Lookup for vulnerable packages by Package URL.

Purlpkg:apk/alpine/curl@7.57.0-r0?arch=armhf&distroversion=v3.6&reponame=main
Typeapk
Namespacealpine
Namecurl
Version7.57.0-r0
Qualifiers
arch armhf
distroversion v3.6
reponame main
Subpath
Is_vulnerablefalse
Next_non_vulnerable_version7.58.0-r0
Latest_non_vulnerable_version7.61.1-r2
Affected_by_vulnerabilities
Fixing_vulnerabilities
0
url VCID-pmd1-casv-zuhe
vulnerability_id VCID-pmd1-casv-zuhe
summary SSL out of buffer access
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2017-8818
reference_id
reference_type
scores
0
value 0.00825
scoring_system epss
scoring_elements 0.74772
published_at 2026-05-30T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2017-8818
1
reference_url https://curl.se/docs/CVE-2017-8818.html
reference_id
reference_type
scores
0
value High
scoring_system cvssv3.1
scoring_elements
url https://curl.se/docs/CVE-2017-8818.html
2
reference_url https://security.archlinux.org/ASA-201711-36
reference_id ASA-201711-36
reference_type
scores
url https://security.archlinux.org/ASA-201711-36
3
reference_url https://security.archlinux.org/ASA-201711-37
reference_id ASA-201711-37
reference_type
scores
url https://security.archlinux.org/ASA-201711-37
4
reference_url https://security.archlinux.org/ASA-201711-38
reference_id ASA-201711-38
reference_type
scores
url https://security.archlinux.org/ASA-201711-38
5
reference_url https://security.archlinux.org/AVG-521
reference_id AVG-521
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-521
6
reference_url https://security.archlinux.org/AVG-522
reference_id AVG-522
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-522
7
reference_url https://security.archlinux.org/AVG-523
reference_id AVG-523
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-523
8
reference_url https://security.archlinux.org/AVG-527
reference_id AVG-527
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-527
9
reference_url https://security.archlinux.org/AVG-528
reference_id AVG-528
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-528
10
reference_url https://security.archlinux.org/AVG-529
reference_id AVG-529
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-529
11
reference_url https://security.gentoo.org/glsa/201712-04
reference_id GLSA-201712-04
reference_type
scores
url https://security.gentoo.org/glsa/201712-04
fixed_packages
0
url pkg:apk/alpine/curl@7.57.0-r0?arch=armhf&distroversion=v3.6&reponame=main
purl pkg:apk/alpine/curl@7.57.0-r0?arch=armhf&distroversion=v3.6&reponame=main
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/curl@7.57.0-r0%3Farch=armhf&distroversion=v3.6&reponame=main
aliases CVE-2017-8818
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-pmd1-casv-zuhe
1
url VCID-x6bb-299t-mfhx
vulnerability_id VCID-x6bb-299t-mfhx
summary FTP wildcard out of bounds read
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2017-8817
reference_id
reference_type
scores
0
value 0.00735
scoring_system epss
scoring_elements 0.73111
published_at 2026-05-30T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2017-8817
1
reference_url https://curl.se/docs/CVE-2017-8817.html
reference_id
reference_type
scores
0
value Medium
scoring_system cvssv3.1
scoring_elements
url https://curl.se/docs/CVE-2017-8817.html
2
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 4
scoring_system cvssv2
scoring_elements AV:N/AC:H/Au:N/C:P/I:P/A:N
1
value 4.2
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
3
reference_url http://www.securityfocus.com/bid/102057
reference_id 102057
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2026-04-15T20:59:34Z/
url http://www.securityfocus.com/bid/102057
4
reference_url http://www.securitytracker.com/id/1039897
reference_id 1039897
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2026-04-15T20:59:34Z/
url http://www.securitytracker.com/id/1039897
5
reference_url https://curl.haxx.se/docs/adv_2017-ae72.html
reference_id adv_2017-ae72.html
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2026-04-15T20:59:34Z/
url https://curl.haxx.se/docs/adv_2017-ae72.html
6
reference_url https://security.archlinux.org/ASA-201711-33
reference_id ASA-201711-33
reference_type
scores
url https://security.archlinux.org/ASA-201711-33
7
reference_url https://security.archlinux.org/ASA-201711-34
reference_id ASA-201711-34
reference_type
scores
url https://security.archlinux.org/ASA-201711-34
8
reference_url https://security.archlinux.org/ASA-201711-35
reference_id ASA-201711-35
reference_type
scores
url https://security.archlinux.org/ASA-201711-35
9
reference_url https://security.archlinux.org/ASA-201711-36
reference_id ASA-201711-36
reference_type
scores
url https://security.archlinux.org/ASA-201711-36
10
reference_url https://security.archlinux.org/ASA-201711-37
reference_id ASA-201711-37
reference_type
scores
url https://security.archlinux.org/ASA-201711-37
11
reference_url https://security.archlinux.org/ASA-201711-38
reference_id ASA-201711-38
reference_type
scores
url https://security.archlinux.org/ASA-201711-38
12
reference_url https://security.archlinux.org/AVG-521
reference_id AVG-521
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-521
13
reference_url https://security.archlinux.org/AVG-522
reference_id AVG-522
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-522
14
reference_url https://security.archlinux.org/AVG-523
reference_id AVG-523
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-523
15
reference_url https://security.archlinux.org/AVG-524
reference_id AVG-524
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-524
16
reference_url https://security.archlinux.org/AVG-525
reference_id AVG-525
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-525
17
reference_url https://security.archlinux.org/AVG-526
reference_id AVG-526
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-526
18
reference_url http://security.cucumberlinux.com/security/details.php?id=162
reference_id details.php?id=162
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2026-04-15T20:59:34Z/
url http://security.cucumberlinux.com/security/details.php?id=162
19
reference_url https://www.debian.org/security/2017/dsa-4051
reference_id dsa-4051
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2026-04-15T20:59:34Z/
url https://www.debian.org/security/2017/dsa-4051
20
reference_url https://security.gentoo.org/glsa/201712-04
reference_id GLSA-201712-04
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2026-04-15T20:59:34Z/
url https://security.gentoo.org/glsa/201712-04
21
reference_url https://lists.debian.org/debian-lts-announce/2017/11/msg00040.html
reference_id msg00040.html
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2026-04-15T20:59:34Z/
url https://lists.debian.org/debian-lts-announce/2017/11/msg00040.html
22
reference_url https://usn.ubuntu.com/3498-1/
reference_id USN-3498-1
reference_type
scores
url https://usn.ubuntu.com/3498-1/
23
reference_url https://usn.ubuntu.com/3498-2/
reference_id USN-3498-2
reference_type
scores
url https://usn.ubuntu.com/3498-2/
fixed_packages
0
url pkg:apk/alpine/curl@7.57.0-r0?arch=armhf&distroversion=v3.6&reponame=main
purl pkg:apk/alpine/curl@7.57.0-r0?arch=armhf&distroversion=v3.6&reponame=main
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/curl@7.57.0-r0%3Farch=armhf&distroversion=v3.6&reponame=main
aliases CVE-2017-8817
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-x6bb-299t-mfhx
Risk_scorenull
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:apk/alpine/curl@7.57.0-r0%3Farch=armhf&distroversion=v3.6&reponame=main