Django REST framework

Vulnerability Instance

Lookup for vulnerabilities affecting packages.

Vulnerability_idVCID-5vh6-usw6-2qhy
Summary
Improper Input Validation
A flaw was found in the c-ares package. The ares_set_sortlist is missing checks about the validity of the input string, which allows a possible arbitrary length stack overflow. This issue may cause a denial of service or a limited impact on confidentiality and integrity.
Aliases
0
alias CVE-2022-4904
Fixed_packages
0
url pkg:deb/debian/c-ares@1.17.1-1%2Bdeb11u2?distro=trixie
purl pkg:deb/debian/c-ares@1.17.1-1%2Bdeb11u2?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/c-ares@1.17.1-1%252Bdeb11u2%3Fdistro=trixie
1
url pkg:deb/debian/c-ares@1.17.1-1%2Bdeb11u3
purl pkg:deb/debian/c-ares@1.17.1-1%2Bdeb11u3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3hy7-94d4-kyev
1
vulnerability VCID-3nsu-sz9r-pkbf
2
vulnerability VCID-h5yg-sx9b-ska5
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/c-ares@1.17.1-1%252Bdeb11u3
2
url pkg:deb/debian/c-ares@1.17.1-1%2Bdeb11u3?distro=trixie
purl pkg:deb/debian/c-ares@1.17.1-1%2Bdeb11u3?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3hy7-94d4-kyev
1
vulnerability VCID-3nsu-sz9r-pkbf
2
vulnerability VCID-h5yg-sx9b-ska5
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/c-ares@1.17.1-1%252Bdeb11u3%3Fdistro=trixie
3
url pkg:deb/debian/c-ares@1.18.1-2?distro=trixie
purl pkg:deb/debian/c-ares@1.18.1-2?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/c-ares@1.18.1-2%3Fdistro=trixie
4
url pkg:deb/debian/c-ares@1.18.1-3?distro=trixie
purl pkg:deb/debian/c-ares@1.18.1-3?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3hy7-94d4-kyev
1
vulnerability VCID-3nsu-sz9r-pkbf
2
vulnerability VCID-h5yg-sx9b-ska5
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/c-ares@1.18.1-3%3Fdistro=trixie
5
url pkg:deb/debian/c-ares@1.34.5-1%2Bdeb13u1?distro=trixie
purl pkg:deb/debian/c-ares@1.34.5-1%2Bdeb13u1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/c-ares@1.34.5-1%252Bdeb13u1%3Fdistro=trixie
6
url pkg:deb/debian/c-ares@1.34.6-1?distro=trixie
purl pkg:deb/debian/c-ares@1.34.6-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/c-ares@1.34.6-1%3Fdistro=trixie
7
url pkg:ebuild/net-dns/c-ares@1.19.0
purl pkg:ebuild/net-dns/c-ares@1.19.0
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:ebuild/net-dns/c-ares@1.19.0
Affected_packages
0
url pkg:deb/debian/c-ares@1.5.2-4
purl pkg:deb/debian/c-ares@1.5.2-4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1xdz-dku3-qqc4
1
vulnerability VCID-33wk-w9ez-vyd2
2
vulnerability VCID-5vh6-usw6-2qhy
3
vulnerability VCID-gx39-xzj1-vfb7
4
vulnerability VCID-krvu-3d14-yudt
5
vulnerability VCID-m4sn-7wuq-e3cd
6
vulnerability VCID-pavw-rssx-53cg
7
vulnerability VCID-vezx-cgbw-zqdp
8
vulnerability VCID-w3cx-2jcp-pyga
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/c-ares@1.5.2-4
1
url pkg:deb/debian/c-ares@1.7.3-1squeeze1
purl pkg:deb/debian/c-ares@1.7.3-1squeeze1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1xdz-dku3-qqc4
1
vulnerability VCID-33wk-w9ez-vyd2
2
vulnerability VCID-5vh6-usw6-2qhy
3
vulnerability VCID-gx39-xzj1-vfb7
4
vulnerability VCID-krvu-3d14-yudt
5
vulnerability VCID-m4sn-7wuq-e3cd
6
vulnerability VCID-pavw-rssx-53cg
7
vulnerability VCID-vezx-cgbw-zqdp
8
vulnerability VCID-w3cx-2jcp-pyga
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/c-ares@1.7.3-1squeeze1
2
url pkg:deb/debian/c-ares@1.9.1-3
purl pkg:deb/debian/c-ares@1.9.1-3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1xdz-dku3-qqc4
1
vulnerability VCID-33wk-w9ez-vyd2
2
vulnerability VCID-5vh6-usw6-2qhy
3
vulnerability VCID-gx39-xzj1-vfb7
4
vulnerability VCID-krvu-3d14-yudt
5
vulnerability VCID-m4sn-7wuq-e3cd
6
vulnerability VCID-pavw-rssx-53cg
7
vulnerability VCID-vezx-cgbw-zqdp
8
vulnerability VCID-w3cx-2jcp-pyga
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/c-ares@1.9.1-3
3
url pkg:deb/debian/c-ares@1.10.0-2
purl pkg:deb/debian/c-ares@1.10.0-2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1xdz-dku3-qqc4
1
vulnerability VCID-33wk-w9ez-vyd2
2
vulnerability VCID-5vh6-usw6-2qhy
3
vulnerability VCID-gx39-xzj1-vfb7
4
vulnerability VCID-krvu-3d14-yudt
5
vulnerability VCID-m4sn-7wuq-e3cd
6
vulnerability VCID-pavw-rssx-53cg
7
vulnerability VCID-vezx-cgbw-zqdp
8
vulnerability VCID-w3cx-2jcp-pyga
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/c-ares@1.10.0-2
4
url pkg:deb/debian/c-ares@1.10.0-2%2Bdeb8u2
purl pkg:deb/debian/c-ares@1.10.0-2%2Bdeb8u2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1xdz-dku3-qqc4
1
vulnerability VCID-33wk-w9ez-vyd2
2
vulnerability VCID-5vh6-usw6-2qhy
3
vulnerability VCID-gx39-xzj1-vfb7
4
vulnerability VCID-krvu-3d14-yudt
5
vulnerability VCID-m4sn-7wuq-e3cd
6
vulnerability VCID-pavw-rssx-53cg
7
vulnerability VCID-vezx-cgbw-zqdp
8
vulnerability VCID-w3cx-2jcp-pyga
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/c-ares@1.10.0-2%252Bdeb8u2
5
url pkg:deb/debian/c-ares@1.12.0-1~bpo8%2B1
purl pkg:deb/debian/c-ares@1.12.0-1~bpo8%2B1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1xdz-dku3-qqc4
1
vulnerability VCID-33wk-w9ez-vyd2
2
vulnerability VCID-5vh6-usw6-2qhy
3
vulnerability VCID-gx39-xzj1-vfb7
4
vulnerability VCID-krvu-3d14-yudt
5
vulnerability VCID-m4sn-7wuq-e3cd
6
vulnerability VCID-pavw-rssx-53cg
7
vulnerability VCID-vezx-cgbw-zqdp
8
vulnerability VCID-w3cx-2jcp-pyga
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/c-ares@1.12.0-1~bpo8%252B1
6
url pkg:deb/debian/c-ares@1.12.0-1%2Bdeb9u1
purl pkg:deb/debian/c-ares@1.12.0-1%2Bdeb9u1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1xdz-dku3-qqc4
1
vulnerability VCID-5vh6-usw6-2qhy
2
vulnerability VCID-gx39-xzj1-vfb7
3
vulnerability VCID-krvu-3d14-yudt
4
vulnerability VCID-m4sn-7wuq-e3cd
5
vulnerability VCID-pavw-rssx-53cg
6
vulnerability VCID-vezx-cgbw-zqdp
7
vulnerability VCID-w3cx-2jcp-pyga
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/c-ares@1.12.0-1%252Bdeb9u1
7
url pkg:deb/debian/c-ares@1.14.0-1%2Bdeb10u1
purl pkg:deb/debian/c-ares@1.14.0-1%2Bdeb10u1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1xdz-dku3-qqc4
1
vulnerability VCID-5vh6-usw6-2qhy
2
vulnerability VCID-gx39-xzj1-vfb7
3
vulnerability VCID-krvu-3d14-yudt
4
vulnerability VCID-m4sn-7wuq-e3cd
5
vulnerability VCID-pavw-rssx-53cg
6
vulnerability VCID-vezx-cgbw-zqdp
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/c-ares@1.14.0-1%252Bdeb10u1
8
url pkg:rpm/redhat/c-ares@1.13.0-6.el8_8?arch=3
purl pkg:rpm/redhat/c-ares@1.13.0-6.el8_8?arch=3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-5vh6-usw6-2qhy
1
vulnerability VCID-vezx-cgbw-zqdp
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/c-ares@1.13.0-6.el8_8%3Farch=3
9
url pkg:rpm/redhat/c-ares@1.13.0-8?arch=el8
purl pkg:rpm/redhat/c-ares@1.13.0-8?arch=el8
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-5vh6-usw6-2qhy
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/c-ares@1.13.0-8%3Farch=el8
10
url pkg:rpm/redhat/c-ares@1.17.1-5.el9_0?arch=2
purl pkg:rpm/redhat/c-ares@1.17.1-5.el9_0?arch=2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-5vh6-usw6-2qhy
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/c-ares@1.17.1-5.el9_0%3Farch=2
11
url pkg:rpm/redhat/c-ares@1.17.1-5.el9_2?arch=2
purl pkg:rpm/redhat/c-ares@1.17.1-5.el9_2?arch=2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-5vh6-usw6-2qhy
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/c-ares@1.17.1-5.el9_2%3Farch=2
12
url pkg:rpm/redhat/c-ares@1.19.1-1?arch=el9
purl pkg:rpm/redhat/c-ares@1.19.1-1?arch=el9
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3nsu-sz9r-pkbf
1
vulnerability VCID-5vh6-usw6-2qhy
2
vulnerability VCID-h5yg-sx9b-ska5
3
vulnerability VCID-vezx-cgbw-zqdp
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/c-ares@1.19.1-1%3Farch=el9
13
url pkg:rpm/redhat/nodejs@1:16.19.1-1?arch=el9_2
purl pkg:rpm/redhat/nodejs@1:16.19.1-1?arch=el9_2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-5vh6-usw6-2qhy
1
vulnerability VCID-7nnu-jtjx-u3ff
2
vulnerability VCID-dtvs-pgam-qkbp
3
vulnerability VCID-hnjv-fp2r-vqfq
4
vulnerability VCID-m78y-81wr-y3cz
5
vulnerability VCID-vh17-44d1-kyf7
6
vulnerability VCID-y9aa-2a31-ufa7
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/nodejs@1:16.19.1-1%3Farch=el9_2
14
url pkg:rpm/redhat/nodejs@1:16.20.2-1?arch=el9_0
purl pkg:rpm/redhat/nodejs@1:16.20.2-1?arch=el9_0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-38k9-23j3-eqh7
1
vulnerability VCID-5vh6-usw6-2qhy
2
vulnerability VCID-9yq7-aba3-c7c3
3
vulnerability VCID-dtvs-pgam-qkbp
4
vulnerability VCID-e7u5-356v-jbg7
5
vulnerability VCID-hnjv-fp2r-vqfq
6
vulnerability VCID-kj75-vmwa-gqgq
7
vulnerability VCID-m78y-81wr-y3cz
8
vulnerability VCID-q75s-43sx-4kbg
9
vulnerability VCID-sag8-repb-g3f4
10
vulnerability VCID-vh17-44d1-kyf7
11
vulnerability VCID-zstw-3wmu-u3c8
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/nodejs@1:16.20.2-1%3Farch=el9_0
15
url pkg:rpm/redhat/rh-nodejs14@3.6-2?arch=el7
purl pkg:rpm/redhat/rh-nodejs14@3.6-2?arch=el7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-532v-5mum-qkdf
1
vulnerability VCID-5vh6-usw6-2qhy
2
vulnerability VCID-7nnu-jtjx-u3ff
3
vulnerability VCID-hnjv-fp2r-vqfq
4
vulnerability VCID-m78y-81wr-y3cz
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/rh-nodejs14@3.6-2%3Farch=el7
16
url pkg:rpm/redhat/rh-nodejs14-nodejs@14.21.3-2?arch=el7
purl pkg:rpm/redhat/rh-nodejs14-nodejs@14.21.3-2?arch=el7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-532v-5mum-qkdf
1
vulnerability VCID-5vh6-usw6-2qhy
2
vulnerability VCID-7nnu-jtjx-u3ff
3
vulnerability VCID-hnjv-fp2r-vqfq
4
vulnerability VCID-m78y-81wr-y3cz
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/rh-nodejs14-nodejs@14.21.3-2%3Farch=el7
References
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-4904.json
reference_id
reference_type
scores
0
value 8.6
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-4904.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2022-4904
reference_id
reference_type
scores
0
value 0.00161
scoring_system epss
scoring_elements 0.37124
published_at 2026-04-02T12:55:00Z
1
value 0.00161
scoring_system epss
scoring_elements 0.37044
published_at 2026-04-16T12:55:00Z
2
value 0.00161
scoring_system epss
scoring_elements 0.37156
published_at 2026-04-04T12:55:00Z
3
value 0.00161
scoring_system epss
scoring_elements 0.36987
published_at 2026-04-07T12:55:00Z
4
value 0.00161
scoring_system epss
scoring_elements 0.37037
published_at 2026-04-08T12:55:00Z
5
value 0.00161
scoring_system epss
scoring_elements 0.3705
published_at 2026-04-09T12:55:00Z
6
value 0.00161
scoring_system epss
scoring_elements 0.37059
published_at 2026-04-11T12:55:00Z
7
value 0.00161
scoring_system epss
scoring_elements 0.37025
published_at 2026-04-12T12:55:00Z
8
value 0.00161
scoring_system epss
scoring_elements 0.36999
published_at 2026-04-13T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2022-4904
2
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2168631
reference_id
reference_type
scores
0
value 8.6
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-12-02T20:25:39Z/
url https://bugzilla.redhat.com/show_bug.cgi?id=2168631
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4904
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4904
4
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 6.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
5
reference_url https://github.com/c-ares/c-ares/issues/496
reference_id
reference_type
scores
0
value 8.6
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-12-02T20:25:39Z/
url https://github.com/c-ares/c-ares/issues/496
6
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/33LDNS6RPOPP36Z4MPWXALUQZXJCWJS2/
reference_id
reference_type
scores
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/33LDNS6RPOPP36Z4MPWXALUQZXJCWJS2/
7
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1031525
reference_id 1031525
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1031525
8
reference_url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/33LDNS6RPOPP36Z4MPWXALUQZXJCWJS2/
reference_id 33LDNS6RPOPP36Z4MPWXALUQZXJCWJS2
reference_type
scores
0
value 8.6
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-12-02T20:25:39Z/
url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/33LDNS6RPOPP36Z4MPWXALUQZXJCWJS2/
9
reference_url https://nvd.nist.gov/vuln/detail/CVE-2022-4904
reference_id CVE-2022-4904
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2022-4904
10
reference_url https://security.gentoo.org/glsa/202401-02
reference_id GLSA-202401-02
reference_type
scores
0
value 8.6
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-12-02T20:25:39Z/
url https://security.gentoo.org/glsa/202401-02
11
reference_url https://access.redhat.com/errata/RHSA-2023:1533
reference_id RHSA-2023:1533
reference_type
scores
url https://access.redhat.com/errata/RHSA-2023:1533
12
reference_url https://access.redhat.com/errata/RHSA-2023:1582
reference_id RHSA-2023:1582
reference_type
scores
url https://access.redhat.com/errata/RHSA-2023:1582
13
reference_url https://access.redhat.com/errata/RHSA-2023:1742
reference_id RHSA-2023:1742
reference_type
scores
url https://access.redhat.com/errata/RHSA-2023:1742
14
reference_url https://access.redhat.com/errata/RHSA-2023:1743
reference_id RHSA-2023:1743
reference_type
scores
url https://access.redhat.com/errata/RHSA-2023:1743
15
reference_url https://access.redhat.com/errata/RHSA-2023:1744
reference_id RHSA-2023:1744
reference_type
scores
url https://access.redhat.com/errata/RHSA-2023:1744
16
reference_url https://access.redhat.com/errata/RHSA-2023:2654
reference_id RHSA-2023:2654
reference_type
scores
url https://access.redhat.com/errata/RHSA-2023:2654
17
reference_url https://access.redhat.com/errata/RHSA-2023:2655
reference_id RHSA-2023:2655
reference_type
scores
url https://access.redhat.com/errata/RHSA-2023:2655
18
reference_url https://access.redhat.com/errata/RHSA-2023:4035
reference_id RHSA-2023:4035
reference_type
scores
url https://access.redhat.com/errata/RHSA-2023:4035
19
reference_url https://access.redhat.com/errata/RHSA-2023:5533
reference_id RHSA-2023:5533
reference_type
scores
url https://access.redhat.com/errata/RHSA-2023:5533
20
reference_url https://access.redhat.com/errata/RHSA-2023:6291
reference_id RHSA-2023:6291
reference_type
scores
url https://access.redhat.com/errata/RHSA-2023:6291
21
reference_url https://access.redhat.com/errata/RHSA-2023:6635
reference_id RHSA-2023:6635
reference_type
scores
url https://access.redhat.com/errata/RHSA-2023:6635
22
reference_url https://access.redhat.com/errata/RHSA-2023:7116
reference_id RHSA-2023:7116
reference_type
scores
url https://access.redhat.com/errata/RHSA-2023:7116
23
reference_url https://access.redhat.com/errata/RHSA-2023:7368
reference_id RHSA-2023:7368
reference_type
scores
url https://access.redhat.com/errata/RHSA-2023:7368
24
reference_url https://access.redhat.com/errata/RHSA-2023:7543
reference_id RHSA-2023:7543
reference_type
scores
url https://access.redhat.com/errata/RHSA-2023:7543
25
reference_url https://usn.ubuntu.com/5907-1/
reference_id USN-5907-1
reference_type
scores
url https://usn.ubuntu.com/5907-1/
Weaknesses
0
cwe_id 1035
name OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
description Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2017.
1
cwe_id 1284
name Improper Validation of Specified Quantity in Input
description The product receives input that is expected to specify a quantity (such as size or length), but it does not validate or incorrectly validates that the quantity has the required properties.
2
cwe_id 937
name OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
description Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2013.
3
cwe_id 20
name Improper Input Validation
description The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.
4
cwe_id 119
name Improper Restriction of Operations within the Bounds of a Memory Buffer
description The product performs operations on a memory buffer, but it can read from or write to a memory location that is outside of the intended boundary of the buffer.
Exploits
Severity_range_score6.9 - 8.6
Exploitability0.5
Weighted_severity7.7
Risk_score3.9
Resource_urlhttp://public2.vulnerablecode.io/vulnerabilities/VCID-5vh6-usw6-2qhy