Django REST framework

Vulnerability Instance

Lookup for vulnerabilities affecting packages.

Vulnerability_idVCID-wq7w-nrar-ykde
Summary
A buffer overflow in Python might allow remote attackers to execute
    arbitrary code.
Aliases
0
alias CVE-2017-1000158
Fixed_packages
0
url pkg:apk/alpine/python@2.7.14-r0?arch=armhf&distroversion=v3.4&reponame=main
purl pkg:apk/alpine/python@2.7.14-r0?arch=armhf&distroversion=v3.4&reponame=main
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/python@2.7.14-r0%3Farch=armhf&distroversion=v3.4&reponame=main
1
url pkg:apk/alpine/python@2.7.14-r0?arch=x86&distroversion=v3.4&reponame=main
purl pkg:apk/alpine/python@2.7.14-r0?arch=x86&distroversion=v3.4&reponame=main
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/python@2.7.14-r0%3Farch=x86&distroversion=v3.4&reponame=main
2
url pkg:apk/alpine/python@2.7.14-r0?arch=x86_64&distroversion=v3.4&reponame=main
purl pkg:apk/alpine/python@2.7.14-r0?arch=x86_64&distroversion=v3.4&reponame=main
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/python@2.7.14-r0%3Farch=x86_64&distroversion=v3.4&reponame=main
3
url pkg:apk/alpine/python2@2.7.14-r0?arch=ppc64le&distroversion=v3.6&reponame=main
purl pkg:apk/alpine/python2@2.7.14-r0?arch=ppc64le&distroversion=v3.6&reponame=main
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/python2@2.7.14-r0%3Farch=ppc64le&distroversion=v3.6&reponame=main
4
url pkg:apk/alpine/python2@2.7.14-r0?arch=s390x&distroversion=v3.6&reponame=main
purl pkg:apk/alpine/python2@2.7.14-r0?arch=s390x&distroversion=v3.6&reponame=main
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/python2@2.7.14-r0%3Farch=s390x&distroversion=v3.6&reponame=main
5
url pkg:apk/alpine/python2@2.7.14-r0?arch=x86&distroversion=v3.6&reponame=main
purl pkg:apk/alpine/python2@2.7.14-r0?arch=x86&distroversion=v3.6&reponame=main
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/python2@2.7.14-r0%3Farch=x86&distroversion=v3.6&reponame=main
6
url pkg:apk/alpine/python2@2.7.14-r0?arch=x86_64&distroversion=v3.6&reponame=main
purl pkg:apk/alpine/python2@2.7.14-r0?arch=x86_64&distroversion=v3.6&reponame=main
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/python2@2.7.14-r0%3Farch=x86_64&distroversion=v3.6&reponame=main
7
url pkg:apk/alpine/python2@2.7.14-r0?arch=aarch64&distroversion=v3.5&reponame=main
purl pkg:apk/alpine/python2@2.7.14-r0?arch=aarch64&distroversion=v3.5&reponame=main
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/python2@2.7.14-r0%3Farch=aarch64&distroversion=v3.5&reponame=main
8
url pkg:apk/alpine/python2@2.7.14-r0?arch=armhf&distroversion=v3.5&reponame=main
purl pkg:apk/alpine/python2@2.7.14-r0?arch=armhf&distroversion=v3.5&reponame=main
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/python2@2.7.14-r0%3Farch=armhf&distroversion=v3.5&reponame=main
9
url pkg:apk/alpine/python2@2.7.14-r0?arch=x86&distroversion=v3.5&reponame=main
purl pkg:apk/alpine/python2@2.7.14-r0?arch=x86&distroversion=v3.5&reponame=main
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/python2@2.7.14-r0%3Farch=x86&distroversion=v3.5&reponame=main
10
url pkg:apk/alpine/python2@2.7.14-r0?arch=x86_64&distroversion=v3.5&reponame=main
purl pkg:apk/alpine/python2@2.7.14-r0?arch=x86_64&distroversion=v3.5&reponame=main
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/python2@2.7.14-r0%3Farch=x86_64&distroversion=v3.5&reponame=main
11
url pkg:apk/alpine/python2@2.7.14-r0?arch=aarch64&distroversion=v3.6&reponame=main
purl pkg:apk/alpine/python2@2.7.14-r0?arch=aarch64&distroversion=v3.6&reponame=main
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/python2@2.7.14-r0%3Farch=aarch64&distroversion=v3.6&reponame=main
12
url pkg:apk/alpine/python2@2.7.14-r0?arch=armhf&distroversion=v3.6&reponame=main
purl pkg:apk/alpine/python2@2.7.14-r0?arch=armhf&distroversion=v3.6&reponame=main
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/python2@2.7.14-r0%3Farch=armhf&distroversion=v3.6&reponame=main
13
url pkg:deb/debian/python2.7@2.7.13-4?distro=bullseye
purl pkg:deb/debian/python2.7@2.7.13-4?distro=bullseye
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/python2.7@2.7.13-4%3Fdistro=bullseye
14
url pkg:deb/debian/python2.7@2.7.16-2%2Bdeb10u1
purl pkg:deb/debian/python2.7@2.7.16-2%2Bdeb10u1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1taa-a9e4-tbc5
1
vulnerability VCID-2czu-wy37-qugf
2
vulnerability VCID-2shb-2cvn-dyd2
3
vulnerability VCID-4q79-666d-rygx
4
vulnerability VCID-4z89-3tfk-pyge
5
vulnerability VCID-57c6-hx7f-efc6
6
vulnerability VCID-9mcr-rmtb-mufj
7
vulnerability VCID-dkxn-j9dr-sqbp
8
vulnerability VCID-dv5v-71b5-budp
9
vulnerability VCID-gkfp-ga1r-jkag
10
vulnerability VCID-ppqx-qup8-sqbz
11
vulnerability VCID-tyk4-kazt-kydj
12
vulnerability VCID-v84j-ugn9-w3c8
13
vulnerability VCID-vpwj-d49q-1uh8
14
vulnerability VCID-w6k8-js68-87g4
15
vulnerability VCID-x7h3-nmjt-aud5
16
vulnerability VCID-xv9p-nyha-xygv
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/python2.7@2.7.16-2%252Bdeb10u1
15
url pkg:deb/debian/python2.7@2.7.18-8%2Bdeb11u1?distro=bullseye
purl pkg:deb/debian/python2.7@2.7.18-8%2Bdeb11u1?distro=bullseye
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/python2.7@2.7.18-8%252Bdeb11u1%3Fdistro=bullseye
16
url pkg:ebuild/dev-lang/python@2.7.14
purl pkg:ebuild/dev-lang/python@2.7.14
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:ebuild/dev-lang/python@2.7.14
Affected_packages
0
url pkg:deb/debian/python2.7@2.7.3-6%2Bdeb7u2
purl pkg:deb/debian/python2.7@2.7.3-6%2Bdeb7u2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1mw1-384y-huc7
1
vulnerability VCID-1taa-a9e4-tbc5
2
vulnerability VCID-2czu-wy37-qugf
3
vulnerability VCID-2shb-2cvn-dyd2
4
vulnerability VCID-3mu8-g6x3-effb
5
vulnerability VCID-4py6-hkzp-v3d4
6
vulnerability VCID-4q79-666d-rygx
7
vulnerability VCID-4z89-3tfk-pyge
8
vulnerability VCID-57c6-hx7f-efc6
9
vulnerability VCID-7jat-6ags-qbdr
10
vulnerability VCID-8aq9-8cf5-qbet
11
vulnerability VCID-8jfv-cqa8-7yb6
12
vulnerability VCID-9jj2-hsne-mbac
13
vulnerability VCID-9mcr-rmtb-mufj
14
vulnerability VCID-c97c-3177-wkhx
15
vulnerability VCID-dkxn-j9dr-sqbp
16
vulnerability VCID-dv5v-71b5-budp
17
vulnerability VCID-ez5b-fvw8-hkh3
18
vulnerability VCID-f5vu-k9rc-27fz
19
vulnerability VCID-g81p-pg7g-xfcf
20
vulnerability VCID-gfzb-b7tt-fkgz
21
vulnerability VCID-gkfp-ga1r-jkag
22
vulnerability VCID-hcq4-yq9k-jygb
23
vulnerability VCID-hgwh-tzsf-suc1
24
vulnerability VCID-j9s6-2y47-zbbt
25
vulnerability VCID-k18q-3e9y-ykgf
26
vulnerability VCID-mzd5-dwty-bqhf
27
vulnerability VCID-ppqx-qup8-sqbz
28
vulnerability VCID-tyk4-kazt-kydj
29
vulnerability VCID-ugfy-dufq-hfb2
30
vulnerability VCID-v84j-ugn9-w3c8
31
vulnerability VCID-vpwj-d49q-1uh8
32
vulnerability VCID-w6k8-js68-87g4
33
vulnerability VCID-w85n-mm5g-5yd1
34
vulnerability VCID-wq7w-nrar-ykde
35
vulnerability VCID-wxhp-wayg-qbd1
36
vulnerability VCID-x7h3-nmjt-aud5
37
vulnerability VCID-xv9p-nyha-xygv
38
vulnerability VCID-yqm8-fk44-4yhk
39
vulnerability VCID-z6kh-961g-duck
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/python2.7@2.7.3-6%252Bdeb7u2
1
url pkg:deb/debian/python2.7@2.7.9-2
purl pkg:deb/debian/python2.7@2.7.9-2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1taa-a9e4-tbc5
1
vulnerability VCID-2czu-wy37-qugf
2
vulnerability VCID-2shb-2cvn-dyd2
3
vulnerability VCID-3mu8-g6x3-effb
4
vulnerability VCID-4py6-hkzp-v3d4
5
vulnerability VCID-4q79-666d-rygx
6
vulnerability VCID-4z89-3tfk-pyge
7
vulnerability VCID-57c6-hx7f-efc6
8
vulnerability VCID-7jat-6ags-qbdr
9
vulnerability VCID-9mcr-rmtb-mufj
10
vulnerability VCID-c97c-3177-wkhx
11
vulnerability VCID-dkxn-j9dr-sqbp
12
vulnerability VCID-dv5v-71b5-budp
13
vulnerability VCID-gfzb-b7tt-fkgz
14
vulnerability VCID-gkfp-ga1r-jkag
15
vulnerability VCID-hcq4-yq9k-jygb
16
vulnerability VCID-hgwh-tzsf-suc1
17
vulnerability VCID-j9s6-2y47-zbbt
18
vulnerability VCID-k18q-3e9y-ykgf
19
vulnerability VCID-ppqx-qup8-sqbz
20
vulnerability VCID-tyk4-kazt-kydj
21
vulnerability VCID-ugfy-dufq-hfb2
22
vulnerability VCID-v84j-ugn9-w3c8
23
vulnerability VCID-vpwj-d49q-1uh8
24
vulnerability VCID-w6k8-js68-87g4
25
vulnerability VCID-wq7w-nrar-ykde
26
vulnerability VCID-wxhp-wayg-qbd1
27
vulnerability VCID-x7h3-nmjt-aud5
28
vulnerability VCID-xv9p-nyha-xygv
29
vulnerability VCID-yqm8-fk44-4yhk
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/python2.7@2.7.9-2
2
url pkg:deb/debian/python2.7@2.7.9-2%2Bdeb8u1
purl pkg:deb/debian/python2.7@2.7.9-2%2Bdeb8u1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1taa-a9e4-tbc5
1
vulnerability VCID-2czu-wy37-qugf
2
vulnerability VCID-2shb-2cvn-dyd2
3
vulnerability VCID-3mu8-g6x3-effb
4
vulnerability VCID-4py6-hkzp-v3d4
5
vulnerability VCID-4q79-666d-rygx
6
vulnerability VCID-4z89-3tfk-pyge
7
vulnerability VCID-57c6-hx7f-efc6
8
vulnerability VCID-7jat-6ags-qbdr
9
vulnerability VCID-9mcr-rmtb-mufj
10
vulnerability VCID-c97c-3177-wkhx
11
vulnerability VCID-dkxn-j9dr-sqbp
12
vulnerability VCID-dv5v-71b5-budp
13
vulnerability VCID-gfzb-b7tt-fkgz
14
vulnerability VCID-gkfp-ga1r-jkag
15
vulnerability VCID-hcq4-yq9k-jygb
16
vulnerability VCID-hgwh-tzsf-suc1
17
vulnerability VCID-j9s6-2y47-zbbt
18
vulnerability VCID-k18q-3e9y-ykgf
19
vulnerability VCID-ppqx-qup8-sqbz
20
vulnerability VCID-tyk4-kazt-kydj
21
vulnerability VCID-ugfy-dufq-hfb2
22
vulnerability VCID-v84j-ugn9-w3c8
23
vulnerability VCID-vpwj-d49q-1uh8
24
vulnerability VCID-w6k8-js68-87g4
25
vulnerability VCID-wq7w-nrar-ykde
26
vulnerability VCID-wxhp-wayg-qbd1
27
vulnerability VCID-x7h3-nmjt-aud5
28
vulnerability VCID-xv9p-nyha-xygv
29
vulnerability VCID-yqm8-fk44-4yhk
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/python2.7@2.7.9-2%252Bdeb8u1
3
url pkg:deb/debian/python2.7@2.7.13-2%2Bdeb9u3
purl pkg:deb/debian/python2.7@2.7.13-2%2Bdeb9u3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1taa-a9e4-tbc5
1
vulnerability VCID-2czu-wy37-qugf
2
vulnerability VCID-2shb-2cvn-dyd2
3
vulnerability VCID-4py6-hkzp-v3d4
4
vulnerability VCID-4q79-666d-rygx
5
vulnerability VCID-4z89-3tfk-pyge
6
vulnerability VCID-57c6-hx7f-efc6
7
vulnerability VCID-7jat-6ags-qbdr
8
vulnerability VCID-9mcr-rmtb-mufj
9
vulnerability VCID-dkxn-j9dr-sqbp
10
vulnerability VCID-dv5v-71b5-budp
11
vulnerability VCID-gfzb-b7tt-fkgz
12
vulnerability VCID-gkfp-ga1r-jkag
13
vulnerability VCID-hcq4-yq9k-jygb
14
vulnerability VCID-j9s6-2y47-zbbt
15
vulnerability VCID-k18q-3e9y-ykgf
16
vulnerability VCID-ppqx-qup8-sqbz
17
vulnerability VCID-tyk4-kazt-kydj
18
vulnerability VCID-v84j-ugn9-w3c8
19
vulnerability VCID-vpwj-d49q-1uh8
20
vulnerability VCID-w6k8-js68-87g4
21
vulnerability VCID-wq7w-nrar-ykde
22
vulnerability VCID-wxhp-wayg-qbd1
23
vulnerability VCID-x7h3-nmjt-aud5
24
vulnerability VCID-xv9p-nyha-xygv
25
vulnerability VCID-yqm8-fk44-4yhk
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/python2.7@2.7.13-2%252Bdeb9u3
References
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-1000158.json
reference_id
reference_type
scores
0
value 8.1
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-1000158.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2017-1000158
reference_id
reference_type
scores
0
value 0.0359
scoring_system epss
scoring_elements 0.8777
published_at 2026-04-18T12:55:00Z
1
value 0.0359
scoring_system epss
scoring_elements 0.87747
published_at 2026-04-08T12:55:00Z
2
value 0.0359
scoring_system epss
scoring_elements 0.87753
published_at 2026-04-09T12:55:00Z
3
value 0.0359
scoring_system epss
scoring_elements 0.87764
published_at 2026-04-11T12:55:00Z
4
value 0.0359
scoring_system epss
scoring_elements 0.87758
published_at 2026-04-12T12:55:00Z
5
value 0.0359
scoring_system epss
scoring_elements 0.87757
published_at 2026-04-13T12:55:00Z
6
value 0.0359
scoring_system epss
scoring_elements 0.87771
published_at 2026-04-16T12:55:00Z
7
value 0.0359
scoring_system epss
scoring_elements 0.87726
published_at 2026-04-07T12:55:00Z
8
value 0.03719
scoring_system epss
scoring_elements 0.87933
published_at 2026-04-02T12:55:00Z
9
value 0.03719
scoring_system epss
scoring_elements 0.87946
published_at 2026-04-04T12:55:00Z
10
value 0.03719
scoring_system epss
scoring_elements 0.87923
published_at 2026-04-01T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2017-1000158
2
reference_url https://bugs.python.org/issue30657
reference_id
reference_type
scores
url https://bugs.python.org/issue30657
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-1000158
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-1000158
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1060
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1060
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1061
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1061
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-14647
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-14647
7
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
8
reference_url https://lists.debian.org/debian-lts-announce/2017/11/msg00035.html
reference_id
reference_type
scores
url https://lists.debian.org/debian-lts-announce/2017/11/msg00035.html
9
reference_url https://lists.debian.org/debian-lts-announce/2017/11/msg00036.html
reference_id
reference_type
scores
url https://lists.debian.org/debian-lts-announce/2017/11/msg00036.html
10
reference_url https://lists.debian.org/debian-lts-announce/2018/09/msg00030.html
reference_id
reference_type
scores
url https://lists.debian.org/debian-lts-announce/2018/09/msg00030.html
11
reference_url https://lists.debian.org/debian-lts-announce/2018/09/msg00031.html
reference_id
reference_type
scores
url https://lists.debian.org/debian-lts-announce/2018/09/msg00031.html
12
reference_url https://security.netapp.com/advisory/ntap-20230216-0001/
reference_id
reference_type
scores
url https://security.netapp.com/advisory/ntap-20230216-0001/
13
reference_url https://www.debian.org/security/2018/dsa-4307
reference_id
reference_type
scores
url https://www.debian.org/security/2018/dsa-4307
14
reference_url http://www.securitytracker.com/id/1039890
reference_id
reference_type
scores
url http://www.securitytracker.com/id/1039890
15
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1519595
reference_id 1519595
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1519595
16
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:python:python:*:*:*:*:*:*:*:*
reference_id cpe:2.3:a:python:python:*:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:python:python:*:*:*:*:*:*:*:*
17
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*
reference_id cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*
18
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*
reference_id cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*
19
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*
reference_id cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*
20
reference_url https://nvd.nist.gov/vuln/detail/CVE-2017-1000158
reference_id CVE-2017-1000158
reference_type
scores
0
value 7.5
scoring_system cvssv2
scoring_elements AV:N/AC:L/Au:N/C:P/I:P/A:P
1
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
url https://nvd.nist.gov/vuln/detail/CVE-2017-1000158
21
reference_url https://security.gentoo.org/glsa/201805-02
reference_id GLSA-201805-02
reference_type
scores
url https://security.gentoo.org/glsa/201805-02
22
reference_url https://usn.ubuntu.com/3496-1/
reference_id USN-3496-1
reference_type
scores
url https://usn.ubuntu.com/3496-1/
23
reference_url https://usn.ubuntu.com/3496-2/
reference_id USN-3496-2
reference_type
scores
url https://usn.ubuntu.com/3496-2/
24
reference_url https://usn.ubuntu.com/3496-3/
reference_id USN-3496-3
reference_type
scores
url https://usn.ubuntu.com/3496-3/
Weaknesses
0
cwe_id 190
name Integer Overflow or Wraparound
description The product performs a calculation that can produce an integer overflow or wraparound, when the logic assumes that the resulting value will always be larger than the original value. This can introduce other weaknesses when the calculation is used for resource management or execution control.
1
cwe_id 122
name Heap-based Buffer Overflow
description A heap overflow condition is a buffer overflow, where the buffer that can be overwritten is allocated in the heap portion of memory, generally meaning that the buffer was allocated using a routine such as malloc().
Exploits
Severity_range_score7.5 - 9.8
Exploitability0.5
Weighted_severity8.8
Risk_score4.4
Resource_urlhttp://public2.vulnerablecode.io/vulnerabilities/VCID-wq7w-nrar-ykde