Vulnerability Instance

HTTP 200 OK
Allow: GET, HEAD, OPTIONS
Content-Type: application/json
Vary: Accept

{
    "url": "http://public2.vulnerablecode.io/api/vulnerabilities/668?format=api",
    "vulnerability_id": "VCID-jggu-sywf-13ag",
    "summary": "Mozilla developers and community members Mats Palmgren, Philipp, Byron Campen, Christian Holler, Gary Kwong, Benjamin Bouvier, Bob Clary, Jon Coppeard, and Michael Layzell reported memory safety bugs present in Firefox 53. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code.",
    "aliases": [
        {
            "alias": "CVE-2017-5471"
        }
    ],
    "fixed_packages": [
        {
            "url": "http://public2.vulnerablecode.io/api/packages/1878?format=api",
            "purl": "pkg:alpm/archlinux/firefox@54.0-1",
            "is_vulnerable": false,
            "affected_by_vulnerabilities": [],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:alpm/archlinux/firefox@54.0-1"
        }
    ],
    "affected_packages": [
        {
            "url": "http://public2.vulnerablecode.io/api/packages/1877?format=api",
            "purl": "pkg:alpm/archlinux/firefox@53.0.3-1",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-1j25-aujy-1fb3"
                },
                {
                    "vulnerability": "VCID-1qr1-6zdx-fqd1"
                },
                {
                    "vulnerability": "VCID-2ep2-61mb-cbd3"
                },
                {
                    "vulnerability": "VCID-2nfu-kf32-myag"
                },
                {
                    "vulnerability": "VCID-6pr4-1zfj-9ydj"
                },
                {
                    "vulnerability": "VCID-6s7e-79u3-h7ed"
                },
                {
                    "vulnerability": "VCID-8hfq-xxg6-tue8"
                },
                {
                    "vulnerability": "VCID-abde-jm4w-5yde"
                },
                {
                    "vulnerability": "VCID-bxpd-zacn-8bfv"
                },
                {
                    "vulnerability": "VCID-jggu-sywf-13ag"
                },
                {
                    "vulnerability": "VCID-njra-xv9f-ffck"
                },
                {
                    "vulnerability": "VCID-ppw9-56ha-2bhm"
                },
                {
                    "vulnerability": "VCID-s4se-eex7-h7a6"
                },
                {
                    "vulnerability": "VCID-s8cd-xy2t-vyem"
                },
                {
                    "vulnerability": "VCID-u7r9-ukbq-mkb4"
                },
                {
                    "vulnerability": "VCID-uaga-tye9-gqg1"
                },
                {
                    "vulnerability": "VCID-uh5h-t12y-h3b1"
                },
                {
                    "vulnerability": "VCID-wdhd-qhry-jue5"
                },
                {
                    "vulnerability": "VCID-wkxh-2hvz-kqhj"
                },
                {
                    "vulnerability": "VCID-wxca-7hua-tubu"
                },
                {
                    "vulnerability": "VCID-zakg-k4hk-fyhm"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:alpm/archlinux/firefox@53.0.3-1"
        }
    ],
    "references": [
        {
            "reference_url": "https://security.archlinux.org/ASA-201706-19",
            "reference_id": "ASA-201706-19",
            "reference_type": "",
            "scores": [],
            "url": "https://security.archlinux.org/ASA-201706-19"
        },
        {
            "reference_url": "https://security.archlinux.org/AVG-302",
            "reference_id": "AVG-302",
            "reference_type": "",
            "scores": [
                {
                    "value": "Critical",
                    "scoring_system": "archlinux",
                    "scoring_elements": ""
                }
            ],
            "url": "https://security.archlinux.org/AVG-302"
        },
        {
            "reference_url": "https://www.mozilla.org/en-US/security/advisories/mfsa2017-15",
            "reference_id": "mfsa2017-15",
            "reference_type": "",
            "scores": [
                {
                    "value": "critical",
                    "scoring_system": "generic_textual",
                    "scoring_elements": ""
                }
            ],
            "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2017-15"
        }
    ],
    "weaknesses": [],
    "exploits": [],
    "severity_range_score": "9.0 - 10.0",
    "exploitability": null,
    "weighted_severity": null,
    "risk_score": null,
    "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-jggu-sywf-13ag"
}