Package Instance
Lookup for vulnerable packages by Package URL.
GET /api/packages/934677?format=api
{ "url": "http://public2.vulnerablecode.io/api/packages/934677?format=api", "purl": "pkg:deb/debian/pdns-recursor@4.1.8-1?distro=trixie", "type": "deb", "namespace": "debian", "name": "pdns-recursor", "version": "4.1.8-1", "qualifiers": { "distro": "trixie" }, "subpath": "", "is_vulnerable": false, "next_non_vulnerable_version": "4.1.9-1", "latest_non_vulnerable_version": "5.4.1-1", "affected_by_vulnerabilities": [], "fixing_vulnerabilities": [ { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/93581?format=api", "vulnerability_id": "VCID-d4km-jg6b-2kh3", "summary": "An issue has been found in PowerDNS Recursor before version 4.1.8 where a remote attacker sending a DNS query can trigger an out-of-bounds memory read while computing the hash of the query for a packet cache lookup, possibly leading to a crash.", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2018-16855", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.19834", "scoring_system": "epss", "scoring_elements": "0.95466", "published_at": "2026-04-24T12:55:00Z" }, { "value": "0.19834", "scoring_system": "epss", "scoring_elements": "0.95413", "published_at": "2026-04-01T12:55:00Z" }, { "value": "0.19834", "scoring_system": "epss", "scoring_elements": "0.95422", "published_at": "2026-04-02T12:55:00Z" }, { "value": "0.19834", "scoring_system": "epss", "scoring_elements": "0.95428", "published_at": "2026-04-04T12:55:00Z" }, { "value": "0.19834", "scoring_system": "epss", "scoring_elements": "0.95432", "published_at": "2026-04-07T12:55:00Z" }, { "value": "0.19834", "scoring_system": "epss", "scoring_elements": "0.95438", "published_at": "2026-04-08T12:55:00Z" }, { "value": "0.19834", "scoring_system": "epss", "scoring_elements": "0.95441", "published_at": "2026-04-09T12:55:00Z" }, { "value": "0.19834", "scoring_system": "epss", "scoring_elements": "0.95445", "published_at": "2026-04-12T12:55:00Z" }, { "value": "0.19834", "scoring_system": "epss", "scoring_elements": "0.95447", "published_at": "2026-04-13T12:55:00Z" }, { "value": "0.19834", "scoring_system": "epss", "scoring_elements": "0.95456", "published_at": "2026-04-16T12:55:00Z" }, { "value": "0.19834", "scoring_system": "epss", "scoring_elements": "0.9546", "published_at": "2026-04-18T12:55:00Z" }, { "value": "0.19834", "scoring_system": "epss", "scoring_elements": "0.95464", "published_at": "2026-04-21T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2018-16855" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-16855", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-16855" }, { "reference_url": "https://security.archlinux.org/ASA-201811-21", "reference_id": "ASA-201811-21", "reference_type": "", "scores": [], "url": "https://security.archlinux.org/ASA-201811-21" }, { "reference_url": "https://security.archlinux.org/AVG-821", "reference_id": "AVG-821", "reference_type": "", "scores": [ { "value": "Medium", "scoring_system": "archlinux", "scoring_elements": "" } ], "url": "https://security.archlinux.org/AVG-821" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/934677?format=api", "purl": "pkg:deb/debian/pdns-recursor@4.1.8-1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/pdns-recursor@4.1.8-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/934661?format=api", "purl": "pkg:deb/debian/pdns-recursor@4.4.2-3?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-26wf-1bqp-sbff" }, { "vulnerability": "VCID-2ugc-uygs-hqb8" }, { "vulnerability": "VCID-5afe-ws96-nqh9" }, { "vulnerability": "VCID-66sa-bc5p-jqde" }, { "vulnerability": "VCID-7dc3-qdk8-k7b2" }, { "vulnerability": "VCID-8tar-s444-zfac" }, { "vulnerability": "VCID-anab-r9ty-1yh1" }, { "vulnerability": "VCID-cdzz-8tc8-jucu" }, { "vulnerability": "VCID-chzq-qej6-rkdq" }, { "vulnerability": "VCID-k3re-ss39-zugm" }, { "vulnerability": "VCID-m445-c6a1-uugf" }, { "vulnerability": "VCID-mkcs-362g-t7aq" }, { "vulnerability": "VCID-mzne-k7ry-pubm" }, { "vulnerability": "VCID-pfhu-1qdf-p7d5" }, { "vulnerability": "VCID-pjbp-1jgm-s3cg" }, { "vulnerability": "VCID-umcq-ztbz-qfb2" }, { "vulnerability": "VCID-v9yz-hcqv-83gu" }, { "vulnerability": "VCID-vprj-j7u6-zbe7" }, { "vulnerability": "VCID-wmgd-z2j3-h7d9" }, { "vulnerability": "VCID-wywf-pmyt-zud4" }, { "vulnerability": "VCID-xasd-r2rc-2ufq" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/pdns-recursor@4.4.2-3%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/934659?format=api", "purl": "pkg:deb/debian/pdns-recursor@4.8.8-1%2Bdeb12u1?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-26wf-1bqp-sbff" }, { "vulnerability": "VCID-2ugc-uygs-hqb8" }, { "vulnerability": "VCID-5afe-ws96-nqh9" }, { "vulnerability": "VCID-anab-r9ty-1yh1" }, { "vulnerability": "VCID-cdzz-8tc8-jucu" }, { "vulnerability": "VCID-chzq-qej6-rkdq" }, { "vulnerability": "VCID-k3re-ss39-zugm" }, { "vulnerability": "VCID-m445-c6a1-uugf" }, { "vulnerability": "VCID-mzne-k7ry-pubm" }, { "vulnerability": "VCID-pfhu-1qdf-p7d5" }, { "vulnerability": "VCID-pjbp-1jgm-s3cg" }, { "vulnerability": "VCID-umcq-ztbz-qfb2" }, { "vulnerability": "VCID-v9yz-hcqv-83gu" }, { "vulnerability": "VCID-wywf-pmyt-zud4" }, { "vulnerability": "VCID-xasd-r2rc-2ufq" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/pdns-recursor@4.8.8-1%252Bdeb12u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/934663?format=api", "purl": "pkg:deb/debian/pdns-recursor@5.2.8-0%2Bdeb13u1?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-26wf-1bqp-sbff" }, { "vulnerability": "VCID-5afe-ws96-nqh9" }, { "vulnerability": "VCID-anab-r9ty-1yh1" }, { "vulnerability": "VCID-chzq-qej6-rkdq" }, { "vulnerability": "VCID-k3re-ss39-zugm" }, { "vulnerability": "VCID-mzne-k7ry-pubm" }, { "vulnerability": "VCID-pfhu-1qdf-p7d5" }, { "vulnerability": "VCID-v9yz-hcqv-83gu" }, { "vulnerability": "VCID-xasd-r2rc-2ufq" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/pdns-recursor@5.2.8-0%252Bdeb13u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/934662?format=api", "purl": "pkg:deb/debian/pdns-recursor@5.4.0-1?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-26wf-1bqp-sbff" }, { "vulnerability": "VCID-5afe-ws96-nqh9" }, { "vulnerability": "VCID-anab-r9ty-1yh1" }, { "vulnerability": "VCID-k3re-ss39-zugm" }, { "vulnerability": "VCID-mzne-k7ry-pubm" }, { "vulnerability": "VCID-v9yz-hcqv-83gu" }, { "vulnerability": "VCID-xasd-r2rc-2ufq" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/pdns-recursor@5.4.0-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1076115?format=api", "purl": "pkg:deb/debian/pdns-recursor@5.4.1-1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/pdns-recursor@5.4.1-1%3Fdistro=trixie" } ], "aliases": [ "CVE-2018-16855" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-d4km-jg6b-2kh3" } ], "risk_score": null, "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/pdns-recursor@4.1.8-1%3Fdistro=trixie" }