Django REST framework

Lookup for vulnerable packages by Package URL.

Purl pkg:apk/alpine/openrc@0.44.6-r1?arch=x86_64&distroversion=v3.18&reponame=main

Type apk

Namespace alpine

Name openrc

Version 0.44.6-r1

Qualifiers

arch	x86_64
distroversion	v3.18
reponame	main

Subpath

Is_vulnerable false

Next_non_vulnerable_version null

Latest_non_vulnerable_version null

Affected_by_vulnerabilities

Fixing_vulnerabilities

url VCID-hkcu-13e3-1bex

vulnerability_id VCID-hkcu-13e3-1bex

summary checkpath in OpenRC before 0.44.7 uses the direct output of strlen() to allocate strings, which does not account for the '\0' byte at the end of the string. This results in memory corruption. CVE-2021-42341 was introduced in git commit 63db2d99e730547339d1bdd28e8437999c380cae, which was introduced as part of OpenRC 0.44.0 development.

references

reference_url

https://api.first.org/data/v1/epss?cve=CVE-2021-42341

reference_id

reference_type

scores

value	0.01546
scoring_system	epss
scoring_elements	0.81722
published_at	2026-06-04T12:55:00Z

value	0.01546
scoring_system	epss
scoring_elements	0.81753
published_at	2026-06-06T12:55:00Z

value	0.01546
scoring_system	epss
scoring_elements	0.81754
published_at	2026-06-07T12:55:00Z

value	0.01546
scoring_system	epss
scoring_elements	0.81747
published_at	2026-06-08T12:55:00Z

value	0.01546
scoring_system	epss
scoring_elements	0.81762
published_at	2026-06-09T12:55:00Z

url

https://api.first.org/data/v1/epss?cve=CVE-2021-42341

fixed_packages

url	pkg:apk/alpine/openrc@0.44.6-r1?arch=x86_64&distroversion=v3.18&reponame=main
purl	pkg:apk/alpine/openrc@0.44.6-r1?arch=x86_64&distroversion=v3.18&reponame=main
is_vulnerable	`false`
affected_by_vulnerabilities
resource_url	http://public2.vulnerablecode.io/packages/pkg:apk/alpine/openrc@0.44.6-r1%3Farch=x86_64&distroversion=v3.18&reponame=main

aliases CVE-2021-42341

risk_score null

exploitability null

weighted_severity null

resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-hkcu-13e3-1bex

Risk_score null

Resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/openrc@0.44.6-r1%3Farch=x86_64&distroversion=v3.18&reponame=main

Package Instance