Lookup for vulnerable packages by Package URL.

Purlpkg:apk/alpine/irssi@1.0.3-r0?arch=armhf&distroversion=v3.13&reponame=main
Typeapk
Namespacealpine
Nameirssi
Version1.0.3-r0
Qualifiers
arch armhf
distroversion v3.13
reponame main
Subpath
Is_vulnerablefalse
Next_non_vulnerable_version1.0.5-r0
Latest_non_vulnerable_version1.2.1-r0
Affected_by_vulnerabilities
Fixing_vulnerabilities
0
url VCID-7j1h-6a5m-aqfx
vulnerability_id VCID-7j1h-6a5m-aqfx
summary In Irssi before 1.0.3, when receiving certain incorrectly quoted DCC files, it tries to find the terminating quote one byte before the allocated memory. Thus, remote attackers might be able to cause a crash.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9469.json
reference_id
reference_type
scores
0
value 3.7
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9469.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2017-9469
reference_id
reference_type
scores
0
value 0.01364
scoring_system epss
scoring_elements 0.80518
published_at 2026-06-04T12:55:00Z
1
value 0.01364
scoring_system epss
scoring_elements 0.80544
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2017-9469
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9468
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9468
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9469
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9469
4
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1459457
reference_id 1459457
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1459457
5
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=864400
reference_id 864400
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=864400
6
reference_url https://security.archlinux.org/ASA-201706-11
reference_id ASA-201706-11
reference_type
scores
url https://security.archlinux.org/ASA-201706-11
7
reference_url https://security.archlinux.org/AVG-293
reference_id AVG-293
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-293
8
reference_url https://usn.ubuntu.com/3317-1/
reference_id USN-3317-1
reference_type
scores
url https://usn.ubuntu.com/3317-1/
fixed_packages
0
url pkg:apk/alpine/irssi@1.0.3-r0?arch=armhf&distroversion=v3.13&reponame=main
purl pkg:apk/alpine/irssi@1.0.3-r0?arch=armhf&distroversion=v3.13&reponame=main
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/irssi@1.0.3-r0%3Farch=armhf&distroversion=v3.13&reponame=main
aliases CVE-2017-9469
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-7j1h-6a5m-aqfx
1
url VCID-9z7g-bc6a-wbf6
vulnerability_id VCID-9z7g-bc6a-wbf6
summary In Irssi before 1.0.3, when receiving a DCC message without source nick/host, it attempts to dereference a NULL pointer. Thus, remote IRC servers can cause a crash.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9468.json
reference_id
reference_type
scores
0
value 3.7
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9468.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2017-9468
reference_id
reference_type
scores
0
value 0.00722
scoring_system epss
scoring_elements 0.72896
published_at 2026-06-04T12:55:00Z
1
value 0.00722
scoring_system epss
scoring_elements 0.72933
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2017-9468
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9468
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9468
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9469
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9469
4
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1459456
reference_id 1459456
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1459456
5
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=864400
reference_id 864400
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=864400
6
reference_url https://security.archlinux.org/ASA-201706-11
reference_id ASA-201706-11
reference_type
scores
url https://security.archlinux.org/ASA-201706-11
7
reference_url https://security.archlinux.org/AVG-293
reference_id AVG-293
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-293
8
reference_url https://usn.ubuntu.com/3317-1/
reference_id USN-3317-1
reference_type
scores
url https://usn.ubuntu.com/3317-1/
fixed_packages
0
url pkg:apk/alpine/irssi@1.0.3-r0?arch=armhf&distroversion=v3.13&reponame=main
purl pkg:apk/alpine/irssi@1.0.3-r0?arch=armhf&distroversion=v3.13&reponame=main
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/irssi@1.0.3-r0%3Farch=armhf&distroversion=v3.13&reponame=main
aliases CVE-2017-9468
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-9z7g-bc6a-wbf6
Risk_scorenull
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:apk/alpine/irssi@1.0.3-r0%3Farch=armhf&distroversion=v3.13&reponame=main