Django REST framework

Package Instance

Lookup for vulnerable packages by Package URL.

Purlpkg:apk/alpine/asterisk@16.3.0-r2?arch=armhf&distroversion=v3.10&reponame=main
Typeapk
Namespacealpine
Nameasterisk
Version16.3.0-r2
Qualifiers
arch armhf
distroversion v3.10
reponame main
Subpath
Is_vulnerablefalse
Next_non_vulnerable_version16.3.0-r3
Latest_non_vulnerable_version16.3.0-r3
Affected_by_vulnerabilities
Fixing_vulnerabilities
0
url VCID-cdyb-1ntz-63as
vulnerability_id VCID-cdyb-1ntz-63as
summary An issue was discovered in Asterisk Open Source through 13.27.0, 14.x and 15.x through 15.7.2, and 16.x through 16.4.0, and Certified Asterisk through 13.21-cert3. A pointer dereference in chan_sip while handling SDP negotiation allows an attacker to crash Asterisk when handling an SDP answer to an outgoing T.38 re-invite. To exploit this vulnerability an attacker must cause the chan_sip module to send a T.38 re-invite request to them. Upon receipt, the attacker must send an SDP answer containing both a T.38 UDPTL stream and another media stream containing only a codec (which is not permitted according to the chan_sip configuration).
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2019-13161
reference_id
reference_type
scores
0
value 0.02307
scoring_system epss
scoring_elements 0.8505
published_at 2026-06-04T12:55:00Z
1
value 0.02307
scoring_system epss
scoring_elements 0.85074
published_at 2026-06-05T12:55:00Z
2
value 0.02307
scoring_system epss
scoring_elements 0.85078
published_at 2026-06-06T12:55:00Z
3
value 0.02307
scoring_system epss
scoring_elements 0.85072
published_at 2026-06-07T12:55:00Z
4
value 0.02307
scoring_system epss
scoring_elements 0.85062
published_at 2026-06-08T12:55:00Z
5
value 0.02307
scoring_system epss
scoring_elements 0.85077
published_at 2026-06-09T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2019-13161
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-13161
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-13161
2
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=931981
reference_id 931981
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=931981
fixed_packages
0
url pkg:apk/alpine/asterisk@16.3.0-r2?arch=armhf&distroversion=v3.10&reponame=main
purl pkg:apk/alpine/asterisk@16.3.0-r2?arch=armhf&distroversion=v3.10&reponame=main
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/asterisk@16.3.0-r2%3Farch=armhf&distroversion=v3.10&reponame=main
aliases CVE-2019-13161
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-cdyb-1ntz-63as
1
url VCID-j37t-xmde-ybfz
vulnerability_id VCID-j37t-xmde-ybfz
summary Buffer overflow in res_pjsip_messaging in Digium Asterisk versions 13.21-cert3, 13.27.0, 15.7.2, 16.4.0 and earlier allows remote authenticated users to crash Asterisk by sending a specially crafted SIP MESSAGE message.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2019-12827
reference_id
reference_type
scores
0
value 0.18415
scoring_system epss
scoring_elements 0.95357
published_at 2026-06-04T12:55:00Z
1
value 0.18415
scoring_system epss
scoring_elements 0.95365
published_at 2026-06-05T12:55:00Z
2
value 0.18415
scoring_system epss
scoring_elements 0.95367
published_at 2026-06-06T12:55:00Z
3
value 0.18415
scoring_system epss
scoring_elements 0.9537
published_at 2026-06-08T12:55:00Z
4
value 0.18415
scoring_system epss
scoring_elements 0.95374
published_at 2026-06-09T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2019-12827
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12827
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12827
2
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=931980
reference_id 931980
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=931980
fixed_packages
0
url pkg:apk/alpine/asterisk@16.3.0-r2?arch=armhf&distroversion=v3.10&reponame=main
purl pkg:apk/alpine/asterisk@16.3.0-r2?arch=armhf&distroversion=v3.10&reponame=main
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/asterisk@16.3.0-r2%3Farch=armhf&distroversion=v3.10&reponame=main
aliases CVE-2019-12827
risk_score 0.1
exploitability 0.5
weighted_severity 0.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-j37t-xmde-ybfz
2
url VCID-uhwr-b373-a3bz
vulnerability_id VCID-uhwr-b373-a3bz
summary res_pjsip_t38 in Sangoma Asterisk 15.x before 15.7.4 and 16.x before 16.5.1 allows an attacker to trigger a crash by sending a declined stream in a response to a T.38 re-invite initiated by Asterisk. The crash occurs because of a NULL session media object dereference.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2019-15297
reference_id
reference_type
scores
0
value 0.02861
scoring_system epss
scoring_elements 0.8652
published_at 2026-06-04T12:55:00Z
1
value 0.02861
scoring_system epss
scoring_elements 0.86542
published_at 2026-06-05T12:55:00Z
2
value 0.02861
scoring_system epss
scoring_elements 0.86543
published_at 2026-06-06T12:55:00Z
3
value 0.02861
scoring_system epss
scoring_elements 0.86538
published_at 2026-06-07T12:55:00Z
4
value 0.02861
scoring_system epss
scoring_elements 0.86527
published_at 2026-06-08T12:55:00Z
5
value 0.02861
scoring_system epss
scoring_elements 0.8654
published_at 2026-06-09T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2019-15297
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-15297
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-15297
2
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=940060
reference_id 940060
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=940060
fixed_packages
0
url pkg:apk/alpine/asterisk@16.3.0-r2?arch=armhf&distroversion=v3.10&reponame=main
purl pkg:apk/alpine/asterisk@16.3.0-r2?arch=armhf&distroversion=v3.10&reponame=main
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/asterisk@16.3.0-r2%3Farch=armhf&distroversion=v3.10&reponame=main
aliases CVE-2019-15297
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-uhwr-b373-a3bz
Risk_scorenull
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:apk/alpine/asterisk@16.3.0-r2%3Farch=armhf&distroversion=v3.10&reponame=main