Lookup for vulnerable packages by Package URL.

Purlpkg:rpm/redhat/qemu-kvm@17:7.2.0-14?arch=el9_2
Typerpm
Namespaceredhat
Nameqemu-kvm
Version17:7.2.0-14
Qualifiers
arch el9_2
Subpath
Is_vulnerabletrue
Next_non_vulnerable_versionnull
Latest_non_vulnerable_versionnull
Affected_by_vulnerabilities
0
url VCID-7cbd-jf8n-3fhx
vulnerability_id VCID-7cbd-jf8n-3fhx
summary QEMU: VNC: integer underflow in vnc_client_cut_text_ext leads to CPU exhaustion
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-3165.json
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-3165.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2022-3165
reference_id
reference_type
scores
0
value 0.00171
scoring_system epss
scoring_elements 0.3847
published_at 2026-04-02T12:55:00Z
1
value 0.00171
scoring_system epss
scoring_elements 0.38494
published_at 2026-04-04T12:55:00Z
2
value 0.00171
scoring_system epss
scoring_elements 0.38358
published_at 2026-04-07T12:55:00Z
3
value 0.00171
scoring_system epss
scoring_elements 0.38409
published_at 2026-04-08T12:55:00Z
4
value 0.00171
scoring_system epss
scoring_elements 0.38417
published_at 2026-04-09T12:55:00Z
5
value 0.00171
scoring_system epss
scoring_elements 0.38433
published_at 2026-04-11T12:55:00Z
6
value 0.00181
scoring_system epss
scoring_elements 0.39729
published_at 2026-04-12T12:55:00Z
7
value 0.00181
scoring_system epss
scoring_elements 0.39735
published_at 2026-04-18T12:55:00Z
8
value 0.00181
scoring_system epss
scoring_elements 0.39651
published_at 2026-04-21T12:55:00Z
9
value 0.00181
scoring_system epss
scoring_elements 0.39472
published_at 2026-04-24T12:55:00Z
10
value 0.00181
scoring_system epss
scoring_elements 0.39713
published_at 2026-04-13T12:55:00Z
11
value 0.00181
scoring_system epss
scoring_elements 0.39763
published_at 2026-04-16T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2022-3165
2
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
3
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1021019
reference_id 1021019
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1021019
4
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2129739
reference_id 2129739
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2129739
5
reference_url https://gitlab.com/qemu-project/qemu/-/commit/d307040b18
reference_id d307040b18
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-05-14T20:11:42Z/
url https://gitlab.com/qemu-project/qemu/-/commit/d307040b18
6
reference_url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/I36LKZA7Z65J3LJU2P37LVTWDFTXBMPU/
reference_id I36LKZA7Z65J3LJU2P37LVTWDFTXBMPU
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-05-14T20:11:42Z/
url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/I36LKZA7Z65J3LJU2P37LVTWDFTXBMPU/
7
reference_url https://security.netapp.com/advisory/ntap-20221223-0006/
reference_id ntap-20221223-0006
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-05-14T20:11:42Z/
url https://security.netapp.com/advisory/ntap-20221223-0006/
8
reference_url https://access.redhat.com/errata/RHSA-2023:2162
reference_id RHSA-2023:2162
reference_type
scores
url https://access.redhat.com/errata/RHSA-2023:2162
9
reference_url https://access.redhat.com/errata/RHSA-2023:2757
reference_id RHSA-2023:2757
reference_type
scores
url https://access.redhat.com/errata/RHSA-2023:2757
10
reference_url https://usn.ubuntu.com/5772-1/
reference_id USN-5772-1
reference_type
scores
url https://usn.ubuntu.com/5772-1/
11
reference_url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZTY7TVHX62OJWF6IOBCIGLR2N5K4QN3E/
reference_id ZTY7TVHX62OJWF6IOBCIGLR2N5K4QN3E
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-05-14T20:11:42Z/
url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZTY7TVHX62OJWF6IOBCIGLR2N5K4QN3E/
fixed_packages
aliases CVE-2022-3165
risk_score 3.0
exploitability 0.5
weighted_severity 5.9
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-7cbd-jf8n-3fhx
1
url VCID-z19w-mr4e-9fh4
vulnerability_id VCID-z19w-mr4e-9fh4
summary Multiple vulnerabilities have been discovered in QEMU, the worst of which could lead to a denial of service.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-4172.json
reference_id
reference_type
scores
0
value 6.0
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-4172.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2022-4172
reference_id
reference_type
scores
0
value 0.0003
scoring_system epss
scoring_elements 0.08693
published_at 2026-04-24T12:55:00Z
1
value 0.0003
scoring_system epss
scoring_elements 0.0868
published_at 2026-04-21T12:55:00Z
2
value 0.00032
scoring_system epss
scoring_elements 0.09242
published_at 2026-04-02T12:55:00Z
3
value 0.00032
scoring_system epss
scoring_elements 0.0929
published_at 2026-04-04T12:55:00Z
4
value 0.00032
scoring_system epss
scoring_elements 0.09208
published_at 2026-04-07T12:55:00Z
5
value 0.00032
scoring_system epss
scoring_elements 0.09283
published_at 2026-04-08T12:55:00Z
6
value 0.00032
scoring_system epss
scoring_elements 0.09327
published_at 2026-04-09T12:55:00Z
7
value 0.00032
scoring_system epss
scoring_elements 0.09336
published_at 2026-04-11T12:55:00Z
8
value 0.00032
scoring_system epss
scoring_elements 0.09309
published_at 2026-04-12T12:55:00Z
9
value 0.00032
scoring_system epss
scoring_elements 0.09295
published_at 2026-04-13T12:55:00Z
10
value 0.00032
scoring_system epss
scoring_elements 0.09187
published_at 2026-04-16T12:55:00Z
11
value 0.00032
scoring_system epss
scoring_elements 0.09186
published_at 2026-04-18T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2022-4172
2
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 6
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
3
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1025123
reference_id 1025123
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1025123
4
reference_url https://gitlab.com/qemu-project/qemu/-/issues/1268
reference_id 1268
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-14T16:05:37Z/
url https://gitlab.com/qemu-project/qemu/-/issues/1268
5
reference_url https://lore.kernel.org/qemu-devel/20221024154233.1043347-1-lk%40c--e.de/
reference_id 20221024154233.1043347-1-lk%40c--e.de
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-14T16:05:37Z/
url https://lore.kernel.org/qemu-devel/20221024154233.1043347-1-lk%40c--e.de/
6
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2149105
reference_id 2149105
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2149105
7
reference_url https://gitlab.com/qemu-project/qemu/-/commit/defb7098
reference_id defb7098
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-14T16:05:37Z/
url https://gitlab.com/qemu-project/qemu/-/commit/defb7098
8
reference_url https://security.gentoo.org/glsa/202408-18
reference_id GLSA-202408-18
reference_type
scores
url https://security.gentoo.org/glsa/202408-18
9
reference_url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/I7J5IRXJYLELW7D43A75LOWRUE5EU54O/
reference_id I7J5IRXJYLELW7D43A75LOWRUE5EU54O
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-14T16:05:37Z/
url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/I7J5IRXJYLELW7D43A75LOWRUE5EU54O/
10
reference_url https://security.netapp.com/advisory/ntap-20230127-0013/
reference_id ntap-20230127-0013
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-14T16:05:37Z/
url https://security.netapp.com/advisory/ntap-20230127-0013/
11
reference_url https://access.redhat.com/errata/RHSA-2023:2162
reference_id RHSA-2023:2162
reference_type
scores
url https://access.redhat.com/errata/RHSA-2023:2162
12
reference_url https://usn.ubuntu.com/6167-1/
reference_id USN-6167-1
reference_type
scores
url https://usn.ubuntu.com/6167-1/
fixed_packages
aliases CVE-2022-4172
risk_score 3.0
exploitability 0.5
weighted_severity 5.9
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-z19w-mr4e-9fh4
Fixing_vulnerabilities
Risk_score3.0
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:rpm/redhat/qemu-kvm@17:7.2.0-14%3Farch=el9_2