Lookup for vulnerabilities affecting packages.

Vulnerability_idVCID-96hb-thus-r3f2
Summaryrsyslog: multiple format string vulnerabilities in zmq3 modules
Aliases
0
alias CVE-2017-12588
Fixed_packages
0
url pkg:deb/debian/rsyslog@8.28.0-1?distro=trixie
purl pkg:deb/debian/rsyslog@8.28.0-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/rsyslog@8.28.0-1%3Fdistro=trixie
1
url pkg:deb/debian/rsyslog@8.1901.0-1%2Bdeb10u2
purl pkg:deb/debian/rsyslog@8.1901.0-1%2Bdeb10u2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-7eg3-vksv-9bga
1
vulnerability VCID-qh6a-u11q-g3gp
2
vulnerability VCID-s9gb-bjme-gkaf
3
vulnerability VCID-ybfq-unp3-dbav
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/rsyslog@8.1901.0-1%252Bdeb10u2
2
url pkg:deb/debian/rsyslog@8.2102.0-2%2Bdeb11u1?distro=trixie
purl pkg:deb/debian/rsyslog@8.2102.0-2%2Bdeb11u1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/rsyslog@8.2102.0-2%252Bdeb11u1%3Fdistro=trixie
3
url pkg:deb/debian/rsyslog@8.2302.0-1%2Bdeb12u1?distro=trixie
purl pkg:deb/debian/rsyslog@8.2302.0-1%2Bdeb12u1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/rsyslog@8.2302.0-1%252Bdeb12u1%3Fdistro=trixie
4
url pkg:deb/debian/rsyslog@8.2504.0-1?distro=trixie
purl pkg:deb/debian/rsyslog@8.2504.0-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/rsyslog@8.2504.0-1%3Fdistro=trixie
5
url pkg:deb/debian/rsyslog@8.2512.0-3?distro=trixie
purl pkg:deb/debian/rsyslog@8.2512.0-3?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/rsyslog@8.2512.0-3%3Fdistro=trixie
6
url pkg:deb/debian/rsyslog@8.2602.0-1?distro=trixie
purl pkg:deb/debian/rsyslog@8.2602.0-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/rsyslog@8.2602.0-1%3Fdistro=trixie
Affected_packages
0
url pkg:deb/debian/rsyslog@3.18.6-4
purl pkg:deb/debian/rsyslog@3.18.6-4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2vuy-ga2a-2ke4
1
vulnerability VCID-4vr2-rn4g-bbep
2
vulnerability VCID-7eg3-vksv-9bga
3
vulnerability VCID-8mwn-2k1d-rkfz
4
vulnerability VCID-96hb-thus-r3f2
5
vulnerability VCID-cbts-ng32-67e7
6
vulnerability VCID-cq52-ykyq-qug5
7
vulnerability VCID-g5b3-53m2-yug1
8
vulnerability VCID-gg4f-gzty-y7e1
9
vulnerability VCID-pgy6-vbk7-hkg8
10
vulnerability VCID-qh6a-u11q-g3gp
11
vulnerability VCID-s9gb-bjme-gkaf
12
vulnerability VCID-ybfq-unp3-dbav
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/rsyslog@3.18.6-4
1
url pkg:deb/debian/rsyslog@4.6.4-2
purl pkg:deb/debian/rsyslog@4.6.4-2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2vuy-ga2a-2ke4
1
vulnerability VCID-4vr2-rn4g-bbep
2
vulnerability VCID-7eg3-vksv-9bga
3
vulnerability VCID-8mwn-2k1d-rkfz
4
vulnerability VCID-96hb-thus-r3f2
5
vulnerability VCID-cbts-ng32-67e7
6
vulnerability VCID-cq52-ykyq-qug5
7
vulnerability VCID-g5b3-53m2-yug1
8
vulnerability VCID-gg4f-gzty-y7e1
9
vulnerability VCID-pgy6-vbk7-hkg8
10
vulnerability VCID-qh6a-u11q-g3gp
11
vulnerability VCID-s9gb-bjme-gkaf
12
vulnerability VCID-ybfq-unp3-dbav
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/rsyslog@4.6.4-2
2
url pkg:deb/debian/rsyslog@4.6.4-2%2Bdeb6u2
purl pkg:deb/debian/rsyslog@4.6.4-2%2Bdeb6u2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2vuy-ga2a-2ke4
1
vulnerability VCID-4vr2-rn4g-bbep
2
vulnerability VCID-7eg3-vksv-9bga
3
vulnerability VCID-8mwn-2k1d-rkfz
4
vulnerability VCID-96hb-thus-r3f2
5
vulnerability VCID-cbts-ng32-67e7
6
vulnerability VCID-cq52-ykyq-qug5
7
vulnerability VCID-g5b3-53m2-yug1
8
vulnerability VCID-gg4f-gzty-y7e1
9
vulnerability VCID-pgy6-vbk7-hkg8
10
vulnerability VCID-qh6a-u11q-g3gp
11
vulnerability VCID-s9gb-bjme-gkaf
12
vulnerability VCID-ybfq-unp3-dbav
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/rsyslog@4.6.4-2%252Bdeb6u2
3
url pkg:deb/debian/rsyslog@5.8.11-3%2Bdeb7u2
purl pkg:deb/debian/rsyslog@5.8.11-3%2Bdeb7u2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2vuy-ga2a-2ke4
1
vulnerability VCID-7eg3-vksv-9bga
2
vulnerability VCID-8mwn-2k1d-rkfz
3
vulnerability VCID-96hb-thus-r3f2
4
vulnerability VCID-g5b3-53m2-yug1
5
vulnerability VCID-qh6a-u11q-g3gp
6
vulnerability VCID-s9gb-bjme-gkaf
7
vulnerability VCID-ybfq-unp3-dbav
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/rsyslog@5.8.11-3%252Bdeb7u2
4
url pkg:deb/debian/rsyslog@7.4.8-1~bpo70%2B1
purl pkg:deb/debian/rsyslog@7.4.8-1~bpo70%2B1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2vuy-ga2a-2ke4
1
vulnerability VCID-7eg3-vksv-9bga
2
vulnerability VCID-8mwn-2k1d-rkfz
3
vulnerability VCID-96hb-thus-r3f2
4
vulnerability VCID-g5b3-53m2-yug1
5
vulnerability VCID-qh6a-u11q-g3gp
6
vulnerability VCID-s9gb-bjme-gkaf
7
vulnerability VCID-ybfq-unp3-dbav
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/rsyslog@7.4.8-1~bpo70%252B1
5
url pkg:deb/debian/rsyslog@7.6.3-2~bpo70%2B1
purl pkg:deb/debian/rsyslog@7.6.3-2~bpo70%2B1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2vuy-ga2a-2ke4
1
vulnerability VCID-7eg3-vksv-9bga
2
vulnerability VCID-8mwn-2k1d-rkfz
3
vulnerability VCID-96hb-thus-r3f2
4
vulnerability VCID-g5b3-53m2-yug1
5
vulnerability VCID-qh6a-u11q-g3gp
6
vulnerability VCID-s9gb-bjme-gkaf
7
vulnerability VCID-ybfq-unp3-dbav
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/rsyslog@7.6.3-2~bpo70%252B1
6
url pkg:deb/debian/rsyslog@8.4.2-1
purl pkg:deb/debian/rsyslog@8.4.2-1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-7eg3-vksv-9bga
1
vulnerability VCID-96hb-thus-r3f2
2
vulnerability VCID-g5b3-53m2-yug1
3
vulnerability VCID-qh6a-u11q-g3gp
4
vulnerability VCID-s9gb-bjme-gkaf
5
vulnerability VCID-ybfq-unp3-dbav
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/rsyslog@8.4.2-1
7
url pkg:deb/debian/rsyslog@8.4.2-1%2Bdeb8u2
purl pkg:deb/debian/rsyslog@8.4.2-1%2Bdeb8u2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-7eg3-vksv-9bga
1
vulnerability VCID-96hb-thus-r3f2
2
vulnerability VCID-g5b3-53m2-yug1
3
vulnerability VCID-qh6a-u11q-g3gp
4
vulnerability VCID-s9gb-bjme-gkaf
5
vulnerability VCID-ybfq-unp3-dbav
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/rsyslog@8.4.2-1%252Bdeb8u2
8
url pkg:deb/debian/rsyslog@8.16.0-1~bpo8%2B1
purl pkg:deb/debian/rsyslog@8.16.0-1~bpo8%2B1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-7eg3-vksv-9bga
1
vulnerability VCID-96hb-thus-r3f2
2
vulnerability VCID-g5b3-53m2-yug1
3
vulnerability VCID-qh6a-u11q-g3gp
4
vulnerability VCID-s9gb-bjme-gkaf
5
vulnerability VCID-ybfq-unp3-dbav
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/rsyslog@8.16.0-1~bpo8%252B1
9
url pkg:deb/debian/rsyslog@8.23.0-2~bpo8%2B1
purl pkg:deb/debian/rsyslog@8.23.0-2~bpo8%2B1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-7eg3-vksv-9bga
1
vulnerability VCID-96hb-thus-r3f2
2
vulnerability VCID-g5b3-53m2-yug1
3
vulnerability VCID-qh6a-u11q-g3gp
4
vulnerability VCID-s9gb-bjme-gkaf
5
vulnerability VCID-ybfq-unp3-dbav
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/rsyslog@8.23.0-2~bpo8%252B1
10
url pkg:deb/debian/rsyslog@8.24.0-1
purl pkg:deb/debian/rsyslog@8.24.0-1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-7eg3-vksv-9bga
1
vulnerability VCID-96hb-thus-r3f2
2
vulnerability VCID-g5b3-53m2-yug1
3
vulnerability VCID-qh6a-u11q-g3gp
4
vulnerability VCID-s9gb-bjme-gkaf
5
vulnerability VCID-ybfq-unp3-dbav
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/rsyslog@8.24.0-1
References
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12588.json
reference_id
reference_type
scores
0
value 4.9
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12588.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2017-12588
reference_id
reference_type
scores
0
value 0.0043
scoring_system epss
scoring_elements 0.62437
published_at 2026-04-01T12:55:00Z
1
value 0.0043
scoring_system epss
scoring_elements 0.62592
published_at 2026-04-18T12:55:00Z
2
value 0.0043
scoring_system epss
scoring_elements 0.62545
published_at 2026-04-13T12:55:00Z
3
value 0.0043
scoring_system epss
scoring_elements 0.62586
published_at 2026-04-16T12:55:00Z
4
value 0.0043
scoring_system epss
scoring_elements 0.62495
published_at 2026-04-02T12:55:00Z
5
value 0.0043
scoring_system epss
scoring_elements 0.62527
published_at 2026-04-04T12:55:00Z
6
value 0.0043
scoring_system epss
scoring_elements 0.62493
published_at 2026-04-07T12:55:00Z
7
value 0.0043
scoring_system epss
scoring_elements 0.62544
published_at 2026-04-08T12:55:00Z
8
value 0.0043
scoring_system epss
scoring_elements 0.6256
published_at 2026-04-09T12:55:00Z
9
value 0.0043
scoring_system epss
scoring_elements 0.62578
published_at 2026-04-11T12:55:00Z
10
value 0.0043
scoring_system epss
scoring_elements 0.62567
published_at 2026-04-12T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2017-12588
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12588
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12588
3
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 4.4
scoring_system cvssv2
scoring_elements AV:L/AC:M/Au:N/C:P/I:P/A:P
1
value 9.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
4
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1481335
reference_id 1481335
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1481335
Weaknesses
0
cwe_id 134
name Use of Externally-Controlled Format String
description The product uses a function that accepts a format string as an argument, but the format string originates from an external source.
Exploits
Severity_range_score4.4 - 9.3
Exploitability0.5
Weighted_severity4.7
Risk_score2.4
Resource_urlhttp://public2.vulnerablecode.io/vulnerabilities/VCID-96hb-thus-r3f2