Lookup for vulnerable packages by Package URL.

Purlpkg:deb/debian/stunnel@3:5.78-4?distro=sid
Typedeb
Namespacedebian
Namestunnel
Version3:5.78-4
Qualifiers
distro sid
Subpath
Is_vulnerablefalse
Next_non_vulnerable_versionnull
Latest_non_vulnerable_versionnull
Affected_by_vulnerabilities
Fixing_vulnerabilities
0
url VCID-28d1-mcra-hqhu
vulnerability_id VCID-28d1-mcra-hqhu
summary stunnel 4.0.3 and earlier allows attackers to cause a denial of service (crash) via SIGCHLD signal handler race conditions that cause an inconsistency in the child counter.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2002-1563.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2002-1563.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2002-1563
reference_id
reference_type
scores
0
value 0.00083
scoring_system epss
scoring_elements 0.24287
published_at 2026-06-04T12:55:00Z
1
value 0.00083
scoring_system epss
scoring_elements 0.24387
published_at 2026-06-05T12:55:00Z
2
value 0.00083
scoring_system epss
scoring_elements 0.24368
published_at 2026-06-06T12:55:00Z
3
value 0.00083
scoring_system epss
scoring_elements 0.24313
published_at 2026-06-07T12:55:00Z
4
value 0.00083
scoring_system epss
scoring_elements 0.24253
published_at 2026-06-08T12:55:00Z
5
value 0.00083
scoring_system epss
scoring_elements 0.24261
published_at 2026-06-09T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2002-1563
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-1563
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-1563
3
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1616922
reference_id 1616922
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1616922
4
reference_url https://access.redhat.com/errata/RHSA-2003:221
reference_id RHSA-2003:221
reference_type
scores
url https://access.redhat.com/errata/RHSA-2003:221
5
reference_url https://access.redhat.com/errata/RHSA-2003:223
reference_id RHSA-2003:223
reference_type
scores
url https://access.redhat.com/errata/RHSA-2003:223
6
reference_url https://access.redhat.com/errata/RHSA-2003:296
reference_id RHSA-2003:296
reference_type
scores
url https://access.redhat.com/errata/RHSA-2003:296
fixed_packages
0
url pkg:deb/debian/stunnel@2:3.24-1?distro=sid
purl pkg:deb/debian/stunnel@2:3.24-1?distro=sid
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/stunnel@2:3.24-1%3Fdistro=sid
1
url pkg:deb/debian/stunnel@3:5.78-4?distro=sid
purl pkg:deb/debian/stunnel@3:5.78-4?distro=sid
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/stunnel@3:5.78-4%3Fdistro=sid
aliases CVE-2002-1563
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-28d1-mcra-hqhu
1
url VCID-z7ec-9s3a-m3bb
vulnerability_id VCID-z7ec-9s3a-m3bb
summary Stunnel 4.00, and 3.24 and earlier, leaks a privileged file descriptor returned by listen(), which allows local users to hijack the Stunnel server.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2003-0740.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2003-0740.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2003-0740
reference_id
reference_type
scores
0
value 0.00116
scoring_system epss
scoring_elements 0.29905
published_at 2026-06-04T12:55:00Z
1
value 0.00116
scoring_system epss
scoring_elements 0.29973
published_at 2026-06-05T12:55:00Z
2
value 0.00116
scoring_system epss
scoring_elements 0.29935
published_at 2026-06-06T12:55:00Z
3
value 0.00116
scoring_system epss
scoring_elements 0.29904
published_at 2026-06-07T12:55:00Z
4
value 0.00116
scoring_system epss
scoring_elements 0.29877
published_at 2026-06-08T12:55:00Z
5
value 0.00116
scoring_system epss
scoring_elements 0.2989
published_at 2026-06-09T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2003-0740
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0740
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0740
3
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1617077
reference_id 1617077
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1617077
4
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=278942
reference_id 278942
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=278942
5
reference_url https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/linux/local/91.c
reference_id OSVDB-6451;CVE-2003-0740
reference_type exploit
scores
url https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/linux/local/91.c
6
reference_url https://access.redhat.com/errata/RHSA-2003:296
reference_id RHSA-2003:296
reference_type
scores
url https://access.redhat.com/errata/RHSA-2003:296
7
reference_url https://access.redhat.com/errata/RHSA-2003:297
reference_id RHSA-2003:297
reference_type
scores
url https://access.redhat.com/errata/RHSA-2003:297
fixed_packages
0
url pkg:deb/debian/stunnel@2:3.26?distro=sid
purl pkg:deb/debian/stunnel@2:3.26?distro=sid
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/stunnel@2:3.26%3Fdistro=sid
1
url pkg:deb/debian/stunnel@3:5.78-4?distro=sid
purl pkg:deb/debian/stunnel@3:5.78-4?distro=sid
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/stunnel@3:5.78-4%3Fdistro=sid
aliases CVE-2003-0740
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-z7ec-9s3a-m3bb
Risk_scorenull
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:deb/debian/stunnel@3:5.78-4%3Fdistro=sid