Django REST framework

Package Instance

Lookup for vulnerable packages by Package URL.

Purlpkg:apk/alpine/asterisk@16.6.2-r0?arch=aarch64&distroversion=v3.22&reponame=main
Typeapk
Namespacealpine
Nameasterisk
Version16.6.2-r0
Qualifiers
arch aarch64
distroversion v3.22
reponame main
Subpath
Is_vulnerablefalse
Next_non_vulnerable_version18.0.1-r0
Latest_non_vulnerable_version20.11.1-r0
Affected_by_vulnerabilities
Fixing_vulnerabilities
0
url VCID-62p4-jvnj-8kfc
vulnerability_id VCID-62p4-jvnj-8kfc
summary An issue was discovered in channels/chan_sip.c in Sangoma Asterisk 13.x before 13.29.2, 16.x before 16.6.2, and 17.x before 17.0.1, and Certified Asterisk 13.21 before cert5. A SIP request can be sent to Asterisk that can change a SIP peer's IP address. A REGISTER does not need to occur, and calls can be hijacked as a result. The only thing that needs to be known is the peer's name; authentication details such as passwords do not need to be known. This vulnerability is only exploitable when the nat option is set to the default, or auto_force_rport.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2019-18790
reference_id
reference_type
scores
0
value 0.07372
scoring_system epss
scoring_elements 0.91905
published_at 2026-06-11T12:55:00Z
1
value 0.07372
scoring_system epss
scoring_elements 0.91932
published_at 2026-06-12T12:55:00Z
2
value 0.07372
scoring_system epss
scoring_elements 0.9194
published_at 2026-06-13T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2019-18790
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-18790
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-18790
2
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=947381
reference_id 947381
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=947381
fixed_packages
0
url pkg:apk/alpine/asterisk@16.6.2-r0?arch=aarch64&distroversion=v3.22&reponame=main
purl pkg:apk/alpine/asterisk@16.6.2-r0?arch=aarch64&distroversion=v3.22&reponame=main
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/asterisk@16.6.2-r0%3Farch=aarch64&distroversion=v3.22&reponame=main
aliases CVE-2019-18790
risk_score 0.1
exploitability 0.5
weighted_severity 0.1
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-62p4-jvnj-8kfc
1
url VCID-wcrz-h8xd-cbez
vulnerability_id VCID-wcrz-h8xd-cbez
summary An issue was discovered in manager.c in Sangoma Asterisk through 13.x, 16.x, 17.x and Certified Asterisk 13.21 through 13.21-cert4. A remote authenticated Asterisk Manager Interface (AMI) user without system authorization could use a specially crafted Originate AMI request to execute arbitrary system commands.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2019-18610
reference_id
reference_type
scores
0
value 0.41746
scoring_system epss
scoring_elements 0.97511
published_at 2026-06-11T12:55:00Z
1
value 0.41746
scoring_system epss
scoring_elements 0.9752
published_at 2026-06-12T12:55:00Z
2
value 0.41746
scoring_system epss
scoring_elements 0.97522
published_at 2026-06-13T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2019-18610
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-18610
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-18610
2
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=947377
reference_id 947377
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=947377
fixed_packages
0
url pkg:apk/alpine/asterisk@16.6.2-r0?arch=aarch64&distroversion=v3.22&reponame=main
purl pkg:apk/alpine/asterisk@16.6.2-r0?arch=aarch64&distroversion=v3.22&reponame=main
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/asterisk@16.6.2-r0%3Farch=aarch64&distroversion=v3.22&reponame=main
aliases CVE-2019-18610
risk_score 0.2
exploitability 0.5
weighted_severity 0.4
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-wcrz-h8xd-cbez
Risk_scorenull
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:apk/alpine/asterisk@16.6.2-r0%3Farch=aarch64&distroversion=v3.22&reponame=main