Package Instance
Lookup for vulnerable packages by Package URL.
GET /api/packages/129913?format=api
{ "url": "http://public2.vulnerablecode.io/api/packages/129913?format=api", "purl": "pkg:apk/alpine/qemu@2.8.1-r1?arch=armv7&distroversion=v3.19&reponame=community", "type": "apk", "namespace": "alpine", "name": "qemu", "version": "2.8.1-r1", "qualifiers": { "arch": "armv7", "distroversion": "v3.19", "reponame": "community" }, "subpath": "", "is_vulnerable": false, "next_non_vulnerable_version": "4.2.0-r0", "latest_non_vulnerable_version": "8.0.2-r1", "affected_by_vulnerabilities": [], "fixing_vulnerabilities": [ { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/1949?format=api", "vulnerability_id": "VCID-1bjz-hx6f-53ch", "summary": "", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2016-8578", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00075", "scoring_system": "epss", "scoring_elements": "0.22644", "published_at": "2026-06-11T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2016-8578" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8578", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8578" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.4", "scoring_system": "cvssv2", "scoring_elements": "AV:L/AC:M/Au:S/C:N/I:N/A:C" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=840340", "reference_id": "840340", "reference_type": "", "scores": [], "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=840340" }, { "reference_url": "https://security.gentoo.org/glsa/201611-11", "reference_id": "GLSA-201611-11", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/201611-11" }, { "reference_url": "https://usn.ubuntu.com/3125-1/", "reference_id": "USN-3125-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/3125-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/129913?format=api", "purl": "pkg:apk/alpine/qemu@2.8.1-r1?arch=armv7&distroversion=v3.19&reponame=community", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/qemu@2.8.1-r1%3Farch=armv7&distroversion=v3.19&reponame=community" } ], "aliases": [ "CVE-2016-8578" ], "risk_score": null, "exploitability": null, "weighted_severity": null, "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-1bjz-hx6f-53ch" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/2051?format=api", "vulnerability_id": "VCID-5159-2qgf-9ygh", "summary": "", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2016-9105", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00099", "scoring_system": "epss", "scoring_elements": "0.27055", "published_at": "2026-06-11T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2016-9105" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9105", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9105" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "1.5", "scoring_system": "cvssv2", "scoring_elements": "AV:L/AC:M/Au:S/C:P/I:N/A:N" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=842463", "reference_id": "842463", "reference_type": "", "scores": [], "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=842463" }, { "reference_url": "https://security.gentoo.org/glsa/201611-11", "reference_id": "GLSA-201611-11", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/201611-11" }, { "reference_url": "https://usn.ubuntu.com/3125-1/", "reference_id": "USN-3125-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/3125-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/129913?format=api", "purl": "pkg:apk/alpine/qemu@2.8.1-r1?arch=armv7&distroversion=v3.19&reponame=community", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/qemu@2.8.1-r1%3Farch=armv7&distroversion=v3.19&reponame=community" } ], "aliases": [ "CVE-2016-9105" ], "risk_score": null, "exploitability": null, "weighted_severity": null, "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-5159-2qgf-9ygh" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/1947?format=api", "vulnerability_id": "VCID-71u1-y8h7-43h7", "summary": "", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2016-8576", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00098", "scoring_system": "epss", "scoring_elements": "0.26934", "published_at": "2026-06-11T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2016-8576" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8576", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8576" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.4", "scoring_system": "cvssv2", "scoring_elements": "AV:L/AC:M/Au:S/C:N/I:N/A:C" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=840343", "reference_id": "840343", "reference_type": "", "scores": [], "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=840343" }, { "reference_url": "https://security.gentoo.org/glsa/201611-11", "reference_id": "GLSA-201611-11", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/201611-11" }, { "reference_url": "https://usn.ubuntu.com/3125-1/", "reference_id": "USN-3125-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/3125-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/129913?format=api", "purl": "pkg:apk/alpine/qemu@2.8.1-r1?arch=armv7&distroversion=v3.19&reponame=community", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/qemu@2.8.1-r1%3Farch=armv7&distroversion=v3.19&reponame=community" } ], "aliases": [ "CVE-2016-8576" ], "risk_score": null, "exploitability": null, "weighted_severity": null, "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-71u1-y8h7-43h7" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/3675?format=api", "vulnerability_id": "VCID-9dt7-46gp-pycf", "summary": "", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2017-5898", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00059", "scoring_system": "epss", "scoring_elements": "0.18799", "published_at": "2026-06-11T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2017-5898" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5898", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5898" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "3.8", "scoring_system": "cvssv2", "scoring_elements": "AV:A/AC:M/Au:S/C:N/I:P/A:P" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=854729", "reference_id": "854729", "reference_type": "", "scores": [], "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=854729" }, { "reference_url": "https://security.gentoo.org/glsa/201702-28", "reference_id": "GLSA-201702-28", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/201702-28" }, { "reference_url": "https://usn.ubuntu.com/3261-1/", "reference_id": "USN-3261-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/3261-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/129913?format=api", "purl": "pkg:apk/alpine/qemu@2.8.1-r1?arch=armv7&distroversion=v3.19&reponame=community", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/qemu@2.8.1-r1%3Farch=armv7&distroversion=v3.19&reponame=community" } ], "aliases": [ "CVE-2017-5898" ], "risk_score": null, "exploitability": null, "weighted_severity": null, "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-9dt7-46gp-pycf" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/3629?format=api", "vulnerability_id": "VCID-b2qr-3zxs-jfhg", "summary": "", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2017-5552", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.0012", "scoring_system": "epss", "scoring_elements": "0.30507", "published_at": "2026-06-11T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2017-5552" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5552", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5552" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "2.3", "scoring_system": "cvssv2", "scoring_elements": "AV:A/AC:M/Au:S/C:N/I:N/A:P" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=852119", "reference_id": "852119", "reference_type": "", "scores": [], "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=852119" }, { "reference_url": "https://security.gentoo.org/glsa/201702-28", "reference_id": "GLSA-201702-28", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/201702-28" }, { "reference_url": "https://usn.ubuntu.com/3261-1/", "reference_id": "USN-3261-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/3261-1/" }, { "reference_url": "https://usn.ubuntu.com/3268-1/", "reference_id": "USN-3268-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/3268-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/129913?format=api", "purl": "pkg:apk/alpine/qemu@2.8.1-r1?arch=armv7&distroversion=v3.19&reponame=community", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/qemu@2.8.1-r1%3Farch=armv7&distroversion=v3.19&reponame=community" } ], "aliases": [ "CVE-2017-5552" ], "risk_score": null, "exploitability": null, "weighted_severity": null, "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-b2qr-3zxs-jfhg" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/3670?format=api", "vulnerability_id": "VCID-fetu-2a4z-1kba", "summary": "", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2017-5857", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00074", "scoring_system": "epss", "scoring_elements": "0.22533", "published_at": "2026-06-11T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2017-5857" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5857", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5857" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "2.3", "scoring_system": "cvssv2", "scoring_elements": "AV:A/AC:M/Au:S/C:N/I:N/A:P" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=853996", "reference_id": "853996", "reference_type": "", "scores": [], "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=853996" }, { "reference_url": "https://security.gentoo.org/glsa/201702-28", "reference_id": "GLSA-201702-28", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/201702-28" }, { "reference_url": "https://usn.ubuntu.com/3261-1/", "reference_id": "USN-3261-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/3261-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/129913?format=api", "purl": "pkg:apk/alpine/qemu@2.8.1-r1?arch=armv7&distroversion=v3.19&reponame=community", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/qemu@2.8.1-r1%3Farch=armv7&distroversion=v3.19&reponame=community" } ], "aliases": [ "CVE-2017-5857" ], "risk_score": null, "exploitability": null, "weighted_severity": null, "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-fetu-2a4z-1kba" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/1948?format=api", "vulnerability_id": "VCID-kdpc-9e93-juha", "summary": "", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2016-8577", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00075", "scoring_system": "epss", "scoring_elements": "0.22644", "published_at": "2026-06-11T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2016-8577" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8577", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8577" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.4", "scoring_system": "cvssv2", "scoring_elements": "AV:L/AC:M/Au:S/C:N/I:N/A:C" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=840341", "reference_id": "840341", "reference_type": "", "scores": [], "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=840341" }, { "reference_url": "https://security.gentoo.org/glsa/201611-11", "reference_id": "GLSA-201611-11", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/201611-11" }, { "reference_url": "https://usn.ubuntu.com/3125-1/", "reference_id": "USN-3125-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/3125-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/129913?format=api", "purl": "pkg:apk/alpine/qemu@2.8.1-r1?arch=armv7&distroversion=v3.19&reponame=community", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/qemu@2.8.1-r1%3Farch=armv7&distroversion=v3.19&reponame=community" } ], "aliases": [ "CVE-2016-8577" ], "risk_score": null, "exploitability": null, "weighted_severity": null, "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-kdpc-9e93-juha" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/3358?format=api", "vulnerability_id": "VCID-nm1d-bmze-sbat", "summary": "", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2017-2620", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.0241", "scoring_system": "epss", "scoring_elements": "0.85424", "published_at": "2026-06-11T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2017-2620" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-2620", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-2620" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.9", "scoring_system": "cvssv2", "scoring_elements": "AV:A/AC:M/Au:S/C:P/I:P/A:P" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=855791", "reference_id": "855791", "reference_type": "", "scores": [], "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=855791" }, { "reference_url": "https://security.gentoo.org/glsa/201703-07", "reference_id": "GLSA-201703-07", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/201703-07" }, { "reference_url": "https://security.gentoo.org/glsa/201704-01", "reference_id": "GLSA-201704-01", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/201704-01" }, { "reference_url": "https://usn.ubuntu.com/3261-1/", "reference_id": "USN-3261-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/3261-1/" }, { "reference_url": "https://xenbits.xen.org/xsa/advisory-209.html", "reference_id": "XSA-209", "reference_type": "", "scores": [], "url": "https://xenbits.xen.org/xsa/advisory-209.html" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/129913?format=api", "purl": "pkg:apk/alpine/qemu@2.8.1-r1?arch=armv7&distroversion=v3.19&reponame=community", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/qemu@2.8.1-r1%3Farch=armv7&distroversion=v3.19&reponame=community" } ], "aliases": [ "CVE-2017-2620", "XSA-209" ], "risk_score": null, "exploitability": null, "weighted_severity": null, "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-nm1d-bmze-sbat" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/3646?format=api", "vulnerability_id": "VCID-rrea-qgvd-mubv", "summary": "", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2017-5667", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00136", "scoring_system": "epss", "scoring_elements": "0.33314", "published_at": "2026-06-11T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2017-5667" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5667", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5667" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.9", "scoring_system": "cvssv2", "scoring_elements": "AV:A/AC:M/Au:S/C:P/I:P/A:P" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=853996", "reference_id": "853996", "reference_type": "", "scores": [], "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=853996" }, { "reference_url": "https://security.gentoo.org/glsa/201702-28", "reference_id": "GLSA-201702-28", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/201702-28" }, { "reference_url": "https://usn.ubuntu.com/3261-1/", "reference_id": "USN-3261-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/3261-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/129913?format=api", "purl": "pkg:apk/alpine/qemu@2.8.1-r1?arch=armv7&distroversion=v3.19&reponame=community", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/qemu@2.8.1-r1%3Farch=armv7&distroversion=v3.19&reponame=community" } ], "aliases": [ "CVE-2017-5667" ], "risk_score": null, "exploitability": null, "weighted_severity": null, "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-rrea-qgvd-mubv" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/204563?format=api", "vulnerability_id": "VCID-s5rs-u1yy-1qfw", "summary": "Memory leak in the ehci_process_itd function in hw/usb/hcd-ehci.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (memory consumption) via a large number of crafted buffer page select (PG) indexes.", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2016-7995", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00102", "scoring_system": "epss", "scoring_elements": "0.27462", "published_at": "2026-06-11T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2016-7995" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7995", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7995" }, { "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=840236", "reference_id": "840236", "reference_type": "", "scores": [], "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=840236" }, { "reference_url": "https://usn.ubuntu.com/3125-1/", "reference_id": "USN-3125-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/3125-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/129913?format=api", "purl": "pkg:apk/alpine/qemu@2.8.1-r1?arch=armv7&distroversion=v3.19&reponame=community", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/qemu@2.8.1-r1%3Farch=armv7&distroversion=v3.19&reponame=community" } ], "aliases": [ "CVE-2016-7995" ], "risk_score": null, "exploitability": null, "weighted_severity": null, "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-s5rs-u1yy-1qfw" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/3632?format=api", "vulnerability_id": "VCID-svu9-fhdw-9ue2", "summary": "", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2017-5579", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00063", "scoring_system": "epss", "scoring_elements": "0.19733", "published_at": "2026-06-11T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2017-5579" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5579", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5579" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "2.3", "scoring_system": "cvssv2", "scoring_elements": "AV:A/AC:M/Au:S/C:N/I:N/A:P" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=853002", "reference_id": "853002", "reference_type": "", "scores": [], "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=853002" }, { "reference_url": "https://security.gentoo.org/glsa/201702-28", "reference_id": "GLSA-201702-28", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/201702-28" }, { "reference_url": "https://usn.ubuntu.com/3261-1/", "reference_id": "USN-3261-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/3261-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/129913?format=api", "purl": "pkg:apk/alpine/qemu@2.8.1-r1?arch=armv7&distroversion=v3.19&reponame=community", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/qemu@2.8.1-r1%3Farch=armv7&distroversion=v3.19&reponame=community" } ], "aliases": [ "CVE-2017-5579" ], "risk_score": null, "exploitability": null, "weighted_severity": null, "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-svu9-fhdw-9ue2" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/2023?format=api", "vulnerability_id": "VCID-xex5-r1tx-tbgj", "summary": "", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2016-8909", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00099", "scoring_system": "epss", "scoring_elements": "0.27029", "published_at": "2026-06-11T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2016-8909" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8909", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8909" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "2.1", "scoring_system": "cvssv2", "scoring_elements": "AV:N/AC:H/Au:S/C:N/I:N/A:P" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=841950", "reference_id": "841950", "reference_type": "", "scores": [], "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=841950" }, { "reference_url": "https://security.gentoo.org/glsa/201611-11", "reference_id": "GLSA-201611-11", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/201611-11" }, { "reference_url": "https://usn.ubuntu.com/3125-1/", "reference_id": "USN-3125-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/3125-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/129913?format=api", "purl": "pkg:apk/alpine/qemu@2.8.1-r1?arch=armv7&distroversion=v3.19&reponame=community", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/qemu@2.8.1-r1%3Farch=armv7&distroversion=v3.19&reponame=community" } ], "aliases": [ "CVE-2016-8909" ], "risk_score": null, "exploitability": null, "weighted_severity": null, "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-xex5-r1tx-tbgj" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/2049?format=api", "vulnerability_id": "VCID-yja2-4mfn-47dy", "summary": "", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2016-9103", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.0008", "scoring_system": "epss", "scoring_elements": "0.23729", "published_at": "2026-06-11T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2016-9103" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9103", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9103" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "1.5", "scoring_system": "cvssv2", "scoring_elements": "AV:L/AC:M/Au:S/C:P/I:N/A:N" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=842463", "reference_id": "842463", "reference_type": "", "scores": [], "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=842463" }, { "reference_url": "https://security.gentoo.org/glsa/201611-11", "reference_id": "GLSA-201611-11", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/201611-11" }, { "reference_url": "https://usn.ubuntu.com/3125-1/", "reference_id": "USN-3125-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/3125-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/129913?format=api", "purl": "pkg:apk/alpine/qemu@2.8.1-r1?arch=armv7&distroversion=v3.19&reponame=community", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/qemu@2.8.1-r1%3Farch=armv7&distroversion=v3.19&reponame=community" } ], "aliases": [ "CVE-2016-9103" ], "risk_score": null, "exploitability": null, "weighted_severity": null, "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-yja2-4mfn-47dy" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/2048?format=api", "vulnerability_id": "VCID-z1b3-wvuy-hya4", "summary": "", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2016-9102", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.0008", "scoring_system": "epss", "scoring_elements": "0.23587", "published_at": "2026-06-11T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2016-9102" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9102", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9102" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "1.5", "scoring_system": "cvssv2", "scoring_elements": "AV:L/AC:M/Au:S/C:N/I:N/A:P" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=842463", "reference_id": "842463", "reference_type": "", "scores": [], "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=842463" }, { "reference_url": "https://security.gentoo.org/glsa/201611-11", "reference_id": "GLSA-201611-11", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/201611-11" }, { "reference_url": "https://usn.ubuntu.com/3125-1/", "reference_id": "USN-3125-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/3125-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/129913?format=api", "purl": "pkg:apk/alpine/qemu@2.8.1-r1?arch=armv7&distroversion=v3.19&reponame=community", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/qemu@2.8.1-r1%3Farch=armv7&distroversion=v3.19&reponame=community" } ], "aliases": [ "CVE-2016-9102" ], "risk_score": null, "exploitability": null, "weighted_severity": null, "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-z1b3-wvuy-hya4" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/180512?format=api", "vulnerability_id": "VCID-z6sp-h1tj-dqbx", "summary": "Multiple vulnerabilities have been found in QEMU, the worst of\n which could lead to the execution of arbitrary code on the host system.", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2017-5931", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00072", "scoring_system": "epss", "scoring_elements": "0.2201", "published_at": "2026-06-11T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2017-5931" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5931", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5931" }, { "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=854730", "reference_id": "854730", "reference_type": "", "scores": [], "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=854730" }, { "reference_url": "https://security.gentoo.org/glsa/201702-28", "reference_id": "GLSA-201702-28", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/201702-28" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/129913?format=api", "purl": "pkg:apk/alpine/qemu@2.8.1-r1?arch=armv7&distroversion=v3.19&reponame=community", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/qemu@2.8.1-r1%3Farch=armv7&distroversion=v3.19&reponame=community" } ], "aliases": [ "CVE-2017-5931" ], "risk_score": null, "exploitability": null, "weighted_severity": null, "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-z6sp-h1tj-dqbx" } ], "risk_score": null, "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/qemu@2.8.1-r1%3Farch=armv7&distroversion=v3.19&reponame=community" }