Django REST framework

Vulnerability Instance

Lookup for vulnerabilities affecting packages.

Vulnerability_idVCID-n137-244u-suab
SummaryAn issue was discovered in LIEF through 0.11.4. A heap-buffer-overflow exists in the function main located in pe_reader.c. It allows an attacker to cause code Execution.
Aliases
0
alias CVE-2021-32297
1
alias GHSA-22x7-vwh9-5w4g
2
alias PYSEC-2021-324
Fixed_packages
0
url pkg:pypi/lief@0.11.0
purl pkg:pypi/lief@0.11.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-7ks5-ajmj-uqaw
1
vulnerability VCID-b25d-2z1r-53eb
2
vulnerability VCID-bgtn-xx89-1fdk
3
vulnerability VCID-h9u8-1y87-nqde
4
vulnerability VCID-n137-244u-suab
5
vulnerability VCID-sx9k-k6gj-xycu
6
vulnerability VCID-yyzu-cawb-aqh4
7
vulnerability VCID-z6tk-ymuh-8be3
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/lief@0.11.0
1
url pkg:pypi/lief@0.11.5
purl pkg:pypi/lief@0.11.5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-7ks5-ajmj-uqaw
1
vulnerability VCID-b25d-2z1r-53eb
2
vulnerability VCID-bgtn-xx89-1fdk
3
vulnerability VCID-h9u8-1y87-nqde
4
vulnerability VCID-sx9k-k6gj-xycu
5
vulnerability VCID-yyzu-cawb-aqh4
6
vulnerability VCID-z6tk-ymuh-8be3
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/lief@0.11.5
Affected_packages
0
url pkg:conan/lief@0.11.4
purl pkg:conan/lief@0.11.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-n137-244u-suab
resource_url http://public2.vulnerablecode.io/packages/pkg:conan/lief@0.11.4
1
url pkg:pypi/lief@0.8.0
purl pkg:pypi/lief@0.8.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-7ks5-ajmj-uqaw
1
vulnerability VCID-b25d-2z1r-53eb
2
vulnerability VCID-bgtn-xx89-1fdk
3
vulnerability VCID-h9u8-1y87-nqde
4
vulnerability VCID-n137-244u-suab
5
vulnerability VCID-sx9k-k6gj-xycu
6
vulnerability VCID-yyzu-cawb-aqh4
7
vulnerability VCID-z6tk-ymuh-8be3
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/lief@0.8.0
2
url pkg:pypi/lief@0.8.1
purl pkg:pypi/lief@0.8.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-7ks5-ajmj-uqaw
1
vulnerability VCID-b25d-2z1r-53eb
2
vulnerability VCID-bgtn-xx89-1fdk
3
vulnerability VCID-h9u8-1y87-nqde
4
vulnerability VCID-n137-244u-suab
5
vulnerability VCID-sx9k-k6gj-xycu
6
vulnerability VCID-yyzu-cawb-aqh4
7
vulnerability VCID-z6tk-ymuh-8be3
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/lief@0.8.1
3
url pkg:pypi/lief@0.8.2
purl pkg:pypi/lief@0.8.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-7ks5-ajmj-uqaw
1
vulnerability VCID-b25d-2z1r-53eb
2
vulnerability VCID-bgtn-xx89-1fdk
3
vulnerability VCID-h9u8-1y87-nqde
4
vulnerability VCID-n137-244u-suab
5
vulnerability VCID-sx9k-k6gj-xycu
6
vulnerability VCID-yyzu-cawb-aqh4
7
vulnerability VCID-z6tk-ymuh-8be3
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/lief@0.8.2
4
url pkg:pypi/lief@0.8.3
purl pkg:pypi/lief@0.8.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-7ks5-ajmj-uqaw
1
vulnerability VCID-b25d-2z1r-53eb
2
vulnerability VCID-bgtn-xx89-1fdk
3
vulnerability VCID-h9u8-1y87-nqde
4
vulnerability VCID-n137-244u-suab
5
vulnerability VCID-sx9k-k6gj-xycu
6
vulnerability VCID-yyzu-cawb-aqh4
7
vulnerability VCID-z6tk-ymuh-8be3
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/lief@0.8.3
5
url pkg:pypi/lief@0.9.0
purl pkg:pypi/lief@0.9.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-7ks5-ajmj-uqaw
1
vulnerability VCID-b25d-2z1r-53eb
2
vulnerability VCID-bgtn-xx89-1fdk
3
vulnerability VCID-h9u8-1y87-nqde
4
vulnerability VCID-n137-244u-suab
5
vulnerability VCID-sx9k-k6gj-xycu
6
vulnerability VCID-yyzu-cawb-aqh4
7
vulnerability VCID-z6tk-ymuh-8be3
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/lief@0.9.0
6
url pkg:pypi/lief@0.10.0
purl pkg:pypi/lief@0.10.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-7ks5-ajmj-uqaw
1
vulnerability VCID-b25d-2z1r-53eb
2
vulnerability VCID-bgtn-xx89-1fdk
3
vulnerability VCID-h9u8-1y87-nqde
4
vulnerability VCID-n137-244u-suab
5
vulnerability VCID-sx9k-k6gj-xycu
6
vulnerability VCID-yyzu-cawb-aqh4
7
vulnerability VCID-z6tk-ymuh-8be3
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/lief@0.10.0
7
url pkg:pypi/lief@0.10.1
purl pkg:pypi/lief@0.10.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-7ks5-ajmj-uqaw
1
vulnerability VCID-b25d-2z1r-53eb
2
vulnerability VCID-bgtn-xx89-1fdk
3
vulnerability VCID-h9u8-1y87-nqde
4
vulnerability VCID-n137-244u-suab
5
vulnerability VCID-sx9k-k6gj-xycu
6
vulnerability VCID-yyzu-cawb-aqh4
7
vulnerability VCID-z6tk-ymuh-8be3
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/lief@0.10.1
8
url pkg:pypi/lief@0.11.0
purl pkg:pypi/lief@0.11.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-7ks5-ajmj-uqaw
1
vulnerability VCID-b25d-2z1r-53eb
2
vulnerability VCID-bgtn-xx89-1fdk
3
vulnerability VCID-h9u8-1y87-nqde
4
vulnerability VCID-n137-244u-suab
5
vulnerability VCID-sx9k-k6gj-xycu
6
vulnerability VCID-yyzu-cawb-aqh4
7
vulnerability VCID-z6tk-ymuh-8be3
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/lief@0.11.0
9
url pkg:pypi/lief@0.11.1
purl pkg:pypi/lief@0.11.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-7ks5-ajmj-uqaw
1
vulnerability VCID-b25d-2z1r-53eb
2
vulnerability VCID-bgtn-xx89-1fdk
3
vulnerability VCID-h9u8-1y87-nqde
4
vulnerability VCID-n137-244u-suab
5
vulnerability VCID-sx9k-k6gj-xycu
6
vulnerability VCID-yyzu-cawb-aqh4
7
vulnerability VCID-z6tk-ymuh-8be3
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/lief@0.11.1
10
url pkg:pypi/lief@0.11.2
purl pkg:pypi/lief@0.11.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-7ks5-ajmj-uqaw
1
vulnerability VCID-b25d-2z1r-53eb
2
vulnerability VCID-bgtn-xx89-1fdk
3
vulnerability VCID-h9u8-1y87-nqde
4
vulnerability VCID-n137-244u-suab
5
vulnerability VCID-sx9k-k6gj-xycu
6
vulnerability VCID-yyzu-cawb-aqh4
7
vulnerability VCID-z6tk-ymuh-8be3
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/lief@0.11.2
11
url pkg:pypi/lief@0.11.3
purl pkg:pypi/lief@0.11.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-7ks5-ajmj-uqaw
1
vulnerability VCID-b25d-2z1r-53eb
2
vulnerability VCID-bgtn-xx89-1fdk
3
vulnerability VCID-h9u8-1y87-nqde
4
vulnerability VCID-n137-244u-suab
5
vulnerability VCID-sx9k-k6gj-xycu
6
vulnerability VCID-yyzu-cawb-aqh4
7
vulnerability VCID-z6tk-ymuh-8be3
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/lief@0.11.3
12
url pkg:pypi/lief@0.11.4
purl pkg:pypi/lief@0.11.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-7ks5-ajmj-uqaw
1
vulnerability VCID-b25d-2z1r-53eb
2
vulnerability VCID-bgtn-xx89-1fdk
3
vulnerability VCID-h9u8-1y87-nqde
4
vulnerability VCID-n137-244u-suab
5
vulnerability VCID-sx9k-k6gj-xycu
6
vulnerability VCID-yyzu-cawb-aqh4
7
vulnerability VCID-z6tk-ymuh-8be3
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/lief@0.11.4
References
0
reference_url https://github.com/lief-project/LIEF
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
1
value 8.6
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/lief-project/LIEF
1
reference_url https://github.com/lief-project/LIEF/commit/19e06755e8ce1ecf136360a5c36cded3701ac253
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
1
value 8.6
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/lief-project/LIEF/commit/19e06755e8ce1ecf136360a5c36cded3701ac253
2
reference_url https://github.com/lief-project/LIEF/issues/449
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
1
value 8.6
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/lief-project/LIEF/issues/449
3
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/lief/PYSEC-2021-324.yaml
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
1
value 8.6
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/pypa/advisory-database/tree/main/vulns/lief/PYSEC-2021-324.yaml
4
reference_url https://nvd.nist.gov/vuln/detail/CVE-2021-32297
reference_id CVE-2021-32297
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
1
value 8.6
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2021-32297
Weaknesses
0
cwe_id 1035
name OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
description Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2017.
1
cwe_id 937
name OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
description Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2013.
2
cwe_id 787
name Out-of-bounds Write
description The product writes data past the end, or before the beginning, of the intended buffer.
Exploits
Severity_range_score7.0 - 8.9
Exploitabilitynull
Weighted_severitynull
Risk_scorenull
Resource_urlhttp://public2.vulnerablecode.io/vulnerabilities/VCID-n137-244u-suab