Django REST framework
Api Root
Package List
Package Instance
Format
json
api
admin
Package Instance
Lookup for vulnerable packages by Package URL.
Purl
pkg:deb/debian/checkinstall@1.6.2%2Bgit20170426.d24a630-2?distro=trixie
Type
deb
Namespace
debian
Name
checkinstall
Version
1.6.2+git20170426.d24a630-2
Qualifiers
distro
trixie
Subpath
Is_vulnerable
false
Next_non_vulnerable_version
1.6.2+git20170426.d24a630-3
Latest_non_vulnerable_version
1.6.2+git20170426.d24a630-5.1
Affected_by_vulnerabilities
Fixing_vulnerabilities
0
url
VCID-e7c1-q4cj-sycv
vulnerability_id
VCID-e7c1-q4cj-sycv
summary
Race condition in (1) checkinstall 1.6.1 and (2) installwatch allows local users to overwrite arbitrary files and have other impacts via symlink and possibly other attacks on temporary working directories.
references
0
reference_url
https://api.first.org/data/v1/epss?cve=CVE-2008-2958
reference_id
reference_type
scores
0
value
0.00051
scoring_system
epss
scoring_elements
0.16168
published_at
2026-06-11T12:55:00Z
url
https://api.first.org/data/v1/epss?cve=CVE-2008-2958
1
reference_url
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2958
reference_id
reference_type
scores
url
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2958
2
reference_url
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=488140
reference_id
488140
reference_type
scores
url
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=488140
fixed_packages
0
url
pkg:deb/debian/checkinstall@1.6.1-7?distro=trixie
purl
pkg:deb/debian/checkinstall@1.6.1-7?distro=trixie
is_vulnerable
false
affected_by_vulnerabilities
resource_url
http://public2.vulnerablecode.io/packages/pkg:deb/debian/checkinstall@1.6.1-7%3Fdistro=trixie
1
url
pkg:deb/debian/checkinstall@1.6.2%2Bgit20170426.d24a630-2?distro=trixie
purl
pkg:deb/debian/checkinstall@1.6.2%2Bgit20170426.d24a630-2?distro=trixie
is_vulnerable
false
affected_by_vulnerabilities
resource_url
http://public2.vulnerablecode.io/packages/pkg:deb/debian/checkinstall@1.6.2%252Bgit20170426.d24a630-2%3Fdistro=trixie
2
url
pkg:deb/debian/checkinstall@1.6.2%2Bgit20170426.d24a630-3?distro=trixie
purl
pkg:deb/debian/checkinstall@1.6.2%2Bgit20170426.d24a630-3?distro=trixie
is_vulnerable
false
affected_by_vulnerabilities
resource_url
http://public2.vulnerablecode.io/packages/pkg:deb/debian/checkinstall@1.6.2%252Bgit20170426.d24a630-3%3Fdistro=trixie
3
url
pkg:deb/debian/checkinstall@1.6.2%2Bgit20170426.d24a630-5.1?distro=trixie
purl
pkg:deb/debian/checkinstall@1.6.2%2Bgit20170426.d24a630-5.1?distro=trixie
is_vulnerable
false
affected_by_vulnerabilities
resource_url
http://public2.vulnerablecode.io/packages/pkg:deb/debian/checkinstall@1.6.2%252Bgit20170426.d24a630-5.1%3Fdistro=trixie
aliases
CVE-2008-2958
risk_score
null
exploitability
null
weighted_severity
null
resource_url
http://public2.vulnerablecode.io/vulnerabilities/VCID-e7c1-q4cj-sycv
Risk_score
null
Resource_url
http://public2.vulnerablecode.io/packages/pkg:deb/debian/checkinstall@1.6.2%252Bgit20170426.d24a630-2%3Fdistro=trixie
×
Create
None
×
Edit
None