Django REST framework

Vulnerability Instance

Lookup for vulnerabilities affecting packages.

Vulnerability_idVCID-qa3t-c5ua-mfdy
Summary
Multiple vulnerabilities have been found in libTIFF, the worst of
    which may allow execution of arbitrary code.
Aliases
0
alias CVE-2016-5320
Fixed_packages
0
url pkg:alpm/archlinux/lib32-libtiff@4.0.7-1
purl pkg:alpm/archlinux/lib32-libtiff@4.0.7-1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-g2kq-ch6c-nubm
1
vulnerability VCID-nyjs-ay8u-13gx
resource_url http://public2.vulnerablecode.io/packages/pkg:alpm/archlinux/lib32-libtiff@4.0.7-1
1
url pkg:alpm/archlinux/libtiff@4.0.7-1
purl pkg:alpm/archlinux/libtiff@4.0.7-1
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:alpm/archlinux/libtiff@4.0.7-1
2
url pkg:apk/alpine/tiff@4.0.7-r0?arch=x86_64&distroversion=v3.2&reponame=main
purl pkg:apk/alpine/tiff@4.0.7-r0?arch=x86_64&distroversion=v3.2&reponame=main
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/tiff@4.0.7-r0%3Farch=x86_64&distroversion=v3.2&reponame=main
3
url pkg:apk/alpine/tiff@4.0.7-r0?arch=x86&distroversion=v3.4&reponame=main
purl pkg:apk/alpine/tiff@4.0.7-r0?arch=x86&distroversion=v3.4&reponame=main
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/tiff@4.0.7-r0%3Farch=x86&distroversion=v3.4&reponame=main
4
url pkg:apk/alpine/tiff@4.0.7-r0?arch=x86_64&distroversion=v3.4&reponame=main
purl pkg:apk/alpine/tiff@4.0.7-r0?arch=x86_64&distroversion=v3.4&reponame=main
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/tiff@4.0.7-r0%3Farch=x86_64&distroversion=v3.4&reponame=main
5
url pkg:apk/alpine/tiff@4.0.7-r0?arch=armhf&distroversion=v3.3&reponame=main
purl pkg:apk/alpine/tiff@4.0.7-r0?arch=armhf&distroversion=v3.3&reponame=main
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/tiff@4.0.7-r0%3Farch=armhf&distroversion=v3.3&reponame=main
6
url pkg:apk/alpine/tiff@4.0.7-r0?arch=armhf&distroversion=v3.2&reponame=main
purl pkg:apk/alpine/tiff@4.0.7-r0?arch=armhf&distroversion=v3.2&reponame=main
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/tiff@4.0.7-r0%3Farch=armhf&distroversion=v3.2&reponame=main
7
url pkg:apk/alpine/tiff@4.0.7-r0?arch=x86&distroversion=v3.2&reponame=main
purl pkg:apk/alpine/tiff@4.0.7-r0?arch=x86&distroversion=v3.2&reponame=main
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/tiff@4.0.7-r0%3Farch=x86&distroversion=v3.2&reponame=main
8
url pkg:apk/alpine/tiff@4.0.7-r0?arch=armhf&distroversion=v3.4&reponame=main
purl pkg:apk/alpine/tiff@4.0.7-r0?arch=armhf&distroversion=v3.4&reponame=main
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/tiff@4.0.7-r0%3Farch=armhf&distroversion=v3.4&reponame=main
9
url pkg:apk/alpine/tiff@4.0.7-r0?arch=x86&distroversion=v3.3&reponame=main
purl pkg:apk/alpine/tiff@4.0.7-r0?arch=x86&distroversion=v3.3&reponame=main
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/tiff@4.0.7-r0%3Farch=x86&distroversion=v3.3&reponame=main
10
url pkg:apk/alpine/tiff@4.0.7-r0?arch=x86_64&distroversion=v3.3&reponame=main
purl pkg:apk/alpine/tiff@4.0.7-r0?arch=x86_64&distroversion=v3.3&reponame=main
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/tiff@4.0.7-r0%3Farch=x86_64&distroversion=v3.3&reponame=main
11
url pkg:ebuild/media-libs/tiff@4.0.7
purl pkg:ebuild/media-libs/tiff@4.0.7
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:ebuild/media-libs/tiff@4.0.7
Affected_packages
0
url pkg:alpm/archlinux/lib32-libtiff@4.0.6-2
purl pkg:alpm/archlinux/lib32-libtiff@4.0.6-2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1cjh-zx12-2fh2
1
vulnerability VCID-1dhy-s5x3-fuf7
2
vulnerability VCID-1pbp-smgt-duey
3
vulnerability VCID-255p-pm39-1bb3
4
vulnerability VCID-28t9-d8gb-b3h9
5
vulnerability VCID-2a5b-7k5n-73fx
6
vulnerability VCID-36t6-pnx8-xugd
7
vulnerability VCID-45tr-e5rv-6uch
8
vulnerability VCID-4e6e-nkkd-j3ef
9
vulnerability VCID-5h29-wne5-gbd7
10
vulnerability VCID-7dzd-xznd-jug7
11
vulnerability VCID-7xr6-sn1k-t7cw
12
vulnerability VCID-81ew-t25a-f7gq
13
vulnerability VCID-83hb-ksrb-yyb5
14
vulnerability VCID-98zm-dbqt-g3eg
15
vulnerability VCID-a1hq-fqkv-u7d9
16
vulnerability VCID-baha-p74p-rff4
17
vulnerability VCID-bf8s-peku-2uht
18
vulnerability VCID-ceb4-e5mz-4fbp
19
vulnerability VCID-cswr-9c4x-xyg8
20
vulnerability VCID-czyn-snja-skba
21
vulnerability VCID-dxtf-qzfj-k3aq
22
vulnerability VCID-fc93-fu34-37cx
23
vulnerability VCID-gg7k-u39a-kqbw
24
vulnerability VCID-gp1w-v49g-j3aw
25
vulnerability VCID-hfrr-s8ge-z7hx
26
vulnerability VCID-jr5v-vzng-nbcb
27
vulnerability VCID-k8zk-je18-wbb8
28
vulnerability VCID-m7mp-g37h-p3g9
29
vulnerability VCID-mqad-tkgf-r3ag
30
vulnerability VCID-mwb4-9fjj-qyfs
31
vulnerability VCID-n5xz-y6bx-myfr
32
vulnerability VCID-p9pe-czsr-9uhu
33
vulnerability VCID-pczq-1huj-p7hf
34
vulnerability VCID-pf5w-eted-9kc9
35
vulnerability VCID-qa3t-c5ua-mfdy
36
vulnerability VCID-rqmj-ns2c-jbh4
37
vulnerability VCID-s2xb-r3c7-7fc4
38
vulnerability VCID-s4k8-v3sj-23fw
39
vulnerability VCID-s7s4-ux2t-3yc5
40
vulnerability VCID-spqg-q1z6-pyex
41
vulnerability VCID-u1mj-pxtw-7qet
42
vulnerability VCID-vn6c-kuq7-k3hv
43
vulnerability VCID-wes8-vrs4-gygk
44
vulnerability VCID-wpd2-zcyv-s7g8
45
vulnerability VCID-x91e-13q2-yked
46
vulnerability VCID-xg5z-jss1-3ycp
47
vulnerability VCID-xg6v-katm-67et
48
vulnerability VCID-xx3b-d12j-8qc4
49
vulnerability VCID-ytpu-tcxj-guex
resource_url http://public2.vulnerablecode.io/packages/pkg:alpm/archlinux/lib32-libtiff@4.0.6-2
1
url pkg:alpm/archlinux/libtiff@4.0.6-2
purl pkg:alpm/archlinux/libtiff@4.0.6-2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1cjh-zx12-2fh2
1
vulnerability VCID-1dhy-s5x3-fuf7
2
vulnerability VCID-1pbp-smgt-duey
3
vulnerability VCID-255p-pm39-1bb3
4
vulnerability VCID-28t9-d8gb-b3h9
5
vulnerability VCID-2a5b-7k5n-73fx
6
vulnerability VCID-36t6-pnx8-xugd
7
vulnerability VCID-45tr-e5rv-6uch
8
vulnerability VCID-4e6e-nkkd-j3ef
9
vulnerability VCID-5h29-wne5-gbd7
10
vulnerability VCID-7dzd-xznd-jug7
11
vulnerability VCID-7xr6-sn1k-t7cw
12
vulnerability VCID-81ew-t25a-f7gq
13
vulnerability VCID-83hb-ksrb-yyb5
14
vulnerability VCID-98zm-dbqt-g3eg
15
vulnerability VCID-a1hq-fqkv-u7d9
16
vulnerability VCID-baha-p74p-rff4
17
vulnerability VCID-bf8s-peku-2uht
18
vulnerability VCID-ceb4-e5mz-4fbp
19
vulnerability VCID-cswr-9c4x-xyg8
20
vulnerability VCID-czyn-snja-skba
21
vulnerability VCID-dxtf-qzfj-k3aq
22
vulnerability VCID-fc93-fu34-37cx
23
vulnerability VCID-gg7k-u39a-kqbw
24
vulnerability VCID-gp1w-v49g-j3aw
25
vulnerability VCID-hfrr-s8ge-z7hx
26
vulnerability VCID-jr5v-vzng-nbcb
27
vulnerability VCID-k8zk-je18-wbb8
28
vulnerability VCID-m7mp-g37h-p3g9
29
vulnerability VCID-mqad-tkgf-r3ag
30
vulnerability VCID-mwb4-9fjj-qyfs
31
vulnerability VCID-n5xz-y6bx-myfr
32
vulnerability VCID-p9pe-czsr-9uhu
33
vulnerability VCID-pczq-1huj-p7hf
34
vulnerability VCID-pf5w-eted-9kc9
35
vulnerability VCID-qa3t-c5ua-mfdy
36
vulnerability VCID-rqmj-ns2c-jbh4
37
vulnerability VCID-s2xb-r3c7-7fc4
38
vulnerability VCID-s4k8-v3sj-23fw
39
vulnerability VCID-s7s4-ux2t-3yc5
40
vulnerability VCID-spqg-q1z6-pyex
41
vulnerability VCID-u1mj-pxtw-7qet
42
vulnerability VCID-vn6c-kuq7-k3hv
43
vulnerability VCID-wes8-vrs4-gygk
44
vulnerability VCID-wpd2-zcyv-s7g8
45
vulnerability VCID-x91e-13q2-yked
46
vulnerability VCID-xg5z-jss1-3ycp
47
vulnerability VCID-xg6v-katm-67et
48
vulnerability VCID-xx3b-d12j-8qc4
49
vulnerability VCID-ytpu-tcxj-guex
resource_url http://public2.vulnerablecode.io/packages/pkg:alpm/archlinux/libtiff@4.0.6-2
2
url pkg:rpm/redhat/libtiff@3.9.4-18?arch=el6_8
purl pkg:rpm/redhat/libtiff@3.9.4-18?arch=el6_8
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ecn-xrs5-hubq
1
vulnerability VCID-5h29-wne5-gbd7
2
vulnerability VCID-81ew-t25a-f7gq
3
vulnerability VCID-8f48-6u7s-xyht
4
vulnerability VCID-8kgw-n4zx-uqa8
5
vulnerability VCID-gp1w-v49g-j3aw
6
vulnerability VCID-gsfh-epay-ckgk
7
vulnerability VCID-mb38-6e5v-fbah
8
vulnerability VCID-mqad-tkgf-r3ag
9
vulnerability VCID-n614-w2nh-rqbe
10
vulnerability VCID-nyjs-ay8u-13gx
11
vulnerability VCID-pczq-1huj-p7hf
12
vulnerability VCID-pf5w-eted-9kc9
13
vulnerability VCID-qa3t-c5ua-mfdy
14
vulnerability VCID-s7s4-ux2t-3yc5
15
vulnerability VCID-u1mj-pxtw-7qet
16
vulnerability VCID-vn6c-kuq7-k3hv
17
vulnerability VCID-vv32-13t8-1fht
18
vulnerability VCID-z17v-aeta-1qb7
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/libtiff@3.9.4-18%3Farch=el6_8
3
url pkg:rpm/redhat/libtiff@4.0.3-25?arch=el7_2
purl pkg:rpm/redhat/libtiff@4.0.3-25?arch=el7_2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ecn-xrs5-hubq
1
vulnerability VCID-5h29-wne5-gbd7
2
vulnerability VCID-81ew-t25a-f7gq
3
vulnerability VCID-8f48-6u7s-xyht
4
vulnerability VCID-8kgw-n4zx-uqa8
5
vulnerability VCID-gp1w-v49g-j3aw
6
vulnerability VCID-gsfh-epay-ckgk
7
vulnerability VCID-mb38-6e5v-fbah
8
vulnerability VCID-mqad-tkgf-r3ag
9
vulnerability VCID-n614-w2nh-rqbe
10
vulnerability VCID-nyjs-ay8u-13gx
11
vulnerability VCID-pczq-1huj-p7hf
12
vulnerability VCID-pf5w-eted-9kc9
13
vulnerability VCID-qa3t-c5ua-mfdy
14
vulnerability VCID-s7s4-ux2t-3yc5
15
vulnerability VCID-u1mj-pxtw-7qet
16
vulnerability VCID-vn6c-kuq7-k3hv
17
vulnerability VCID-vv32-13t8-1fht
18
vulnerability VCID-z17v-aeta-1qb7
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/libtiff@4.0.3-25%3Farch=el7_2
References
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5320.json
reference_id
reference_type
scores
0
value 6.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-5320.json
1
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 5.8
scoring_system cvssv2
scoring_elements AV:N/AC:M/Au:N/C:N/I:P/A:P
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
2
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1346687
reference_id 1346687
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1346687
3
reference_url https://security.archlinux.org/ASA-201611-26
reference_id ASA-201611-26
reference_type
scores
url https://security.archlinux.org/ASA-201611-26
4
reference_url https://security.archlinux.org/ASA-201611-27
reference_id ASA-201611-27
reference_type
scores
url https://security.archlinux.org/ASA-201611-27
5
reference_url https://security.archlinux.org/AVG-85
reference_id AVG-85
reference_type
scores
0
value Critical
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-85
6
reference_url https://security.archlinux.org/AVG-86
reference_id AVG-86
reference_type
scores
0
value Critical
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-86
7
reference_url https://security.gentoo.org/glsa/201701-16
reference_id GLSA-201701-16
reference_type
scores
url https://security.gentoo.org/glsa/201701-16
8
reference_url https://access.redhat.com/errata/RHSA-2016:1546
reference_id RHSA-2016:1546
reference_type
scores
url https://access.redhat.com/errata/RHSA-2016:1546
9
reference_url https://access.redhat.com/errata/RHSA-2016:1547
reference_id RHSA-2016:1547
reference_type
scores
url https://access.redhat.com/errata/RHSA-2016:1547
10
reference_url https://usn.ubuntu.com/3212-1/
reference_id USN-3212-1
reference_type
scores
url https://usn.ubuntu.com/3212-1/
Weaknesses
0
cwe_id 787
name Out-of-bounds Write
description The product writes data past the end, or before the beginning, of the intended buffer.
Exploits
Severity_range_score5.8 - 10.0
Exploitability0.5
Weighted_severity9.0
Risk_score4.5
Resource_urlhttp://public2.vulnerablecode.io/vulnerabilities/VCID-qa3t-c5ua-mfdy