Django REST framework

Package Instance

Lookup for vulnerable packages by Package URL.

Purlpkg:deb/debian/sosreport@3.2-2?distro=bullseye
Typedeb
Namespacedebian
Namesosreport
Version3.2-2
Qualifiers
distro bullseye
Subpath
Is_vulnerablefalse
Next_non_vulnerable_version3.2+git276-g7da50d6-3
Latest_non_vulnerable_version4.0-2
Affected_by_vulnerabilities
Fixing_vulnerabilities
0
url VCID-aad7-fh68-37bd
vulnerability_id VCID-aad7-fh68-37bd
summary sosreport 3.2 uses weak permissions for generated sosreport archives, which allows local users with access to /var/tmp/ to obtain sensitive information by reading the contents of the archive.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3171.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3171.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2015-3171
reference_id
reference_type
scores
0
value 0.00037
scoring_system epss
scoring_elements 0.11296
published_at 2026-06-07T12:55:00Z
1
value 0.00037
scoring_system epss
scoring_elements 0.11228
published_at 2026-06-09T12:55:00Z
2
value 0.00037
scoring_system epss
scoring_elements 0.11213
published_at 2026-06-08T12:55:00Z
3
value 0.00037
scoring_system epss
scoring_elements 0.11249
published_at 2026-06-04T12:55:00Z
4
value 0.00037
scoring_system epss
scoring_elements 0.11329
published_at 2026-06-06T12:55:00Z
5
value 0.00037
scoring_system epss
scoring_elements 0.11337
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2015-3171
2
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1218658
reference_id
reference_type
scores
0
value 5.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://bugzilla.redhat.com/show_bug.cgi?id=1218658
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3171
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3171
4
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/sosreport/PYSEC-2017-72.yaml
reference_id
reference_type
scores
0
value 5.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/pypa/advisory-database/tree/main/vulns/sosreport/PYSEC-2017-72.yaml
5
reference_url https://github.com/sosreport/sos
reference_id
reference_type
scores
0
value 5.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/sosreport/sos
6
reference_url https://github.com/sosreport/sos/commit/d7759d3ddae5fe99a340c88a1d370d65cfa73fd6
reference_id
reference_type
scores
0
value 5.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/sosreport/sos/commit/d7759d3ddae5fe99a340c88a1d370d65cfa73fd6
7
reference_url https://github.com/sosreport/sos/issues/425
reference_id
reference_type
scores
0
value 5.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/sosreport/sos/issues/425
8
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=769521
reference_id 769521
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=769521
9
reference_url https://nvd.nist.gov/vuln/detail/CVE-2015-3171
reference_id CVE-2015-3171
reference_type
scores
0
value 5.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2015-3171
10
reference_url https://github.com/advisories/GHSA-gw46-8559-cggp
reference_id GHSA-gw46-8559-cggp
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-gw46-8559-cggp
fixed_packages
0
url pkg:deb/debian/sosreport@3.2-2?distro=bullseye
purl pkg:deb/debian/sosreport@3.2-2?distro=bullseye
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/sosreport@3.2-2%3Fdistro=bullseye
1
url pkg:deb/debian/sosreport@4.0-2?distro=bullseye
purl pkg:deb/debian/sosreport@4.0-2?distro=bullseye
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/sosreport@4.0-2%3Fdistro=bullseye
aliases CVE-2015-3171, GHSA-gw46-8559-cggp, PYSEC-2017-72
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-aad7-fh68-37bd
Risk_scorenull
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:deb/debian/sosreport@3.2-2%3Fdistro=bullseye