Vulnerability Instance
Lookup for vulnerabilities affecting packages.
GET /api/vulnerabilities/7634?format=api
{ "url": "http://public2.vulnerablecode.io/api/vulnerabilities/7634?format=api", "vulnerability_id": "VCID-5bex-5qhq-8qav", "summary": "There is an infinite loop in the Exiv2::Image::printIFDStructure function of image.cpp in Exiv2 0.27-RC1. A crafted input will lead to a remote denial of service attack.", "aliases": [ { "alias": "CVE-2018-18915" }, { "alias": "PYSEC-2018-140" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/174093?format=api", "purl": "pkg:deb/debian/exiv2@0?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/exiv2@0%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/174087?format=api", "purl": "pkg:deb/debian/exiv2@0.27.3-3%2Bdeb11u2?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-5m46-2feu-yuh1" }, { "vulnerability": "VCID-9nxb-v8b8-bkcf" }, { "vulnerability": "VCID-bpyz-ymzy-zufs" }, { "vulnerability": "VCID-cs4q-3rwr-vke4" }, { "vulnerability": "VCID-jtxa-kc5c-z7cr" }, { "vulnerability": "VCID-p48j-jh17-7fa9" }, { "vulnerability": "VCID-pxbv-ypp8-wkfs" }, { "vulnerability": "VCID-yyhh-t98b-cyen" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/exiv2@0.27.3-3%252Bdeb11u2%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/174085?format=api", "purl": "pkg:deb/debian/exiv2@0.27.6-1?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-5m46-2feu-yuh1" }, { "vulnerability": "VCID-9nxb-v8b8-bkcf" }, { "vulnerability": "VCID-bpyz-ymzy-zufs" }, { "vulnerability": "VCID-cs4q-3rwr-vke4" }, { "vulnerability": "VCID-jtxa-kc5c-z7cr" }, { "vulnerability": "VCID-p48j-jh17-7fa9" }, { "vulnerability": "VCID-yyhh-t98b-cyen" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/exiv2@0.27.6-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/174089?format=api", "purl": "pkg:deb/debian/exiv2@0.28.5%2Bdfsg-1?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-9nxb-v8b8-bkcf" }, { "vulnerability": "VCID-bpyz-ymzy-zufs" }, { "vulnerability": "VCID-cs4q-3rwr-vke4" }, { "vulnerability": "VCID-p48j-jh17-7fa9" }, { "vulnerability": "VCID-yyhh-t98b-cyen" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/exiv2@0.28.5%252Bdfsg-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/174088?format=api", "purl": "pkg:deb/debian/exiv2@0.28.8%2Bdfsg-1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/exiv2@0.28.8%252Bdfsg-1%3Fdistro=trixie" } ], "affected_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/1032863?format=api", "purl": "pkg:rpm/redhat/exiv2@0.27.0-2?arch=el7_6", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3q1t-4rek-qkfg" }, { "vulnerability": "VCID-5b9r-5f28-9udx" }, { "vulnerability": "VCID-5bex-5qhq-8qav" }, { "vulnerability": "VCID-9c38-fh23-5be9" }, { "vulnerability": "VCID-bnp5-trry-wkfg" }, { "vulnerability": "VCID-brur-bbpd-kqdy" }, { "vulnerability": "VCID-c4mb-fbag-ebgt" }, { "vulnerability": "VCID-fe2x-szc6-8yc5" }, { "vulnerability": "VCID-ggen-9gsf-gqcn" }, { "vulnerability": "VCID-gmsz-q9xq-77h5" }, { "vulnerability": "VCID-gzpk-1j6q-q7c8" }, { "vulnerability": "VCID-kg5f-jtu6-g3ep" }, { "vulnerability": "VCID-m6zd-sa8b-4yf1" }, { "vulnerability": "VCID-mnj7-np9p-qkb8" }, { "vulnerability": "VCID-qg38-45nz-43aj" }, { "vulnerability": "VCID-rkgt-stjs-xufd" }, { "vulnerability": "VCID-rvn8-kt79-d3eh" }, { "vulnerability": "VCID-s64f-qnzx-bubw" }, { "vulnerability": "VCID-se7f-fa3g-gkce" }, { "vulnerability": "VCID-smnc-xde4-qubx" }, { "vulnerability": "VCID-tdt2-h77c-uyb1" }, { "vulnerability": "VCID-u8mb-ndmd-vqd1" }, { "vulnerability": "VCID-vw1z-mv91-fufm" }, { "vulnerability": "VCID-xpng-h4ms-hyhp" }, { "vulnerability": "VCID-zyyj-29dt-kqay" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/exiv2@0.27.0-2%3Farch=el7_6" }, { "url": "http://public2.vulnerablecode.io/api/packages/1031204?format=api", "purl": "pkg:rpm/redhat/exiv2@0.27.2-5?arch=el8", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1da7-wda3-queu" }, { "vulnerability": "VCID-2pcy-h1za-fqan" }, { "vulnerability": "VCID-36be-kgfy-dfh3" }, { "vulnerability": "VCID-3g4k-cfrf-13b4" }, { "vulnerability": "VCID-42wd-1g5h-jba7" }, { "vulnerability": "VCID-4tfz-pw1x-rua9" }, { "vulnerability": "VCID-5b9r-5f28-9udx" }, { "vulnerability": "VCID-5bex-5qhq-8qav" }, { "vulnerability": "VCID-9c38-fh23-5be9" }, { "vulnerability": "VCID-c4mb-fbag-ebgt" }, { "vulnerability": "VCID-emda-3cut-ufft" }, { "vulnerability": "VCID-fdh1-mdeh-fuhz" }, { "vulnerability": "VCID-fwtr-yyg7-xkcs" }, { "vulnerability": "VCID-ggen-9gsf-gqcn" }, { "vulnerability": "VCID-gzpk-1j6q-q7c8" }, { "vulnerability": "VCID-k4me-ppbq-tyev" }, { "vulnerability": "VCID-mjeh-k2rm-rqb7" }, { "vulnerability": "VCID-mnj7-np9p-qkb8" }, { "vulnerability": "VCID-qg38-45nz-43aj" }, { "vulnerability": "VCID-rkgt-stjs-xufd" }, { "vulnerability": "VCID-rvn8-kt79-d3eh" }, { "vulnerability": "VCID-s64f-qnzx-bubw" }, { "vulnerability": "VCID-se7f-fa3g-gkce" }, { "vulnerability": "VCID-smnc-xde4-qubx" }, { "vulnerability": "VCID-tamr-wy8y-hbfe" }, { "vulnerability": "VCID-tdt2-h77c-uyb1" }, { "vulnerability": "VCID-vw1z-mv91-fufm" }, { "vulnerability": "VCID-xpng-h4ms-hyhp" }, { "vulnerability": "VCID-z49a-57ju-n7da" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/exiv2@0.27.2-5%3Farch=el8" }, { "url": "http://public2.vulnerablecode.io/api/packages/1031201?format=api", "purl": "pkg:rpm/redhat/gegl@0.2.0-39?arch=el8", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1da7-wda3-queu" }, { "vulnerability": "VCID-2pcy-h1za-fqan" }, { "vulnerability": "VCID-36be-kgfy-dfh3" }, { "vulnerability": "VCID-3g4k-cfrf-13b4" }, { "vulnerability": "VCID-42wd-1g5h-jba7" }, { "vulnerability": "VCID-4tfz-pw1x-rua9" }, { "vulnerability": "VCID-5b9r-5f28-9udx" }, { "vulnerability": "VCID-5bex-5qhq-8qav" }, { "vulnerability": "VCID-9c38-fh23-5be9" }, { "vulnerability": "VCID-c4mb-fbag-ebgt" }, { "vulnerability": "VCID-emda-3cut-ufft" }, { "vulnerability": "VCID-fdh1-mdeh-fuhz" }, { "vulnerability": "VCID-fwtr-yyg7-xkcs" }, { "vulnerability": "VCID-ggen-9gsf-gqcn" }, { "vulnerability": "VCID-gzpk-1j6q-q7c8" }, { "vulnerability": "VCID-k4me-ppbq-tyev" }, { "vulnerability": "VCID-mjeh-k2rm-rqb7" }, { "vulnerability": "VCID-mnj7-np9p-qkb8" }, { "vulnerability": "VCID-qg38-45nz-43aj" }, { "vulnerability": "VCID-rkgt-stjs-xufd" }, { "vulnerability": "VCID-rvn8-kt79-d3eh" }, { "vulnerability": "VCID-s64f-qnzx-bubw" }, { "vulnerability": "VCID-se7f-fa3g-gkce" }, { "vulnerability": "VCID-smnc-xde4-qubx" }, { "vulnerability": "VCID-tamr-wy8y-hbfe" }, { "vulnerability": "VCID-tdt2-h77c-uyb1" }, { "vulnerability": "VCID-vw1z-mv91-fufm" }, { "vulnerability": "VCID-xpng-h4ms-hyhp" }, { "vulnerability": "VCID-z49a-57ju-n7da" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/gegl@0.2.0-39%3Farch=el8" }, { "url": "http://public2.vulnerablecode.io/api/packages/1031203?format=api", "purl": "pkg:rpm/redhat/gnome-color-manager@3.28.0-3?arch=el8", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1da7-wda3-queu" }, { "vulnerability": "VCID-2pcy-h1za-fqan" }, { "vulnerability": "VCID-36be-kgfy-dfh3" }, { "vulnerability": "VCID-3g4k-cfrf-13b4" }, { "vulnerability": "VCID-42wd-1g5h-jba7" }, { "vulnerability": "VCID-4tfz-pw1x-rua9" }, { "vulnerability": "VCID-5b9r-5f28-9udx" }, { "vulnerability": "VCID-5bex-5qhq-8qav" }, { "vulnerability": "VCID-9c38-fh23-5be9" }, { "vulnerability": "VCID-c4mb-fbag-ebgt" }, { "vulnerability": "VCID-emda-3cut-ufft" }, { "vulnerability": "VCID-fdh1-mdeh-fuhz" }, { "vulnerability": "VCID-fwtr-yyg7-xkcs" }, { "vulnerability": "VCID-ggen-9gsf-gqcn" }, { "vulnerability": "VCID-gzpk-1j6q-q7c8" }, { "vulnerability": "VCID-k4me-ppbq-tyev" }, { "vulnerability": "VCID-mjeh-k2rm-rqb7" }, { "vulnerability": "VCID-mnj7-np9p-qkb8" }, { "vulnerability": "VCID-qg38-45nz-43aj" }, { "vulnerability": "VCID-rkgt-stjs-xufd" }, { "vulnerability": "VCID-rvn8-kt79-d3eh" }, { "vulnerability": "VCID-s64f-qnzx-bubw" }, { "vulnerability": "VCID-se7f-fa3g-gkce" }, { "vulnerability": "VCID-smnc-xde4-qubx" }, { "vulnerability": "VCID-tamr-wy8y-hbfe" }, { "vulnerability": "VCID-tdt2-h77c-uyb1" }, { "vulnerability": "VCID-vw1z-mv91-fufm" }, { "vulnerability": "VCID-xpng-h4ms-hyhp" }, { "vulnerability": "VCID-z49a-57ju-n7da" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/gnome-color-manager@3.28.0-3%3Farch=el8" }, { "url": "http://public2.vulnerablecode.io/api/packages/1031202?format=api", "purl": "pkg:rpm/redhat/libgexiv2@0.10.8-4?arch=el8", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1da7-wda3-queu" }, { "vulnerability": "VCID-2pcy-h1za-fqan" }, { "vulnerability": "VCID-36be-kgfy-dfh3" }, { "vulnerability": "VCID-3g4k-cfrf-13b4" }, { "vulnerability": "VCID-42wd-1g5h-jba7" }, { "vulnerability": "VCID-4tfz-pw1x-rua9" }, { "vulnerability": "VCID-5b9r-5f28-9udx" }, { "vulnerability": "VCID-5bex-5qhq-8qav" }, { "vulnerability": "VCID-9c38-fh23-5be9" }, { "vulnerability": "VCID-c4mb-fbag-ebgt" }, { "vulnerability": "VCID-emda-3cut-ufft" }, { "vulnerability": "VCID-fdh1-mdeh-fuhz" }, { "vulnerability": "VCID-fwtr-yyg7-xkcs" }, { "vulnerability": "VCID-ggen-9gsf-gqcn" }, { "vulnerability": "VCID-gzpk-1j6q-q7c8" }, { "vulnerability": "VCID-k4me-ppbq-tyev" }, { "vulnerability": "VCID-mjeh-k2rm-rqb7" }, { "vulnerability": "VCID-mnj7-np9p-qkb8" }, { "vulnerability": "VCID-qg38-45nz-43aj" }, { "vulnerability": "VCID-rkgt-stjs-xufd" }, { "vulnerability": "VCID-rvn8-kt79-d3eh" }, { "vulnerability": "VCID-s64f-qnzx-bubw" }, { "vulnerability": "VCID-se7f-fa3g-gkce" }, { "vulnerability": "VCID-smnc-xde4-qubx" }, { "vulnerability": "VCID-tamr-wy8y-hbfe" }, { "vulnerability": "VCID-tdt2-h77c-uyb1" }, { "vulnerability": "VCID-vw1z-mv91-fufm" }, { "vulnerability": "VCID-xpng-h4ms-hyhp" }, { "vulnerability": "VCID-z49a-57ju-n7da" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/libgexiv2@0.10.8-4%3Farch=el8" } ], "references": [ { "reference_url": "https://access.redhat.com/errata/RHSA-2019:2101", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" } ], "url": "https://access.redhat.com/errata/RHSA-2019:2101" }, { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-18915.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "3.3", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-18915.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2018-18915", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00605", "scoring_system": "epss", "scoring_elements": "0.69964", "published_at": "2026-05-30T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2018-18915" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "3.3", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://github.com/Exiv2/exiv2/issues/511", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" } ], "url": "https://github.com/Exiv2/exiv2/issues/511" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1646555", "reference_id": "1646555", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1646555" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2020:1577", "reference_id": "RHSA-2020:1577", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2020:1577" } ], "weaknesses": [ { "cwe_id": 835, "name": "Loop with Unreachable Exit Condition ('Infinite Loop')", "description": "The product contains an iteration or loop with an exit condition that cannot be reached, i.e., an infinite loop." } ], "exploits": [], "severity_range_score": "3.3 - 6.5", "exploitability": null, "weighted_severity": null, "risk_score": null, "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-5bex-5qhq-8qav" }