Django REST framework

Package Instance

Lookup for vulnerable packages by Package URL.

Purlpkg:deb/debian/libvorbis@1.3.4-2
Typedeb
Namespacedebian
Namelibvorbis
Version1.3.4-2
Qualifiers
Subpath
Is_vulnerabletrue
Next_non_vulnerable_version1.3.6-2
Latest_non_vulnerable_version1.3.6-2
Affected_by_vulnerabilities
0
url VCID-45n4-j354-v3c4
vulnerability_id VCID-45n4-j354-v3c4
summary 
Multiple vulnerabilities have been found in libvorbis, the worst of
    which could result in a Denial of Service condition.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10392.json
reference_id
reference_type
scores
0
value 3.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10392.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2018-10392
reference_id
reference_type
scores
0
value 0.01423
scoring_system epss
scoring_elements 0.8055
published_at 2026-04-01T12:55:00Z
1
value 0.01423
scoring_system epss
scoring_elements 0.80702
published_at 2026-05-05T12:55:00Z
2
value 0.01423
scoring_system epss
scoring_elements 0.80665
published_at 2026-04-24T12:55:00Z
3
value 0.01423
scoring_system epss
scoring_elements 0.80669
published_at 2026-04-26T12:55:00Z
4
value 0.01423
scoring_system epss
scoring_elements 0.80685
published_at 2026-04-29T12:55:00Z
5
value 0.01423
scoring_system epss
scoring_elements 0.80557
published_at 2026-04-02T12:55:00Z
6
value 0.01423
scoring_system epss
scoring_elements 0.80579
published_at 2026-04-04T12:55:00Z
7
value 0.01423
scoring_system epss
scoring_elements 0.80572
published_at 2026-04-07T12:55:00Z
8
value 0.01423
scoring_system epss
scoring_elements 0.806
published_at 2026-04-08T12:55:00Z
9
value 0.01423
scoring_system epss
scoring_elements 0.80609
published_at 2026-04-09T12:55:00Z
10
value 0.01423
scoring_system epss
scoring_elements 0.80627
published_at 2026-04-11T12:55:00Z
11
value 0.01423
scoring_system epss
scoring_elements 0.80614
published_at 2026-04-12T12:55:00Z
12
value 0.01423
scoring_system epss
scoring_elements 0.80605
published_at 2026-04-13T12:55:00Z
13
value 0.01423
scoring_system epss
scoring_elements 0.80634
published_at 2026-04-16T12:55:00Z
14
value 0.01423
scoring_system epss
scoring_elements 0.80637
published_at 2026-04-18T12:55:00Z
15
value 0.01423
scoring_system epss
scoring_elements 0.80641
published_at 2026-04-21T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2018-10392
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-10392
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-10392
3
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 5.5
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
4
reference_url https://gitlab.xiph.org/xiph/vorbis/issues/2335
reference_id
reference_type
scores
url https://gitlab.xiph.org/xiph/vorbis/issues/2335
5
reference_url https://lists.debian.org/debian-lts-announce/2019/11/msg00031.html
reference_id
reference_type
scores
url https://lists.debian.org/debian-lts-announce/2019/11/msg00031.html
6
reference_url https://lists.debian.org/debian-lts-announce/2021/11/msg00023.html
reference_id
reference_type
scores
url https://lists.debian.org/debian-lts-announce/2021/11/msg00023.html
7
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1574193
reference_id 1574193
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1574193
8
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=876780
reference_id 876780
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=876780
9
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xiph.org:libvorbis:1.3.6:*:*:*:*:*:*:*
reference_id cpe:2.3:a:xiph.org:libvorbis:1.3.6:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xiph.org:libvorbis:1.3.6:*:*:*:*:*:*:*
10
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*
reference_id cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*
11
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*
reference_id cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*
12
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*
reference_id cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*
13
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux_eus:8.1:*:*:*:*:*:*:*
reference_id cpe:2.3:o:redhat:enterprise_linux_eus:8.1:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux_eus:8.1:*:*:*:*:*:*:*
14
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux_eus:8.2:*:*:*:*:*:*:*
reference_id cpe:2.3:o:redhat:enterprise_linux_eus:8.2:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux_eus:8.2:*:*:*:*:*:*:*
15
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux_eus:8.4:*:*:*:*:*:*:*
reference_id cpe:2.3:o:redhat:enterprise_linux_eus:8.4:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux_eus:8.4:*:*:*:*:*:*:*
16
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux_server_aus:8.2:*:*:*:*:*:*:*
reference_id cpe:2.3:o:redhat:enterprise_linux_server_aus:8.2:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux_server_aus:8.2:*:*:*:*:*:*:*
17
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux_server_aus:8.4:*:*:*:*:*:*:*
reference_id cpe:2.3:o:redhat:enterprise_linux_server_aus:8.4:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux_server_aus:8.4:*:*:*:*:*:*:*
18
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux_server_tus:8.2:*:*:*:*:*:*:*
reference_id cpe:2.3:o:redhat:enterprise_linux_server_tus:8.2:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux_server_tus:8.2:*:*:*:*:*:*:*
19
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux_server_tus:8.4:*:*:*:*:*:*:*
reference_id cpe:2.3:o:redhat:enterprise_linux_server_tus:8.4:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux_server_tus:8.4:*:*:*:*:*:*:*
20
reference_url https://nvd.nist.gov/vuln/detail/CVE-2018-10392
reference_id CVE-2018-10392
reference_type
scores
0
value 6.8
scoring_system cvssv2
scoring_elements AV:N/AC:M/Au:N/C:P/I:P/A:P
1
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
url https://nvd.nist.gov/vuln/detail/CVE-2018-10392
21
reference_url https://security.gentoo.org/glsa/202003-36
reference_id GLSA-202003-36
reference_type
scores
url https://security.gentoo.org/glsa/202003-36
22
reference_url https://access.redhat.com/errata/RHSA-2019:3703
reference_id RHSA-2019:3703
reference_type
scores
url https://access.redhat.com/errata/RHSA-2019:3703
23
reference_url https://usn.ubuntu.com/5420-1/
reference_id USN-5420-1
reference_type
scores
url https://usn.ubuntu.com/5420-1/
fixed_packages
0
url pkg:deb/debian/libvorbis@1.3.6-2
purl pkg:deb/debian/libvorbis@1.3.6-2
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/libvorbis@1.3.6-2
aliases CVE-2018-10392
risk_score 4.0
exploitability 0.5
weighted_severity 7.9
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-45n4-j354-v3c4
1
url VCID-6qp9-715s-8kdu
vulnerability_id VCID-6qp9-715s-8kdu
summary 
Multiple vulnerabilities have been found in libvorbis, the worst of
    which could result in a Denial of Service condition.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10393.json
reference_id
reference_type
scores
0
value 7.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:L
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10393.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2018-10393
reference_id
reference_type
scores
0
value 0.00379
scoring_system epss
scoring_elements 0.59331
published_at 2026-04-01T12:55:00Z
1
value 0.00379
scoring_system epss
scoring_elements 0.59403
published_at 2026-05-05T12:55:00Z
2
value 0.00379
scoring_system epss
scoring_elements 0.59464
published_at 2026-04-21T12:55:00Z
3
value 0.00379
scoring_system epss
scoring_elements 0.59438
published_at 2026-04-24T12:55:00Z
4
value 0.00379
scoring_system epss
scoring_elements 0.59443
published_at 2026-04-29T12:55:00Z
5
value 0.00379
scoring_system epss
scoring_elements 0.59404
published_at 2026-04-02T12:55:00Z
6
value 0.00379
scoring_system epss
scoring_elements 0.59428
published_at 2026-04-04T12:55:00Z
7
value 0.00379
scoring_system epss
scoring_elements 0.59393
published_at 2026-04-07T12:55:00Z
8
value 0.00379
scoring_system epss
scoring_elements 0.59444
published_at 2026-04-08T12:55:00Z
9
value 0.00379
scoring_system epss
scoring_elements 0.59458
published_at 2026-04-26T12:55:00Z
10
value 0.00379
scoring_system epss
scoring_elements 0.59476
published_at 2026-04-11T12:55:00Z
11
value 0.00379
scoring_system epss
scoring_elements 0.5946
published_at 2026-04-12T12:55:00Z
12
value 0.00379
scoring_system epss
scoring_elements 0.59442
published_at 2026-04-13T12:55:00Z
13
value 0.00379
scoring_system epss
scoring_elements 0.59474
published_at 2026-04-16T12:55:00Z
14
value 0.00379
scoring_system epss
scoring_elements 0.59481
published_at 2026-04-18T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2018-10393
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-10393
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-10393
3
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
4
reference_url https://gitlab.xiph.org/xiph/vorbis/issues/2334
reference_id
reference_type
scores
url https://gitlab.xiph.org/xiph/vorbis/issues/2334
5
reference_url https://lists.debian.org/debian-lts-announce/2019/11/msg00031.html
reference_id
reference_type
scores
url https://lists.debian.org/debian-lts-announce/2019/11/msg00031.html
6
reference_url https://lists.debian.org/debian-lts-announce/2021/11/msg00023.html
reference_id
reference_type
scores
url https://lists.debian.org/debian-lts-announce/2021/11/msg00023.html
7
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1574194
reference_id 1574194
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1574194
8
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=876780
reference_id 876780
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=876780
9
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xiph.org:libvorbis:1.3.6:*:*:*:*:*:*:*
reference_id cpe:2.3:a:xiph.org:libvorbis:1.3.6:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xiph.org:libvorbis:1.3.6:*:*:*:*:*:*:*
10
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*
reference_id cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*
11
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*
reference_id cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*
12
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*
reference_id cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*
13
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux_eus:8.1:*:*:*:*:*:*:*
reference_id cpe:2.3:o:redhat:enterprise_linux_eus:8.1:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux_eus:8.1:*:*:*:*:*:*:*
14
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux_eus:8.2:*:*:*:*:*:*:*
reference_id cpe:2.3:o:redhat:enterprise_linux_eus:8.2:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux_eus:8.2:*:*:*:*:*:*:*
15
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux_eus:8.4:*:*:*:*:*:*:*
reference_id cpe:2.3:o:redhat:enterprise_linux_eus:8.4:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux_eus:8.4:*:*:*:*:*:*:*
16
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux_server_aus:8.2:*:*:*:*:*:*:*
reference_id cpe:2.3:o:redhat:enterprise_linux_server_aus:8.2:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux_server_aus:8.2:*:*:*:*:*:*:*
17
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux_server_aus:8.4:*:*:*:*:*:*:*
reference_id cpe:2.3:o:redhat:enterprise_linux_server_aus:8.4:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux_server_aus:8.4:*:*:*:*:*:*:*
18
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux_server_tus:8.2:*:*:*:*:*:*:*
reference_id cpe:2.3:o:redhat:enterprise_linux_server_tus:8.2:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux_server_tus:8.2:*:*:*:*:*:*:*
19
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux_server_tus:8.4:*:*:*:*:*:*:*
reference_id cpe:2.3:o:redhat:enterprise_linux_server_tus:8.4:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux_server_tus:8.4:*:*:*:*:*:*:*
20
reference_url https://nvd.nist.gov/vuln/detail/CVE-2018-10393
reference_id CVE-2018-10393
reference_type
scores
0
value 5.0
scoring_system cvssv2
scoring_elements AV:N/AC:L/Au:N/C:N/I:N/A:P
1
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
url https://nvd.nist.gov/vuln/detail/CVE-2018-10393
21
reference_url https://security.gentoo.org/glsa/202003-36
reference_id GLSA-202003-36
reference_type
scores
url https://security.gentoo.org/glsa/202003-36
22
reference_url https://access.redhat.com/errata/RHSA-2019:3703
reference_id RHSA-2019:3703
reference_type
scores
url https://access.redhat.com/errata/RHSA-2019:3703
23
reference_url https://usn.ubuntu.com/5420-1/
reference_id USN-5420-1
reference_type
scores
url https://usn.ubuntu.com/5420-1/
fixed_packages
0
url pkg:deb/debian/libvorbis@1.3.6-2
purl pkg:deb/debian/libvorbis@1.3.6-2
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/libvorbis@1.3.6-2
aliases CVE-2018-10393
risk_score 3.4
exploitability 0.5
weighted_severity 6.8
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-6qp9-715s-8kdu
2
url VCID-fdue-dg92-13cp
vulnerability_id VCID-fdue-dg92-13cp
summary 
Multiple vulnerabilities have been found in Mozilla Thunderbird,
    the worst of which could lead to the execution of arbitrary code.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5146.json
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-5146.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2018-5146
reference_id
reference_type
scores
0
value 0.41108
scoring_system epss
scoring_elements 0.97373
published_at 2026-04-07T12:55:00Z
1
value 0.41108
scoring_system epss
scoring_elements 0.9738
published_at 2026-04-08T12:55:00Z
2
value 0.41108
scoring_system epss
scoring_elements 0.97368
published_at 2026-04-02T12:55:00Z
3
value 0.41108
scoring_system epss
scoring_elements 0.97361
published_at 2026-04-01T12:55:00Z
4
value 0.41108
scoring_system epss
scoring_elements 0.97384
published_at 2026-04-12T12:55:00Z
5
value 0.41108
scoring_system epss
scoring_elements 0.97383
published_at 2026-04-11T12:55:00Z
6
value 0.41108
scoring_system epss
scoring_elements 0.97381
published_at 2026-04-09T12:55:00Z
7
value 0.44797
scoring_system epss
scoring_elements 0.97587
published_at 2026-04-16T12:55:00Z
8
value 0.44797
scoring_system epss
scoring_elements 0.97579
published_at 2026-04-13T12:55:00Z
9
value 0.55641
scoring_system epss
scoring_elements 0.981
published_at 2026-05-05T12:55:00Z
10
value 0.55641
scoring_system epss
scoring_elements 0.98092
published_at 2026-04-18T12:55:00Z
11
value 0.55641
scoring_system epss
scoring_elements 0.98088
published_at 2026-04-21T12:55:00Z
12
value 0.55641
scoring_system epss
scoring_elements 0.98089
published_at 2026-04-24T12:55:00Z
13
value 0.55641
scoring_system epss
scoring_elements 0.9809
published_at 2026-04-26T12:55:00Z
14
value 0.55641
scoring_system epss
scoring_elements 0.98093
published_at 2026-04-29T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2018-5146
2
reference_url https://bugzilla.mozilla.org/show_bug.cgi?id=1446062
reference_id
reference_type
scores
url https://bugzilla.mozilla.org/show_bug.cgi?id=1446062
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-5125
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-5125
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-5127
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-5127
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-5129
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-5129
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-5144
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-5144
7
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-5145
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-5145
8
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-5146
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-5146
9
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-5147
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-5147
10
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
11
reference_url https://lists.debian.org/debian-lts-announce/2018/03/msg00022.html
reference_id
reference_type
scores
url https://lists.debian.org/debian-lts-announce/2018/03/msg00022.html
12
reference_url https://lists.debian.org/debian-lts-announce/2018/03/msg00029.html
reference_id
reference_type
scores
url https://lists.debian.org/debian-lts-announce/2018/03/msg00029.html
13
reference_url https://lists.debian.org/debian-lts-announce/2018/04/msg00033.html
reference_id
reference_type
scores
url https://lists.debian.org/debian-lts-announce/2018/04/msg00033.html
14
reference_url https://www.debian.org/security/2018/dsa-4140
reference_id
reference_type
scores
url https://www.debian.org/security/2018/dsa-4140
15
reference_url https://www.debian.org/security/2018/dsa-4143
reference_id
reference_type
scores
url https://www.debian.org/security/2018/dsa-4143
16
reference_url https://www.debian.org/security/2018/dsa-4155
reference_id
reference_type
scores
url https://www.debian.org/security/2018/dsa-4155
17
reference_url https://www.mozilla.org/security/advisories/mfsa2018-08/
reference_id
reference_type
scores
url https://www.mozilla.org/security/advisories/mfsa2018-08/
18
reference_url https://www.mozilla.org/security/advisories/mfsa2018-09/
reference_id
reference_type
scores
url https://www.mozilla.org/security/advisories/mfsa2018-09/
19
reference_url http://www.securityfocus.com/bid/103432
reference_id
reference_type
scores
url http://www.securityfocus.com/bid/103432
20
reference_url http://www.securitytracker.com/id/1040544
reference_id
reference_type
scores
url http://www.securitytracker.com/id/1040544
21
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1557221
reference_id 1557221
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1557221
22
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=893130
reference_id 893130
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=893130
23
reference_url https://security.archlinux.org/ASA-201803-12
reference_id ASA-201803-12
reference_type
scores
url https://security.archlinux.org/ASA-201803-12
24
reference_url https://security.archlinux.org/ASA-201803-13
reference_id ASA-201803-13
reference_type
scores
url https://security.archlinux.org/ASA-201803-13
25
reference_url https://security.archlinux.org/ASA-201803-21
reference_id ASA-201803-21
reference_type
scores
url https://security.archlinux.org/ASA-201803-21
26
reference_url https://security.archlinux.org/ASA-201803-22
reference_id ASA-201803-22
reference_type
scores
url https://security.archlinux.org/ASA-201803-22
27
reference_url https://security.archlinux.org/AVG-367
reference_id AVG-367
reference_type
scores
0
value Critical
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-367
28
reference_url https://security.archlinux.org/AVG-657
reference_id AVG-657
reference_type
scores
0
value Critical
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-657
29
reference_url https://security.archlinux.org/AVG-658
reference_id AVG-658
reference_type
scores
0
value Critical
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-658
30
reference_url https://security.archlinux.org/AVG-663
reference_id AVG-663
reference_type
scores
0
value Critical
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-663
31
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*
32
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*
reference_id cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*
33
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*
reference_id cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*
34
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*
reference_id cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*
35
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:canonical:ubuntu_linux:17.10:*:*:*:*:*:*:*
reference_id cpe:2.3:o:canonical:ubuntu_linux:17.10:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:canonical:ubuntu_linux:17.10:*:*:*:*:*:*:*
36
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*
reference_id cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*
37
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*
reference_id cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*
38
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*
reference_id cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*
39
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*
reference_id cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*
40
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*
reference_id cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*
41
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*
reference_id cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*
42
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*
reference_id cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*
43
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*
reference_id cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*
44
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*
reference_id cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*
45
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux_server_eus:7.4:*:*:*:*:*:*:*
reference_id cpe:2.3:o:redhat:enterprise_linux_server_eus:7.4:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux_server_eus:7.4:*:*:*:*:*:*:*
46
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5:*:*:*:*:*:*:*
reference_id cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5:*:*:*:*:*:*:*
47
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux_server_eus:7.6:*:*:*:*:*:*:*
reference_id cpe:2.3:o:redhat:enterprise_linux_server_eus:7.6:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux_server_eus:7.6:*:*:*:*:*:*:*
48
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux_server_tus:7.4:*:*:*:*:*:*:*
reference_id cpe:2.3:o:redhat:enterprise_linux_server_tus:7.4:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux_server_tus:7.4:*:*:*:*:*:*:*
49
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:*
reference_id cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:*
50
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*
reference_id cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*
51
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*
reference_id cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*
52
reference_url https://nvd.nist.gov/vuln/detail/CVE-2018-5146
reference_id CVE-2018-5146
reference_type
scores
0
value 6.8
scoring_system cvssv2
scoring_elements AV:N/AC:M/Au:N/C:P/I:P/A:P
1
value 8.8
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
url https://nvd.nist.gov/vuln/detail/CVE-2018-5146
53
reference_url https://security.gentoo.org/glsa/201811-13
reference_id GLSA-201811-13
reference_type
scores
url https://security.gentoo.org/glsa/201811-13
54
reference_url https://www.mozilla.org/en-US/security/advisories/mfsa2018-08
reference_id mfsa2018-08
reference_type
scores
0
value critical
scoring_system generic_textual
scoring_elements
url https://www.mozilla.org/en-US/security/advisories/mfsa2018-08
55
reference_url https://www.mozilla.org/en-US/security/advisories/mfsa2018-09
reference_id mfsa2018-09
reference_type
scores
0
value critical
scoring_system generic_textual
scoring_elements
url https://www.mozilla.org/en-US/security/advisories/mfsa2018-09
56
reference_url https://access.redhat.com/errata/RHSA-2018:0549
reference_id RHSA-2018:0549
reference_type
scores
url https://access.redhat.com/errata/RHSA-2018:0549
57
reference_url https://access.redhat.com/errata/RHSA-2018:0647
reference_id RHSA-2018:0647
reference_type
scores
url https://access.redhat.com/errata/RHSA-2018:0647
58
reference_url https://access.redhat.com/errata/RHSA-2018:0648
reference_id RHSA-2018:0648
reference_type
scores
url https://access.redhat.com/errata/RHSA-2018:0648
59
reference_url https://access.redhat.com/errata/RHSA-2018:0649
reference_id RHSA-2018:0649
reference_type
scores
url https://access.redhat.com/errata/RHSA-2018:0649
60
reference_url https://access.redhat.com/errata/RHSA-2018:1058
reference_id RHSA-2018:1058
reference_type
scores
url https://access.redhat.com/errata/RHSA-2018:1058
61
reference_url https://usn.ubuntu.com/3545-1/
reference_id USN-3545-1
reference_type
scores
url https://usn.ubuntu.com/3545-1/
62
reference_url https://usn.ubuntu.com/3599-1/
reference_id USN-3599-1
reference_type
scores
url https://usn.ubuntu.com/3599-1/
63
reference_url https://usn.ubuntu.com/3604-1/
reference_id USN-3604-1
reference_type
scores
url https://usn.ubuntu.com/3604-1/
fixed_packages
0
url pkg:deb/debian/libvorbis@1.3.4-2%2Bdeb8u1
purl pkg:deb/debian/libvorbis@1.3.4-2%2Bdeb8u1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-45n4-j354-v3c4
1
vulnerability VCID-6qp9-715s-8kdu
2
vulnerability VCID-fdue-dg92-13cp
3
vulnerability VCID-qvsc-tr3r-9fc9
4
vulnerability VCID-ukgq-ajbx-dug6
5
vulnerability VCID-wst6-s2k4-kkdj
6
vulnerability VCID-wvm2-2xak-5fbn
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/libvorbis@1.3.4-2%252Bdeb8u1
1
url pkg:deb/debian/libvorbis@1.3.5-4%2Bdeb9u2
purl pkg:deb/debian/libvorbis@1.3.5-4%2Bdeb9u2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-45n4-j354-v3c4
1
vulnerability VCID-6qp9-715s-8kdu
2
vulnerability VCID-fdue-dg92-13cp
3
vulnerability VCID-qvsc-tr3r-9fc9
4
vulnerability VCID-ukgq-ajbx-dug6
5
vulnerability VCID-wst6-s2k4-kkdj
6
vulnerability VCID-wvm2-2xak-5fbn
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/libvorbis@1.3.5-4%252Bdeb9u2
2
url pkg:deb/debian/libvorbis@1.3.6-2
purl pkg:deb/debian/libvorbis@1.3.6-2
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/libvorbis@1.3.6-2
aliases CVE-2018-5146
risk_score 4.5
exploitability 0.5
weighted_severity 9.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-fdue-dg92-13cp
3
url VCID-qvsc-tr3r-9fc9
vulnerability_id VCID-qvsc-tr3r-9fc9
summary security update
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-11333.json
reference_id
reference_type
scores
0
value 3.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-11333.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2017-11333
reference_id
reference_type
scores
0
value 0.02385
scoring_system epss
scoring_elements 0.84929
published_at 2026-04-01T12:55:00Z
1
value 0.02385
scoring_system epss
scoring_elements 0.85073
published_at 2026-05-05T12:55:00Z
2
value 0.02385
scoring_system epss
scoring_elements 0.85059
published_at 2026-04-26T12:55:00Z
3
value 0.02385
scoring_system epss
scoring_elements 0.85057
published_at 2026-04-29T12:55:00Z
4
value 0.02385
scoring_system epss
scoring_elements 0.84943
published_at 2026-04-02T12:55:00Z
5
value 0.02385
scoring_system epss
scoring_elements 0.84961
published_at 2026-04-04T12:55:00Z
6
value 0.02385
scoring_system epss
scoring_elements 0.84965
published_at 2026-04-07T12:55:00Z
7
value 0.02385
scoring_system epss
scoring_elements 0.84988
published_at 2026-04-08T12:55:00Z
8
value 0.02385
scoring_system epss
scoring_elements 0.84995
published_at 2026-04-09T12:55:00Z
9
value 0.02385
scoring_system epss
scoring_elements 0.85011
published_at 2026-04-11T12:55:00Z
10
value 0.02385
scoring_system epss
scoring_elements 0.85009
published_at 2026-04-12T12:55:00Z
11
value 0.02385
scoring_system epss
scoring_elements 0.85005
published_at 2026-04-13T12:55:00Z
12
value 0.02385
scoring_system epss
scoring_elements 0.85026
published_at 2026-04-16T12:55:00Z
13
value 0.02385
scoring_system epss
scoring_elements 0.85028
published_at 2026-04-18T12:55:00Z
14
value 0.02385
scoring_system epss
scoring_elements 0.85025
published_at 2026-04-21T12:55:00Z
15
value 0.02385
scoring_system epss
scoring_elements 0.8505
published_at 2026-04-24T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2017-11333
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11333
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11333
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14632
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14632
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14633
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14633
5
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 3.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
6
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1480643
reference_id 1480643
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1480643
7
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=870341
reference_id 870341
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=870341
8
reference_url https://security.archlinux.org/ASA-201803-12
reference_id ASA-201803-12
reference_type
scores
url https://security.archlinux.org/ASA-201803-12
9
reference_url https://security.archlinux.org/AVG-367
reference_id AVG-367
reference_type
scores
0
value Critical
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-367
10
reference_url https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/linux/dos/42399.txt
reference_id CVE-2017-11735;CVE-2017-11333
reference_type exploit
scores
url https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/linux/dos/42399.txt
fixed_packages
0
url pkg:deb/debian/libvorbis@1.3.5-4%2Bdeb9u2
purl pkg:deb/debian/libvorbis@1.3.5-4%2Bdeb9u2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-45n4-j354-v3c4
1
vulnerability VCID-6qp9-715s-8kdu
2
vulnerability VCID-fdue-dg92-13cp
3
vulnerability VCID-qvsc-tr3r-9fc9
4
vulnerability VCID-ukgq-ajbx-dug6
5
vulnerability VCID-wst6-s2k4-kkdj
6
vulnerability VCID-wvm2-2xak-5fbn
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/libvorbis@1.3.5-4%252Bdeb9u2
1
url pkg:deb/debian/libvorbis@1.3.6-2
purl pkg:deb/debian/libvorbis@1.3.6-2
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/libvorbis@1.3.6-2
aliases CVE-2017-11333
risk_score 10.0
exploitability 2.0
weighted_severity 9.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-qvsc-tr3r-9fc9
4
url VCID-ukgq-ajbx-dug6
vulnerability_id VCID-ukgq-ajbx-dug6
summary security update
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14632.json
reference_id
reference_type
scores
0
value 3.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14632.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2017-14632
reference_id
reference_type
scores
0
value 0.06507
scoring_system epss
scoring_elements 0.91056
published_at 2026-04-01T12:55:00Z
1
value 0.06507
scoring_system epss
scoring_elements 0.91153
published_at 2026-05-05T12:55:00Z
2
value 0.06507
scoring_system epss
scoring_elements 0.91131
published_at 2026-04-16T12:55:00Z
3
value 0.06507
scoring_system epss
scoring_elements 0.9113
published_at 2026-04-18T12:55:00Z
4
value 0.06507
scoring_system epss
scoring_elements 0.91133
published_at 2026-04-21T12:55:00Z
5
value 0.06507
scoring_system epss
scoring_elements 0.91147
published_at 2026-04-24T12:55:00Z
6
value 0.06507
scoring_system epss
scoring_elements 0.91144
published_at 2026-04-26T12:55:00Z
7
value 0.06507
scoring_system epss
scoring_elements 0.91139
published_at 2026-04-29T12:55:00Z
8
value 0.06507
scoring_system epss
scoring_elements 0.91061
published_at 2026-04-02T12:55:00Z
9
value 0.06507
scoring_system epss
scoring_elements 0.9107
published_at 2026-04-04T12:55:00Z
10
value 0.06507
scoring_system epss
scoring_elements 0.91079
published_at 2026-04-07T12:55:00Z
11
value 0.06507
scoring_system epss
scoring_elements 0.91092
published_at 2026-04-08T12:55:00Z
12
value 0.06507
scoring_system epss
scoring_elements 0.91098
published_at 2026-04-09T12:55:00Z
13
value 0.06507
scoring_system epss
scoring_elements 0.91106
published_at 2026-04-11T12:55:00Z
14
value 0.06507
scoring_system epss
scoring_elements 0.91107
published_at 2026-04-13T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2017-14632
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11333
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11333
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14632
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14632
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14633
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14633
5
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 6.8
scoring_system cvssv2
scoring_elements AV:N/AC:M/Au:N/C:P/I:P/A:P
1
value 7.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
6
reference_url https://gitlab.xiph.org/xiph/vorbis/issues/2328
reference_id
reference_type
scores
url https://gitlab.xiph.org/xiph/vorbis/issues/2328
7
reference_url https://lists.debian.org/debian-lts-announce/2018/04/msg00033.html
reference_id
reference_type
scores
url https://lists.debian.org/debian-lts-announce/2018/04/msg00033.html
8
reference_url https://www.debian.org/security/2018/dsa-4113
reference_id
reference_type
scores
url https://www.debian.org/security/2018/dsa-4113
9
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1499952
reference_id 1499952
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1499952
10
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=876779
reference_id 876779
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=876779
11
reference_url https://security.archlinux.org/ASA-201803-12
reference_id ASA-201803-12
reference_type
scores
url https://security.archlinux.org/ASA-201803-12
12
reference_url https://security.archlinux.org/ASA-201803-21
reference_id ASA-201803-21
reference_type
scores
url https://security.archlinux.org/ASA-201803-21
13
reference_url https://security.archlinux.org/AVG-367
reference_id AVG-367
reference_type
scores
0
value Critical
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-367
14
reference_url https://security.archlinux.org/AVG-658
reference_id AVG-658
reference_type
scores
0
value Critical
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-658
15
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xiph.org:libvorbis:1.3.5:*:*:*:*:*:*:*
reference_id cpe:2.3:a:xiph.org:libvorbis:1.3.5:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xiph.org:libvorbis:1.3.5:*:*:*:*:*:*:*
16
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:esm:*:*:*
reference_id cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:esm:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:esm:*:*:*
17
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*
reference_id cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*
18
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:canonical:ubuntu_linux:17.10:*:*:*:*:*:*:*
reference_id cpe:2.3:o:canonical:ubuntu_linux:17.10:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:canonical:ubuntu_linux:17.10:*:*:*:*:*:*:*
19
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*
reference_id cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*
20
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*
reference_id cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*
21
reference_url https://nvd.nist.gov/vuln/detail/CVE-2017-14632
reference_id CVE-2017-14632
reference_type
scores
0
value 7.5
scoring_system cvssv2
scoring_elements AV:N/AC:L/Au:N/C:P/I:P/A:P
1
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
url https://nvd.nist.gov/vuln/detail/CVE-2017-14632
22
reference_url https://usn.ubuntu.com/3569-1/
reference_id USN-3569-1
reference_type
scores
url https://usn.ubuntu.com/3569-1/
fixed_packages
0
url pkg:deb/debian/libvorbis@1.3.5-4%2Bdeb9u2
purl pkg:deb/debian/libvorbis@1.3.5-4%2Bdeb9u2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-45n4-j354-v3c4
1
vulnerability VCID-6qp9-715s-8kdu
2
vulnerability VCID-fdue-dg92-13cp
3
vulnerability VCID-qvsc-tr3r-9fc9
4
vulnerability VCID-ukgq-ajbx-dug6
5
vulnerability VCID-wst6-s2k4-kkdj
6
vulnerability VCID-wvm2-2xak-5fbn
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/libvorbis@1.3.5-4%252Bdeb9u2
1
url pkg:deb/debian/libvorbis@1.3.6-2
purl pkg:deb/debian/libvorbis@1.3.6-2
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/libvorbis@1.3.6-2
aliases CVE-2017-14632
risk_score 4.5
exploitability 0.5
weighted_severity 9.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-ukgq-ajbx-dug6
5
url VCID-wst6-s2k4-kkdj
vulnerability_id VCID-wst6-s2k4-kkdj
summary 
Multiple vulnerabilities have been found in libvorbis, the worst of
    which could result in a Denial of Service condition.
references
0
reference_url http://openwall.com/lists/oss-security/2017/09/21/2
reference_id
reference_type
scores
url http://openwall.com/lists/oss-security/2017/09/21/2
1
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14160.json
reference_id
reference_type
scores
0
value 3.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14160.json
2
reference_url https://api.first.org/data/v1/epss?cve=CVE-2017-14160
reference_id
reference_type
scores
0
value 0.01552
scoring_system epss
scoring_elements 0.81359
published_at 2026-04-01T12:55:00Z
1
value 0.01552
scoring_system epss
scoring_elements 0.81516
published_at 2026-05-05T12:55:00Z
2
value 0.01552
scoring_system epss
scoring_elements 0.81463
published_at 2026-04-21T12:55:00Z
3
value 0.01552
scoring_system epss
scoring_elements 0.81485
published_at 2026-04-24T12:55:00Z
4
value 0.01552
scoring_system epss
scoring_elements 0.81492
published_at 2026-04-26T12:55:00Z
5
value 0.01552
scoring_system epss
scoring_elements 0.81497
published_at 2026-04-29T12:55:00Z
6
value 0.01552
scoring_system epss
scoring_elements 0.81368
published_at 2026-04-02T12:55:00Z
7
value 0.01552
scoring_system epss
scoring_elements 0.81391
published_at 2026-04-04T12:55:00Z
8
value 0.01552
scoring_system epss
scoring_elements 0.81389
published_at 2026-04-07T12:55:00Z
9
value 0.01552
scoring_system epss
scoring_elements 0.81417
published_at 2026-04-08T12:55:00Z
10
value 0.01552
scoring_system epss
scoring_elements 0.81422
published_at 2026-04-09T12:55:00Z
11
value 0.01552
scoring_system epss
scoring_elements 0.81444
published_at 2026-04-11T12:55:00Z
12
value 0.01552
scoring_system epss
scoring_elements 0.81432
published_at 2026-04-12T12:55:00Z
13
value 0.01552
scoring_system epss
scoring_elements 0.81424
published_at 2026-04-13T12:55:00Z
14
value 0.01552
scoring_system epss
scoring_elements 0.81462
published_at 2026-04-16T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2017-14160
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14160
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14160
4
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv2
scoring_elements AV:N/AC:M/Au:N/C:N/I:N/A:P
1
value 5.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
5
reference_url https://lists.debian.org/debian-lts-announce/2019/11/msg00031.html
reference_id
reference_type
scores
url https://lists.debian.org/debian-lts-announce/2019/11/msg00031.html
6
reference_url https://lists.debian.org/debian-lts-announce/2021/11/msg00023.html
reference_id
reference_type
scores
url https://lists.debian.org/debian-lts-announce/2021/11/msg00023.html
7
reference_url http://www.securityfocus.com/bid/101045
reference_id
reference_type
scores
url http://www.securityfocus.com/bid/101045
8
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1499991
reference_id 1499991
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1499991
9
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=876780
reference_id 876780
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=876780
10
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xiph.org:libvorbis:1.3.5:*:*:*:*:*:*:*
reference_id cpe:2.3:a:xiph.org:libvorbis:1.3.5:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xiph.org:libvorbis:1.3.5:*:*:*:*:*:*:*
11
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*
reference_id cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*
12
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*
reference_id cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*
13
reference_url https://nvd.nist.gov/vuln/detail/CVE-2017-14160
reference_id CVE-2017-14160
reference_type
scores
0
value 6.8
scoring_system cvssv2
scoring_elements AV:N/AC:M/Au:N/C:P/I:P/A:P
1
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
url https://nvd.nist.gov/vuln/detail/CVE-2017-14160
14
reference_url https://security.gentoo.org/glsa/202003-36
reference_id GLSA-202003-36
reference_type
scores
url https://security.gentoo.org/glsa/202003-36
15
reference_url https://usn.ubuntu.com/5420-1/
reference_id USN-5420-1
reference_type
scores
url https://usn.ubuntu.com/5420-1/
fixed_packages
0
url pkg:deb/debian/libvorbis@1.3.6-2
purl pkg:deb/debian/libvorbis@1.3.6-2
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/libvorbis@1.3.6-2
aliases CVE-2017-14160
risk_score 4.0
exploitability 0.5
weighted_severity 7.9
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-wst6-s2k4-kkdj
6
url VCID-wvm2-2xak-5fbn
vulnerability_id VCID-wvm2-2xak-5fbn
summary security update
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14633.json
reference_id
reference_type
scores
0
value 3.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14633.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2017-14633
reference_id
reference_type
scores
0
value 0.00542
scoring_system epss
scoring_elements 0.67698
published_at 2026-04-08T12:55:00Z
1
value 0.00542
scoring_system epss
scoring_elements 0.67647
published_at 2026-04-07T12:55:00Z
2
value 0.00542
scoring_system epss
scoring_elements 0.67713
published_at 2026-04-09T12:55:00Z
3
value 0.00542
scoring_system epss
scoring_elements 0.67736
published_at 2026-04-18T12:55:00Z
4
value 0.00542
scoring_system epss
scoring_elements 0.67721
published_at 2026-04-12T12:55:00Z
5
value 0.00542
scoring_system epss
scoring_elements 0.67688
published_at 2026-04-13T12:55:00Z
6
value 0.00542
scoring_system epss
scoring_elements 0.67723
published_at 2026-04-16T12:55:00Z
7
value 0.00542
scoring_system epss
scoring_elements 0.67717
published_at 2026-04-21T12:55:00Z
8
value 0.00542
scoring_system epss
scoring_elements 0.67737
published_at 2026-04-24T12:55:00Z
9
value 0.01001
scoring_system epss
scoring_elements 0.76929
published_at 2026-04-01T12:55:00Z
10
value 0.01001
scoring_system epss
scoring_elements 0.76965
published_at 2026-04-04T12:55:00Z
11
value 0.01001
scoring_system epss
scoring_elements 0.76935
published_at 2026-04-02T12:55:00Z
12
value 0.01007
scoring_system epss
scoring_elements 0.77144
published_at 2026-04-29T12:55:00Z
13
value 0.01007
scoring_system epss
scoring_elements 0.77152
published_at 2026-05-05T12:55:00Z
14
value 0.01007
scoring_system epss
scoring_elements 0.7713
published_at 2026-04-26T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2017-14633
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11333
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11333
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14632
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14632
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14633
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14633
5
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv2
scoring_elements AV:N/AC:M/Au:N/C:P/I:N/A:N
1
value 5.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
6
reference_url https://gitlab.xiph.org/xiph/vorbis/issues/2329
reference_id
reference_type
scores
url https://gitlab.xiph.org/xiph/vorbis/issues/2329
7
reference_url https://lists.debian.org/debian-lts-announce/2018/04/msg00033.html
reference_id
reference_type
scores
url https://lists.debian.org/debian-lts-announce/2018/04/msg00033.html
8
reference_url https://lists.debian.org/debian-lts-announce/2019/12/msg00021.html
reference_id
reference_type
scores
url https://lists.debian.org/debian-lts-announce/2019/12/msg00021.html
9
reference_url https://www.debian.org/security/2018/dsa-4113
reference_id
reference_type
scores
url https://www.debian.org/security/2018/dsa-4113
10
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1499959
reference_id 1499959
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1499959
11
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=876778
reference_id 876778
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=876778
12
reference_url https://security.archlinux.org/ASA-201803-12
reference_id ASA-201803-12
reference_type
scores
url https://security.archlinux.org/ASA-201803-12
13
reference_url https://security.archlinux.org/ASA-201803-21
reference_id ASA-201803-21
reference_type
scores
url https://security.archlinux.org/ASA-201803-21
14
reference_url https://security.archlinux.org/AVG-367
reference_id AVG-367
reference_type
scores
0
value Critical
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-367
15
reference_url https://security.archlinux.org/AVG-658
reference_id AVG-658
reference_type
scores
0
value Critical
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-658
16
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xiph.org:libvorbis:1.3.5:*:*:*:*:*:*:*
reference_id cpe:2.3:a:xiph.org:libvorbis:1.3.5:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xiph.org:libvorbis:1.3.5:*:*:*:*:*:*:*
17
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:esm:*:*:*
reference_id cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:esm:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:esm:*:*:*
18
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*
reference_id cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*
19
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:canonical:ubuntu_linux:17.10:*:*:*:*:*:*:*
reference_id cpe:2.3:o:canonical:ubuntu_linux:17.10:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:canonical:ubuntu_linux:17.10:*:*:*:*:*:*:*
20
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*
reference_id cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*
21
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*
reference_id cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*
22
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*
reference_id cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*
23
reference_url https://nvd.nist.gov/vuln/detail/CVE-2017-14633
reference_id CVE-2017-14633
reference_type
scores
0
value 4.3
scoring_system cvssv2
scoring_elements AV:N/AC:M/Au:N/C:N/I:N/A:P
1
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
url https://nvd.nist.gov/vuln/detail/CVE-2017-14633
24
reference_url https://usn.ubuntu.com/3569-1/
reference_id USN-3569-1
reference_type
scores
url https://usn.ubuntu.com/3569-1/
fixed_packages
0
url pkg:deb/debian/libvorbis@1.3.5-4%2Bdeb9u2
purl pkg:deb/debian/libvorbis@1.3.5-4%2Bdeb9u2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-45n4-j354-v3c4
1
vulnerability VCID-6qp9-715s-8kdu
2
vulnerability VCID-fdue-dg92-13cp
3
vulnerability VCID-qvsc-tr3r-9fc9
4
vulnerability VCID-ukgq-ajbx-dug6
5
vulnerability VCID-wst6-s2k4-kkdj
6
vulnerability VCID-wvm2-2xak-5fbn
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/libvorbis@1.3.5-4%252Bdeb9u2
1
url pkg:deb/debian/libvorbis@1.3.6-2
purl pkg:deb/debian/libvorbis@1.3.6-2
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/libvorbis@1.3.6-2
aliases CVE-2017-14633
risk_score 4.5
exploitability 0.5
weighted_severity 9.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-wvm2-2xak-5fbn
Fixing_vulnerabilities
Risk_score10.0
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:deb/debian/libvorbis@1.3.4-2