Django REST framework

Package Instance

Lookup for vulnerable packages by Package URL.

Purlpkg:deb/debian/varnish@2.1.0-2?distro=trixie
Typedeb
Namespacedebian
Namevarnish
Version2.1.0-2
Qualifiers
distro trixie
Subpath
Is_vulnerablefalse
Next_non_vulnerable_version3.0.4-1
Latest_non_vulnerable_version7.7.3-2
Affected_by_vulnerabilities
Fixing_vulnerabilities
0
url VCID-nrzf-yt7d-x7dh
vulnerability_id VCID-nrzf-yt7d-x7dh
summary The Command Line Interface (aka Server CLI or administration interface) in the master process in the reverse proxy server in Varnish before 2.1.0 does not require authentication for commands received through a TCP port, which allows remote attackers to (1) execute arbitrary code via a vcl.inline directive that provides a VCL configuration file containing inline C code; (2) change the ownership of the master process via param.set, stop, and start directives; (3) read the initial line of an arbitrary file via a vcl.load directive; or (4) conduct cross-site request forgery (CSRF) attacks that leverage a victim's location on a trusted network and improper input validation of directives. NOTE: the vendor disputes this report, saying that it is "fundamentally misguided and pointless.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2009-2936
reference_id
reference_type
scores
0
value 0.6839
scoring_system epss
scoring_elements 0.98594
published_at 2026-04-01T12:55:00Z
1
value 0.6839
scoring_system epss
scoring_elements 0.98596
published_at 2026-04-02T12:55:00Z
2
value 0.6839
scoring_system epss
scoring_elements 0.98599
published_at 2026-04-04T12:55:00Z
3
value 0.6839
scoring_system epss
scoring_elements 0.98601
published_at 2026-04-07T12:55:00Z
4
value 0.6839
scoring_system epss
scoring_elements 0.98603
published_at 2026-04-08T12:55:00Z
5
value 0.6839
scoring_system epss
scoring_elements 0.98605
published_at 2026-04-09T12:55:00Z
6
value 0.6839
scoring_system epss
scoring_elements 0.98607
published_at 2026-04-12T12:55:00Z
7
value 0.6839
scoring_system epss
scoring_elements 0.98608
published_at 2026-04-13T12:55:00Z
8
value 0.6839
scoring_system epss
scoring_elements 0.98613
published_at 2026-04-21T12:55:00Z
9
value 0.6839
scoring_system epss
scoring_elements 0.98614
published_at 2026-04-18T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2009-2936
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2936
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2936
2
reference_url https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/linux/remote/35581.rb
reference_id CVE-2009-2936;OSVDB-67670
reference_type exploit
scores
url https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/linux/remote/35581.rb
fixed_packages
0
url pkg:deb/debian/varnish@2.1.0-2?distro=trixie
purl pkg:deb/debian/varnish@2.1.0-2?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/varnish@2.1.0-2%3Fdistro=trixie
1
url pkg:deb/debian/varnish@6.5.1-1%2Bdeb11u3?distro=trixie
purl pkg:deb/debian/varnish@6.5.1-1%2Bdeb11u3?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-5781-s1ny-q7ey
1
vulnerability VCID-cmeu-b3fh-hkaf
2
vulnerability VCID-djsh-vmzh-sbe7
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/varnish@6.5.1-1%252Bdeb11u3%3Fdistro=trixie
2
url pkg:deb/debian/varnish@7.1.1-2%2Bdeb12u1?distro=trixie
purl pkg:deb/debian/varnish@7.1.1-2%2Bdeb12u1?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-5781-s1ny-q7ey
1
vulnerability VCID-cmeu-b3fh-hkaf
2
vulnerability VCID-djsh-vmzh-sbe7
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/varnish@7.1.1-2%252Bdeb12u1%3Fdistro=trixie
3
url pkg:deb/debian/varnish@7.7.0-3?distro=trixie
purl pkg:deb/debian/varnish@7.7.0-3?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-cmeu-b3fh-hkaf
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/varnish@7.7.0-3%3Fdistro=trixie
4
url pkg:deb/debian/varnish@7.7.3-2?distro=trixie
purl pkg:deb/debian/varnish@7.7.3-2?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/varnish@7.7.3-2%3Fdistro=trixie
aliases CVE-2009-2936
risk_score 1.2
exploitability 2.0
weighted_severity 0.6
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-nrzf-yt7d-x7dh
Risk_scorenull
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:deb/debian/varnish@2.1.0-2%3Fdistro=trixie