Vulnerability Instance
Lookup for vulnerabilities affecting packages.
GET /api/vulnerabilities/7637?format=api
{ "url": "http://public2.vulnerablecode.io/api/vulnerabilities/7637?format=api", "vulnerability_id": "VCID-5b9r-5f28-9udx", "summary": "In Exiv2 0.26, Exiv2::IptcParser::decode in iptc.cpp (called from psdimage.cpp in the PSD image reader) may suffer from a denial of service (heap-based buffer over-read) caused by an integer overflow via a crafted PSD image file.", "aliases": [ { "alias": "CVE-2018-19107" }, { "alias": "PYSEC-2018-141" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/174094?format=api", "purl": "pkg:deb/debian/exiv2@0.27.2-6?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/exiv2@0.27.2-6%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/414545?format=api", "purl": "pkg:deb/debian/exiv2@0.27.3-3%2Bdeb11u2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-5m46-2feu-yuh1" }, { "vulnerability": "VCID-9nxb-v8b8-bkcf" }, { "vulnerability": "VCID-bpyz-ymzy-zufs" }, { "vulnerability": "VCID-cs4q-3rwr-vke4" }, { "vulnerability": "VCID-jtxa-kc5c-z7cr" }, { "vulnerability": "VCID-p48j-jh17-7fa9" }, { "vulnerability": "VCID-pxbv-ypp8-wkfs" }, { "vulnerability": "VCID-yyhh-t98b-cyen" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/exiv2@0.27.3-3%252Bdeb11u2" }, { "url": "http://public2.vulnerablecode.io/api/packages/174087?format=api", "purl": "pkg:deb/debian/exiv2@0.27.3-3%2Bdeb11u2?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-5m46-2feu-yuh1" }, { "vulnerability": "VCID-9nxb-v8b8-bkcf" }, { "vulnerability": "VCID-bpyz-ymzy-zufs" }, { "vulnerability": "VCID-cs4q-3rwr-vke4" }, { "vulnerability": "VCID-jtxa-kc5c-z7cr" }, { "vulnerability": "VCID-p48j-jh17-7fa9" }, { "vulnerability": "VCID-pxbv-ypp8-wkfs" }, { "vulnerability": "VCID-yyhh-t98b-cyen" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/exiv2@0.27.3-3%252Bdeb11u2%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/174085?format=api", "purl": "pkg:deb/debian/exiv2@0.27.6-1?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-5m46-2feu-yuh1" }, { "vulnerability": "VCID-9nxb-v8b8-bkcf" }, { "vulnerability": "VCID-bpyz-ymzy-zufs" }, { "vulnerability": "VCID-cs4q-3rwr-vke4" }, { "vulnerability": "VCID-jtxa-kc5c-z7cr" }, { "vulnerability": "VCID-p48j-jh17-7fa9" }, { "vulnerability": "VCID-yyhh-t98b-cyen" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/exiv2@0.27.6-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/174089?format=api", "purl": "pkg:deb/debian/exiv2@0.28.5%2Bdfsg-1?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-9nxb-v8b8-bkcf" }, { "vulnerability": "VCID-bpyz-ymzy-zufs" }, { "vulnerability": "VCID-cs4q-3rwr-vke4" }, { "vulnerability": "VCID-p48j-jh17-7fa9" }, { "vulnerability": "VCID-yyhh-t98b-cyen" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/exiv2@0.28.5%252Bdfsg-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/174088?format=api", "purl": "pkg:deb/debian/exiv2@0.28.8%2Bdfsg-1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/exiv2@0.28.8%252Bdfsg-1%3Fdistro=trixie" } ], "affected_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/1049625?format=api", "purl": "pkg:deb/debian/exiv2@0.25-4%2Bdeb10u2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1da7-wda3-queu" }, { "vulnerability": "VCID-47rx-t69a-hbhd" }, { "vulnerability": "VCID-4nf2-ska4-bkbc" }, { "vulnerability": "VCID-4tfz-pw1x-rua9" }, { "vulnerability": "VCID-5b9r-5f28-9udx" }, { "vulnerability": "VCID-6wrk-qf7u-9bah" }, { "vulnerability": "VCID-73pn-ws8c-9uc2" }, { "vulnerability": "VCID-9ff3-74m8-63ca" }, { "vulnerability": "VCID-c735-yd1x-3yg5" }, { "vulnerability": "VCID-cqkb-5w3h-afhu" }, { "vulnerability": "VCID-dqcd-es1a-wydx" }, { "vulnerability": "VCID-edm5-bxe4-8bdn" }, { "vulnerability": "VCID-gzpk-1j6q-q7c8" }, { "vulnerability": "VCID-hdp9-r2a5-4yfk" }, { "vulnerability": "VCID-jwdk-xcwp-bubj" }, { "vulnerability": "VCID-nrk3-vu7c-2fgf" }, { "vulnerability": "VCID-qeax-4cn4-8ya7" }, { "vulnerability": "VCID-vmn7-9b5h-hkds" }, { "vulnerability": "VCID-w7js-9m5w-43aj" }, { "vulnerability": "VCID-zszt-953s-uqh2" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/exiv2@0.25-4%252Bdeb10u2" }, { "url": "http://public2.vulnerablecode.io/api/packages/1036396?format=api", "purl": "pkg:deb/debian/exiv2@0.10-1.4", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1da7-wda3-queu" }, { "vulnerability": "VCID-47rx-t69a-hbhd" }, { "vulnerability": "VCID-4nf2-ska4-bkbc" }, { "vulnerability": "VCID-4tfz-pw1x-rua9" }, { "vulnerability": "VCID-5b9r-5f28-9udx" }, { "vulnerability": "VCID-6wrk-qf7u-9bah" }, { "vulnerability": "VCID-73pn-ws8c-9uc2" }, { "vulnerability": "VCID-9ff3-74m8-63ca" }, { "vulnerability": "VCID-bnp5-trry-wkfg" }, { "vulnerability": "VCID-brur-bbpd-kqdy" }, { "vulnerability": "VCID-c735-yd1x-3yg5" }, { "vulnerability": "VCID-cqkb-5w3h-afhu" }, { "vulnerability": "VCID-dqcd-es1a-wydx" }, { "vulnerability": "VCID-e5qp-n5q8-wuh2" }, { "vulnerability": "VCID-edm5-bxe4-8bdn" }, { "vulnerability": "VCID-fa4t-ynj5-wqhk" }, { "vulnerability": "VCID-fe2x-szc6-8yc5" }, { "vulnerability": "VCID-gzpk-1j6q-q7c8" }, { "vulnerability": "VCID-hdp9-r2a5-4yfk" }, { "vulnerability": "VCID-jwdk-xcwp-bubj" }, { "vulnerability": "VCID-nrk3-vu7c-2fgf" }, { "vulnerability": "VCID-pfrj-s55f-7ubw" }, { "vulnerability": "VCID-qeax-4cn4-8ya7" }, { "vulnerability": "VCID-rf2d-157m-gfeb" }, { "vulnerability": "VCID-spkw-mch3-wfgx" }, { "vulnerability": "VCID-tamr-wy8y-hbfe" }, { "vulnerability": "VCID-u8mb-ndmd-vqd1" }, { "vulnerability": "VCID-vfsm-dn9c-bbd6" }, { "vulnerability": "VCID-vmn7-9b5h-hkds" }, { "vulnerability": "VCID-w7js-9m5w-43aj" }, { "vulnerability": "VCID-zszt-953s-uqh2" }, { "vulnerability": "VCID-zyyj-29dt-kqay" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/exiv2@0.10-1.4" }, { "url": "http://public2.vulnerablecode.io/api/packages/1036397?format=api", "purl": "pkg:deb/debian/exiv2@0.10-1.6", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1da7-wda3-queu" }, { "vulnerability": "VCID-47rx-t69a-hbhd" }, { "vulnerability": "VCID-4nf2-ska4-bkbc" }, { "vulnerability": "VCID-4tfz-pw1x-rua9" }, { "vulnerability": "VCID-5b9r-5f28-9udx" }, { "vulnerability": "VCID-6wrk-qf7u-9bah" }, { "vulnerability": "VCID-73pn-ws8c-9uc2" }, { "vulnerability": "VCID-9ff3-74m8-63ca" }, { "vulnerability": "VCID-bnp5-trry-wkfg" }, { "vulnerability": "VCID-brur-bbpd-kqdy" }, { "vulnerability": "VCID-c735-yd1x-3yg5" }, { "vulnerability": "VCID-cqkb-5w3h-afhu" }, { "vulnerability": "VCID-dqcd-es1a-wydx" }, { "vulnerability": "VCID-e5qp-n5q8-wuh2" }, { "vulnerability": "VCID-edm5-bxe4-8bdn" }, { "vulnerability": "VCID-fa4t-ynj5-wqhk" }, { "vulnerability": "VCID-fe2x-szc6-8yc5" }, { "vulnerability": "VCID-gzpk-1j6q-q7c8" }, { "vulnerability": "VCID-hdp9-r2a5-4yfk" }, { "vulnerability": "VCID-jwdk-xcwp-bubj" }, { "vulnerability": "VCID-nrk3-vu7c-2fgf" }, { "vulnerability": "VCID-pfrj-s55f-7ubw" }, { "vulnerability": "VCID-qeax-4cn4-8ya7" }, { "vulnerability": "VCID-rf2d-157m-gfeb" }, { "vulnerability": "VCID-spkw-mch3-wfgx" }, { "vulnerability": "VCID-tamr-wy8y-hbfe" }, { "vulnerability": "VCID-u8mb-ndmd-vqd1" }, { "vulnerability": "VCID-vfsm-dn9c-bbd6" }, { "vulnerability": "VCID-vmn7-9b5h-hkds" }, { "vulnerability": "VCID-w7js-9m5w-43aj" }, { "vulnerability": "VCID-zszt-953s-uqh2" }, { "vulnerability": "VCID-zyyj-29dt-kqay" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/exiv2@0.10-1.6" }, { "url": "http://public2.vulnerablecode.io/api/packages/1036398?format=api", "purl": "pkg:deb/debian/exiv2@0.17.1-1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1da7-wda3-queu" }, { "vulnerability": "VCID-47rx-t69a-hbhd" }, { "vulnerability": "VCID-4nf2-ska4-bkbc" }, { "vulnerability": "VCID-4tfz-pw1x-rua9" }, { "vulnerability": "VCID-5b9r-5f28-9udx" }, { "vulnerability": "VCID-6wrk-qf7u-9bah" }, { "vulnerability": "VCID-73pn-ws8c-9uc2" }, { "vulnerability": "VCID-9ff3-74m8-63ca" }, { "vulnerability": "VCID-bnp5-trry-wkfg" }, { "vulnerability": "VCID-brur-bbpd-kqdy" }, { "vulnerability": "VCID-c735-yd1x-3yg5" }, { "vulnerability": "VCID-cqkb-5w3h-afhu" }, { "vulnerability": "VCID-dqcd-es1a-wydx" }, { "vulnerability": "VCID-e5qp-n5q8-wuh2" }, { "vulnerability": "VCID-edm5-bxe4-8bdn" }, { "vulnerability": "VCID-fa4t-ynj5-wqhk" }, { "vulnerability": "VCID-fe2x-szc6-8yc5" }, { "vulnerability": "VCID-gzpk-1j6q-q7c8" }, { "vulnerability": "VCID-hdp9-r2a5-4yfk" }, { "vulnerability": "VCID-jwdk-xcwp-bubj" }, { "vulnerability": "VCID-nrk3-vu7c-2fgf" }, { "vulnerability": "VCID-qeax-4cn4-8ya7" }, { "vulnerability": "VCID-rf2d-157m-gfeb" }, { "vulnerability": "VCID-spkw-mch3-wfgx" }, { "vulnerability": "VCID-tamr-wy8y-hbfe" }, { "vulnerability": "VCID-u8mb-ndmd-vqd1" }, { "vulnerability": "VCID-vfsm-dn9c-bbd6" }, { "vulnerability": "VCID-vmn7-9b5h-hkds" }, { "vulnerability": "VCID-w7js-9m5w-43aj" }, { "vulnerability": "VCID-zszt-953s-uqh2" }, { "vulnerability": "VCID-zyyj-29dt-kqay" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/exiv2@0.17.1-1" }, { "url": "http://public2.vulnerablecode.io/api/packages/1036399?format=api", "purl": "pkg:deb/debian/exiv2@0.20-2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1da7-wda3-queu" }, { "vulnerability": "VCID-47rx-t69a-hbhd" }, { "vulnerability": "VCID-4nf2-ska4-bkbc" }, { "vulnerability": "VCID-4tfz-pw1x-rua9" }, { "vulnerability": "VCID-5b9r-5f28-9udx" }, { "vulnerability": "VCID-6wrk-qf7u-9bah" }, { "vulnerability": "VCID-73pn-ws8c-9uc2" }, { "vulnerability": "VCID-9ff3-74m8-63ca" }, { "vulnerability": "VCID-bnp5-trry-wkfg" }, { "vulnerability": "VCID-brur-bbpd-kqdy" }, { "vulnerability": "VCID-c735-yd1x-3yg5" }, { "vulnerability": "VCID-cqkb-5w3h-afhu" }, { "vulnerability": "VCID-dqcd-es1a-wydx" }, { "vulnerability": "VCID-e5qp-n5q8-wuh2" }, { "vulnerability": "VCID-edm5-bxe4-8bdn" }, { "vulnerability": "VCID-fa4t-ynj5-wqhk" }, { "vulnerability": "VCID-fe2x-szc6-8yc5" }, { "vulnerability": "VCID-gzpk-1j6q-q7c8" }, { "vulnerability": "VCID-hdp9-r2a5-4yfk" }, { "vulnerability": "VCID-jwdk-xcwp-bubj" }, { "vulnerability": "VCID-nrk3-vu7c-2fgf" }, { "vulnerability": "VCID-qeax-4cn4-8ya7" }, { "vulnerability": "VCID-rf2d-157m-gfeb" }, { "vulnerability": "VCID-spkw-mch3-wfgx" }, { "vulnerability": "VCID-tamr-wy8y-hbfe" }, { "vulnerability": "VCID-u8mb-ndmd-vqd1" }, { "vulnerability": "VCID-vfsm-dn9c-bbd6" }, { "vulnerability": "VCID-vmn7-9b5h-hkds" }, { "vulnerability": "VCID-w7js-9m5w-43aj" }, { "vulnerability": "VCID-zszt-953s-uqh2" }, { "vulnerability": "VCID-zyyj-29dt-kqay" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/exiv2@0.20-2" }, { "url": "http://public2.vulnerablecode.io/api/packages/1036400?format=api", "purl": "pkg:deb/debian/exiv2@0.23-1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1da7-wda3-queu" }, { "vulnerability": "VCID-47rx-t69a-hbhd" }, { "vulnerability": "VCID-4nf2-ska4-bkbc" }, { "vulnerability": "VCID-4tfz-pw1x-rua9" }, { "vulnerability": "VCID-5b9r-5f28-9udx" }, { "vulnerability": "VCID-6wrk-qf7u-9bah" }, { "vulnerability": "VCID-73pn-ws8c-9uc2" }, { "vulnerability": "VCID-9ff3-74m8-63ca" }, { "vulnerability": "VCID-bnp5-trry-wkfg" }, { "vulnerability": "VCID-brur-bbpd-kqdy" }, { "vulnerability": "VCID-c735-yd1x-3yg5" }, { "vulnerability": "VCID-cqkb-5w3h-afhu" }, { "vulnerability": "VCID-dqcd-es1a-wydx" }, { "vulnerability": "VCID-e5qp-n5q8-wuh2" }, { "vulnerability": "VCID-edm5-bxe4-8bdn" }, { "vulnerability": "VCID-fa4t-ynj5-wqhk" }, { "vulnerability": "VCID-fe2x-szc6-8yc5" }, { "vulnerability": "VCID-gzpk-1j6q-q7c8" }, { "vulnerability": "VCID-hdp9-r2a5-4yfk" }, { "vulnerability": "VCID-jwdk-xcwp-bubj" }, { "vulnerability": "VCID-nrk3-vu7c-2fgf" }, { "vulnerability": "VCID-qeax-4cn4-8ya7" }, { "vulnerability": "VCID-rf2d-157m-gfeb" }, { "vulnerability": "VCID-spkw-mch3-wfgx" }, { "vulnerability": "VCID-tamr-wy8y-hbfe" }, { "vulnerability": "VCID-u8mb-ndmd-vqd1" }, { "vulnerability": "VCID-vfsm-dn9c-bbd6" }, { "vulnerability": "VCID-vmn7-9b5h-hkds" }, { "vulnerability": "VCID-w7js-9m5w-43aj" }, { "vulnerability": "VCID-zszt-953s-uqh2" }, { "vulnerability": "VCID-zyyj-29dt-kqay" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/exiv2@0.23-1" }, { "url": "http://public2.vulnerablecode.io/api/packages/1036401?format=api", "purl": "pkg:deb/debian/exiv2@0.24-4.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1da7-wda3-queu" }, { "vulnerability": "VCID-47rx-t69a-hbhd" }, { "vulnerability": "VCID-4nf2-ska4-bkbc" }, { "vulnerability": "VCID-4tfz-pw1x-rua9" }, { "vulnerability": "VCID-5b9r-5f28-9udx" }, { "vulnerability": "VCID-6wrk-qf7u-9bah" }, { "vulnerability": "VCID-73pn-ws8c-9uc2" }, { "vulnerability": "VCID-9ff3-74m8-63ca" }, { "vulnerability": "VCID-bnp5-trry-wkfg" }, { "vulnerability": "VCID-brur-bbpd-kqdy" }, { "vulnerability": "VCID-c735-yd1x-3yg5" }, { "vulnerability": "VCID-cqkb-5w3h-afhu" }, { "vulnerability": "VCID-dqcd-es1a-wydx" }, { "vulnerability": "VCID-e5qp-n5q8-wuh2" }, { "vulnerability": "VCID-edm5-bxe4-8bdn" }, { "vulnerability": "VCID-fa4t-ynj5-wqhk" }, { "vulnerability": "VCID-fe2x-szc6-8yc5" }, { "vulnerability": "VCID-gzpk-1j6q-q7c8" }, { "vulnerability": "VCID-hdp9-r2a5-4yfk" }, { "vulnerability": "VCID-jwdk-xcwp-bubj" }, { "vulnerability": "VCID-nrk3-vu7c-2fgf" }, { "vulnerability": "VCID-qeax-4cn4-8ya7" }, { "vulnerability": "VCID-rf2d-157m-gfeb" }, { "vulnerability": "VCID-tamr-wy8y-hbfe" }, { "vulnerability": "VCID-u8mb-ndmd-vqd1" }, { "vulnerability": "VCID-vfsm-dn9c-bbd6" }, { "vulnerability": "VCID-vmn7-9b5h-hkds" }, { "vulnerability": "VCID-w7js-9m5w-43aj" }, { "vulnerability": "VCID-zszt-953s-uqh2" }, { "vulnerability": "VCID-zyyj-29dt-kqay" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/exiv2@0.24-4.1" }, { "url": "http://public2.vulnerablecode.io/api/packages/1036402?format=api", "purl": "pkg:deb/debian/exiv2@0.25-3.1%2Bdeb9u2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1da7-wda3-queu" }, { "vulnerability": "VCID-47rx-t69a-hbhd" }, { "vulnerability": "VCID-4nf2-ska4-bkbc" }, { "vulnerability": "VCID-4tfz-pw1x-rua9" }, { "vulnerability": "VCID-5b9r-5f28-9udx" }, { "vulnerability": "VCID-6wrk-qf7u-9bah" }, { "vulnerability": "VCID-73pn-ws8c-9uc2" }, { "vulnerability": "VCID-9ff3-74m8-63ca" }, { "vulnerability": "VCID-c735-yd1x-3yg5" }, { "vulnerability": "VCID-cqkb-5w3h-afhu" }, { "vulnerability": "VCID-dqcd-es1a-wydx" }, { "vulnerability": "VCID-e5qp-n5q8-wuh2" }, { "vulnerability": "VCID-edm5-bxe4-8bdn" }, { "vulnerability": "VCID-fa4t-ynj5-wqhk" }, { "vulnerability": "VCID-gzpk-1j6q-q7c8" }, { "vulnerability": "VCID-hdp9-r2a5-4yfk" }, { "vulnerability": "VCID-jwdk-xcwp-bubj" }, { "vulnerability": "VCID-nrk3-vu7c-2fgf" }, { "vulnerability": "VCID-qeax-4cn4-8ya7" }, { "vulnerability": "VCID-tamr-wy8y-hbfe" }, { "vulnerability": "VCID-vfsm-dn9c-bbd6" }, { "vulnerability": "VCID-vmn7-9b5h-hkds" }, { "vulnerability": "VCID-w7js-9m5w-43aj" }, { "vulnerability": "VCID-zszt-953s-uqh2" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/exiv2@0.25-3.1%252Bdeb9u2" }, { "url": "http://public2.vulnerablecode.io/api/packages/1032863?format=api", "purl": "pkg:rpm/redhat/exiv2@0.27.0-2?arch=el7_6", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3q1t-4rek-qkfg" }, { "vulnerability": "VCID-5b9r-5f28-9udx" }, { "vulnerability": "VCID-5bex-5qhq-8qav" }, { "vulnerability": "VCID-9c38-fh23-5be9" }, { "vulnerability": "VCID-bnp5-trry-wkfg" }, { "vulnerability": "VCID-brur-bbpd-kqdy" }, { "vulnerability": "VCID-c4mb-fbag-ebgt" }, { "vulnerability": "VCID-fe2x-szc6-8yc5" }, { "vulnerability": "VCID-ggen-9gsf-gqcn" }, { "vulnerability": "VCID-gmsz-q9xq-77h5" }, { "vulnerability": "VCID-gzpk-1j6q-q7c8" }, { "vulnerability": "VCID-kg5f-jtu6-g3ep" }, { "vulnerability": "VCID-m6zd-sa8b-4yf1" }, { "vulnerability": "VCID-mnj7-np9p-qkb8" }, { "vulnerability": "VCID-qg38-45nz-43aj" }, { "vulnerability": "VCID-rkgt-stjs-xufd" }, { "vulnerability": "VCID-rvn8-kt79-d3eh" }, { "vulnerability": "VCID-s64f-qnzx-bubw" }, { "vulnerability": "VCID-se7f-fa3g-gkce" }, { "vulnerability": "VCID-smnc-xde4-qubx" }, { "vulnerability": "VCID-tdt2-h77c-uyb1" }, { "vulnerability": "VCID-u8mb-ndmd-vqd1" }, { "vulnerability": "VCID-vw1z-mv91-fufm" }, { "vulnerability": "VCID-xpng-h4ms-hyhp" }, { "vulnerability": "VCID-zyyj-29dt-kqay" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/exiv2@0.27.0-2%3Farch=el7_6" }, { "url": "http://public2.vulnerablecode.io/api/packages/1031204?format=api", "purl": "pkg:rpm/redhat/exiv2@0.27.2-5?arch=el8", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1da7-wda3-queu" }, { "vulnerability": "VCID-2pcy-h1za-fqan" }, { "vulnerability": "VCID-36be-kgfy-dfh3" }, { "vulnerability": "VCID-3g4k-cfrf-13b4" }, { "vulnerability": "VCID-42wd-1g5h-jba7" }, { "vulnerability": "VCID-4tfz-pw1x-rua9" }, { "vulnerability": "VCID-5b9r-5f28-9udx" }, { "vulnerability": "VCID-5bex-5qhq-8qav" }, { "vulnerability": "VCID-9c38-fh23-5be9" }, { "vulnerability": "VCID-c4mb-fbag-ebgt" }, { "vulnerability": "VCID-emda-3cut-ufft" }, { "vulnerability": "VCID-fdh1-mdeh-fuhz" }, { "vulnerability": "VCID-fwtr-yyg7-xkcs" }, { "vulnerability": "VCID-ggen-9gsf-gqcn" }, { "vulnerability": "VCID-gzpk-1j6q-q7c8" }, { "vulnerability": "VCID-k4me-ppbq-tyev" }, { "vulnerability": "VCID-mjeh-k2rm-rqb7" }, { "vulnerability": "VCID-mnj7-np9p-qkb8" }, { "vulnerability": "VCID-qg38-45nz-43aj" }, { "vulnerability": "VCID-rkgt-stjs-xufd" }, { "vulnerability": "VCID-rvn8-kt79-d3eh" }, { "vulnerability": "VCID-s64f-qnzx-bubw" }, { "vulnerability": "VCID-se7f-fa3g-gkce" }, { "vulnerability": "VCID-smnc-xde4-qubx" }, { "vulnerability": "VCID-tamr-wy8y-hbfe" }, { "vulnerability": "VCID-tdt2-h77c-uyb1" }, { "vulnerability": "VCID-vw1z-mv91-fufm" }, { "vulnerability": "VCID-xpng-h4ms-hyhp" }, { "vulnerability": "VCID-z49a-57ju-n7da" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/exiv2@0.27.2-5%3Farch=el8" }, { "url": "http://public2.vulnerablecode.io/api/packages/1031201?format=api", "purl": "pkg:rpm/redhat/gegl@0.2.0-39?arch=el8", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1da7-wda3-queu" }, { "vulnerability": "VCID-2pcy-h1za-fqan" }, { "vulnerability": "VCID-36be-kgfy-dfh3" }, { "vulnerability": "VCID-3g4k-cfrf-13b4" }, { "vulnerability": "VCID-42wd-1g5h-jba7" }, { "vulnerability": "VCID-4tfz-pw1x-rua9" }, { "vulnerability": "VCID-5b9r-5f28-9udx" }, { "vulnerability": "VCID-5bex-5qhq-8qav" }, { "vulnerability": "VCID-9c38-fh23-5be9" }, { "vulnerability": "VCID-c4mb-fbag-ebgt" }, { "vulnerability": "VCID-emda-3cut-ufft" }, { "vulnerability": "VCID-fdh1-mdeh-fuhz" }, { "vulnerability": "VCID-fwtr-yyg7-xkcs" }, { "vulnerability": "VCID-ggen-9gsf-gqcn" }, { "vulnerability": "VCID-gzpk-1j6q-q7c8" }, { "vulnerability": "VCID-k4me-ppbq-tyev" }, { "vulnerability": "VCID-mjeh-k2rm-rqb7" }, { "vulnerability": "VCID-mnj7-np9p-qkb8" }, { "vulnerability": "VCID-qg38-45nz-43aj" }, { "vulnerability": "VCID-rkgt-stjs-xufd" }, { "vulnerability": "VCID-rvn8-kt79-d3eh" }, { "vulnerability": "VCID-s64f-qnzx-bubw" }, { "vulnerability": "VCID-se7f-fa3g-gkce" }, { "vulnerability": "VCID-smnc-xde4-qubx" }, { "vulnerability": "VCID-tamr-wy8y-hbfe" }, { "vulnerability": "VCID-tdt2-h77c-uyb1" }, { "vulnerability": "VCID-vw1z-mv91-fufm" }, { "vulnerability": "VCID-xpng-h4ms-hyhp" }, { "vulnerability": "VCID-z49a-57ju-n7da" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/gegl@0.2.0-39%3Farch=el8" }, { "url": "http://public2.vulnerablecode.io/api/packages/1031203?format=api", "purl": "pkg:rpm/redhat/gnome-color-manager@3.28.0-3?arch=el8", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1da7-wda3-queu" }, { "vulnerability": "VCID-2pcy-h1za-fqan" }, { "vulnerability": "VCID-36be-kgfy-dfh3" }, { "vulnerability": "VCID-3g4k-cfrf-13b4" }, { "vulnerability": "VCID-42wd-1g5h-jba7" }, { "vulnerability": "VCID-4tfz-pw1x-rua9" }, { "vulnerability": "VCID-5b9r-5f28-9udx" }, { "vulnerability": "VCID-5bex-5qhq-8qav" }, { "vulnerability": "VCID-9c38-fh23-5be9" }, { "vulnerability": "VCID-c4mb-fbag-ebgt" }, { "vulnerability": "VCID-emda-3cut-ufft" }, { "vulnerability": "VCID-fdh1-mdeh-fuhz" }, { "vulnerability": "VCID-fwtr-yyg7-xkcs" }, { "vulnerability": "VCID-ggen-9gsf-gqcn" }, { "vulnerability": "VCID-gzpk-1j6q-q7c8" }, { "vulnerability": "VCID-k4me-ppbq-tyev" }, { "vulnerability": "VCID-mjeh-k2rm-rqb7" }, { "vulnerability": "VCID-mnj7-np9p-qkb8" }, { "vulnerability": "VCID-qg38-45nz-43aj" }, { "vulnerability": "VCID-rkgt-stjs-xufd" }, { "vulnerability": "VCID-rvn8-kt79-d3eh" }, { "vulnerability": "VCID-s64f-qnzx-bubw" }, { "vulnerability": "VCID-se7f-fa3g-gkce" }, { "vulnerability": "VCID-smnc-xde4-qubx" }, { "vulnerability": "VCID-tamr-wy8y-hbfe" }, { "vulnerability": "VCID-tdt2-h77c-uyb1" }, { "vulnerability": "VCID-vw1z-mv91-fufm" }, { "vulnerability": "VCID-xpng-h4ms-hyhp" }, { "vulnerability": "VCID-z49a-57ju-n7da" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/gnome-color-manager@3.28.0-3%3Farch=el8" }, { "url": "http://public2.vulnerablecode.io/api/packages/1031202?format=api", "purl": "pkg:rpm/redhat/libgexiv2@0.10.8-4?arch=el8", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1da7-wda3-queu" }, { "vulnerability": "VCID-2pcy-h1za-fqan" }, { "vulnerability": "VCID-36be-kgfy-dfh3" }, { "vulnerability": "VCID-3g4k-cfrf-13b4" }, { "vulnerability": "VCID-42wd-1g5h-jba7" }, { "vulnerability": "VCID-4tfz-pw1x-rua9" }, { "vulnerability": "VCID-5b9r-5f28-9udx" }, { "vulnerability": "VCID-5bex-5qhq-8qav" }, { "vulnerability": "VCID-9c38-fh23-5be9" }, { "vulnerability": "VCID-c4mb-fbag-ebgt" }, { "vulnerability": "VCID-emda-3cut-ufft" }, { "vulnerability": "VCID-fdh1-mdeh-fuhz" }, { "vulnerability": "VCID-fwtr-yyg7-xkcs" }, { "vulnerability": "VCID-ggen-9gsf-gqcn" }, { "vulnerability": "VCID-gzpk-1j6q-q7c8" }, { "vulnerability": "VCID-k4me-ppbq-tyev" }, { "vulnerability": "VCID-mjeh-k2rm-rqb7" }, { "vulnerability": "VCID-mnj7-np9p-qkb8" }, { "vulnerability": "VCID-qg38-45nz-43aj" }, { "vulnerability": "VCID-rkgt-stjs-xufd" }, { "vulnerability": "VCID-rvn8-kt79-d3eh" }, { "vulnerability": "VCID-s64f-qnzx-bubw" }, { "vulnerability": "VCID-se7f-fa3g-gkce" }, { "vulnerability": "VCID-smnc-xde4-qubx" }, { "vulnerability": "VCID-tamr-wy8y-hbfe" }, { "vulnerability": "VCID-tdt2-h77c-uyb1" }, { "vulnerability": "VCID-vw1z-mv91-fufm" }, { "vulnerability": "VCID-xpng-h4ms-hyhp" }, { "vulnerability": "VCID-z49a-57ju-n7da" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/libgexiv2@0.10.8-4%3Farch=el8" } ], "references": [ { "reference_url": "https://access.redhat.com/errata/RHSA-2019:2101", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" } ], "url": "https://access.redhat.com/errata/RHSA-2019:2101" }, { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-19107.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "3.3", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-19107.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2018-19107", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.02159", "scoring_system": "epss", "scoring_elements": "0.84558", "published_at": "2026-05-30T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2018-19107" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-19107", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-19107" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "3.3", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://github.com/Exiv2/exiv2/issues/427", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" } ], "url": "https://github.com/Exiv2/exiv2/issues/427" }, { "reference_url": "https://github.com/Exiv2/exiv2/pull/518", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" } ], "url": "https://github.com/Exiv2/exiv2/pull/518" }, { "reference_url": "https://lists.debian.org/debian-lts-announce/2019/02/msg00038.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" } ], "url": "https://lists.debian.org/debian-lts-announce/2019/02/msg00038.html" }, { "reference_url": "https://lists.debian.org/debian-lts-announce/2023/01/msg00004.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" } ], "url": "https://lists.debian.org/debian-lts-announce/2023/01/msg00004.html" }, { "reference_url": "https://usn.ubuntu.com/4056-1/", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" } ], "url": "https://usn.ubuntu.com/4056-1/" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1649094", "reference_id": "1649094", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1649094" }, { "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=913273", "reference_id": "913273", "reference_type": "", "scores": [], "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=913273" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2020:1577", "reference_id": "RHSA-2020:1577", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2020:1577" } ], "weaknesses": [ { "cwe_id": 190, "name": "Integer Overflow or Wraparound", "description": "The product performs a calculation that can produce an integer overflow or wraparound, when the logic assumes that the resulting value will always be larger than the original value. This can introduce other weaknesses when the calculation is used for resource management or execution control." }, { "cwe_id": 125, "name": "Out-of-bounds Read", "description": "The product reads data past the end, or before the beginning, of the intended buffer." } ], "exploits": [], "severity_range_score": "3.3 - 6.5", "exploitability": "0.5", "weighted_severity": "5.9", "risk_score": 3.0, "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-5b9r-5f28-9udx" }