jr9j-jbbm" }, { "vulnerability": "VCID-k27f-tsq5-73fn" }, { "vulnerability": "VCID-ud9m-jz3k-bfhm" }, { "vulnerability": "VCID-vadc-mdbp-q3g9" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/389-ds-base@1.4.4.11-2%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/87664?format=api", "purl": "pkg:deb/debian/389-ds-base@2.3.1%2Bdfsg1-1%2Bdeb12u1?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-5mdk-bqm7-mkeu" }, { "vulnerability": "VCID-7dna-4mcn-jqd5" }, { "vulnerability": "VCID-ft29-jr9j-jbbm" }, { "vulnerability": "VCID-k27f-tsq5-73fn" }, { "vulnerability": "VCID-ud9m-jz3k-bfhm" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/389-ds-base@2.3.1%252Bdfsg1-1%252Bdeb12u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/87668?format=api", "purl": "pkg:deb/debian/389-ds-base@3.1.2%2Bdfsg1-1%2Bdeb13u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/389-ds-base@3.1.2%252Bdfsg1-1%252Bdeb13u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/87667?format=api", "purl": "pkg:deb/debian/389-ds-base@3.1.2%2Bvendor1-2?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/389-ds-base@3.1.2%252Bvendor1-2%3Fdistro=trixie" } ], "aliases": [ "CVE-2012-2746" ], "risk_score": null, "exploitability": "0.5", "weighted_severity": "0.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-7vgg-99uc-vycr" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/58359?format=api", "vulnerability_id": "VCID-9u6q-envm-dyej", "summary": "389 Directory Server before 1.2.11.6 (aka Red Hat Directory Server before 8.2.10-3), after the password for a LDAP user has been changed and before the server has been reset, allows remote attackers to read the plaintext password via the unhashed#user#password attribute.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-2678.json", "reference_id": "", "reference_type": "", "scores": [], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-2678.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2012-2678", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00238", "scoring_system": "epss", "scoring_elements": "0.47012", "published_at": "2026-06-04T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2012-2678" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=829933", "reference_id": "829933", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=829933" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2012:0997", "reference_id": "RHSA-2012:0997", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2012:0997" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2012:1041", "reference_id": "RHSA-2012:1041", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2012:1041" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/87665?format=api", "purl": "pkg:deb/debian/389-ds-base@0?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/389-ds-base@0%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/87666?format=api", "purl": "pkg:deb/debian/389-ds-base@1.4.4.11-2?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-5mdk-bqm7-mkeu" }, { "vulnerability": "VCID-7dna-4mcn-jqd5" }, { "vulnerability": "VCID-ft29-jr9j-jbbm" }, { "vulnerability": "VCID-k27f-tsq5-73fn" }, { "vulnerability": "VCID-ud9m-jz3k-bfhm" }, { "vulnerability": "VCID-vadc-mdbp-q3g9" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/389-ds-base@1.4.4.11-2%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/87664?format=api", "purl": "pkg:deb/debian/389-ds-base@2.3.1%2Bdfsg1-1%2Bdeb12u1?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-5mdk-bqm7-mkeu" }, { "vulnerability": "VCID-7dna-4mcn-jqd5" }, { "vulnerability": "VCID-ft29-jr9j-jbbm" }, { "vulnerability": "VCID-k27f-tsq5-73fn" }, { "vulnerability": "VCID-ud9m-jz3k-bfhm" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/389-ds-base@2.3.1%252Bdfsg1-1%252Bdeb12u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/87668?format=api", "purl": "pkg:deb/debian/389-ds-base@3.1.2%2Bdfsg1-1%2Bdeb13u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/389-ds-base@3.1.2%252Bdfsg1-1%252Bdeb13u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/87667?format=api", "purl": "pkg:deb/debian/389-ds-base@3.1.2%2Bvendor1-2?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/389-ds-base@3.1.2%252Bvendor1-2%3Fdistro=trixie" } ], "aliases": [ "CVE-2012-2678" ], "risk_score": null, "exploitability": "0.5", "weighted_severity": "0.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-9u6q-envm-dyej" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/58391?format=api", "vulnerability_id": "VCID-hdg8-vfaw-uqg7", "summary": "It was found that the fix for CVE-2018-14648 in 389-ds-base, versions 1.4.0.x before 1.4.0.17, was incorrectly applied in RHEL 7.5. An attacker would still be able to provoke excessive CPU consumption leading to a denial of service.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10171.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10171.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2019-10171", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00368", "scoring_system": "epss", "scoring_elements": "0.59027", "published_at": "2026-06-04T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2019-10171" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1722081", "reference_id": "1722081", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1722081" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2019:1789", "reference_id": "RHSA-2019:1789", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2019:1789" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/87665?format=api", "purl": "pkg:deb/debian/389-ds-base@0?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/389-ds-base@0%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/87666?format=api", "purl": "pkg:deb/debian/389-ds-base@1.4.4.11-2?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-5mdk-bqm7-mkeu" }, { "vulnerability": "VCID-7dna-4mcn-jqd5" }, { "vulnerability": "VCID-ft29-jr9j-jbbm" }, { "vulnerability": "VCID-k27f-tsq5-73fn" }, { "vulnerability": "VCID-ud9m-jz3k-bfhm" }, { "vulnerability": "VCID-vadc-mdbp-q3g9" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/389-ds-base@1.4.4.11-2%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/87664?format=api", "purl": "pkg:deb/debian/389-ds-base@2.3.1%2Bdfsg1-1%2Bdeb12u1?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-5mdk-bqm7-mkeu" }, { "vulnerability": "VCID-7dna-4mcn-jqd5" }, { "vulnerability": "VCID-ft29-jr9j-jbbm" }, { "vulnerability": "VCID-k27f-tsq5-73fn" }, { "vulnerability": "VCID-ud9m-jz3k-bfhm" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/389-ds-base@2.3.1%252Bdfsg1-1%252Bdeb12u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/87668?format=api", "purl": "pkg:deb/debian/389-ds-base@3.1.2%2Bdfsg1-1%2Bdeb13u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/389-ds-base@3.1.2%252Bdfsg1-1%252Bdeb13u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/87667?format=api", "purl": "pkg:deb/debian/389-ds-base@3.1.2%2Bvendor1-2?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/389-ds-base@3.1.2%252Bvendor1-2%3Fdistro=trixie" } ], "aliases": [ "CVE-2019-10171" ], "risk_score": 3.4, "exploitability": "0.5", "weighted_severity": "6.8", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-hdg8-vfaw-uqg7" } ], "risk_score": null, "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/389-ds-base@0%3Fdistro=trixie" }