Lookup for vulnerable packages by Package URL.
| Purl | pkg:apk/alpine/libsndfile@1.0.28-r0?arch=armv7&distroversion=edge&reponame=main |
| Type | apk |
| Namespace | alpine |
| Name | libsndfile |
| Version | 1.0.28-r0 |
| Qualifiers |
| arch |
armv7 |
| distroversion |
edge |
| reponame |
main |
|
| Subpath | |
| Is_vulnerable | false |
| Next_non_vulnerable_version | 1.0.28-r1 |
| Latest_non_vulnerable_version | 1.2.2-r2 |
| Affected_by_vulnerabilities |
|
| Fixing_vulnerabilities |
| 0 |
| url |
VCID-eyhv-btvg-3kh6 |
| vulnerability_id |
VCID-eyhv-btvg-3kh6 |
| summary |
In libsndfile before 1.0.28, an error in the "flac_buffer_copy()" function (flac.c) can be exploited to cause a segmentation violation (with write memory access) via a specially crafted FLAC file during a resample attempt, a similar issue to CVE-2017-7585. |
| references |
| 0 |
|
| 1 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2017-7741 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.00417 |
| scoring_system |
epss |
| scoring_elements |
0.62064 |
| published_at |
2026-06-04T12:55:00Z |
|
| 1 |
| value |
0.00417 |
| scoring_system |
epss |
| scoring_elements |
0.6211 |
| published_at |
2026-06-09T12:55:00Z |
|
| 2 |
| value |
0.00417 |
| scoring_system |
epss |
| scoring_elements |
0.62108 |
| published_at |
2026-06-07T12:55:00Z |
|
| 3 |
| value |
0.00417 |
| scoring_system |
epss |
| scoring_elements |
0.62093 |
| published_at |
2026-06-08T12:55:00Z |
|
| 4 |
| value |
0.00417 |
| scoring_system |
epss |
| scoring_elements |
0.62113 |
| published_at |
2026-06-05T12:55:00Z |
|
| 5 |
| value |
0.00417 |
| scoring_system |
epss |
| scoring_elements |
0.6212 |
| published_at |
2026-06-06T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2017-7741 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
|
| fixed_packages |
|
| aliases |
CVE-2017-7741
|
| risk_score |
1.7 |
| exploitability |
0.5 |
| weighted_severity |
3.4 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-eyhv-btvg-3kh6 |
|
| 1 |
| url |
VCID-vqwv-3e5h-ybbn |
| vulnerability_id |
VCID-vqwv-3e5h-ybbn |
| summary |
In libsndfile before 1.0.28, an error in the "flac_buffer_copy()" function (flac.c) can be exploited to cause a segmentation violation (with read memory access) via a specially crafted FLAC file during a resample attempt, a similar issue to CVE-2017-7585. |
| references |
| 0 |
|
| 1 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2017-7742 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.00565 |
| scoring_system |
epss |
| scoring_elements |
0.68805 |
| published_at |
2026-06-04T12:55:00Z |
|
| 1 |
| value |
0.00565 |
| scoring_system |
epss |
| scoring_elements |
0.68849 |
| published_at |
2026-06-09T12:55:00Z |
|
| 2 |
| value |
0.00565 |
| scoring_system |
epss |
| scoring_elements |
0.68845 |
| published_at |
2026-06-07T12:55:00Z |
|
| 3 |
| value |
0.00565 |
| scoring_system |
epss |
| scoring_elements |
0.68829 |
| published_at |
2026-06-08T12:55:00Z |
|
| 4 |
| value |
0.00565 |
| scoring_system |
epss |
| scoring_elements |
0.68844 |
| published_at |
2026-06-05T12:55:00Z |
|
| 5 |
| value |
0.00565 |
| scoring_system |
epss |
| scoring_elements |
0.68852 |
| published_at |
2026-06-06T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2017-7742 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
| 7 |
|
|
| fixed_packages |
|
| aliases |
CVE-2017-7742
|
| risk_score |
1.7 |
| exploitability |
0.5 |
| weighted_severity |
3.4 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-vqwv-3e5h-ybbn |
|
| 2 |
| url |
VCID-zpzg-h8p6-abcs |
| vulnerability_id |
VCID-zpzg-h8p6-abcs |
| summary |
In libsndfile before 1.0.28, an error in the "flac_buffer_copy()" function (flac.c) can be exploited to cause a stack-based buffer overflow via a specially crafted FLAC file. |
| references |
| 0 |
|
| 1 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2017-7585 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.00242 |
| scoring_system |
epss |
| scoring_elements |
0.47678 |
| published_at |
2026-06-04T12:55:00Z |
|
| 1 |
| value |
0.00242 |
| scoring_system |
epss |
| scoring_elements |
0.47708 |
| published_at |
2026-06-09T12:55:00Z |
|
| 2 |
| value |
0.00242 |
| scoring_system |
epss |
| scoring_elements |
0.47725 |
| published_at |
2026-06-07T12:55:00Z |
|
| 3 |
| value |
0.00242 |
| scoring_system |
epss |
| scoring_elements |
0.47696 |
| published_at |
2026-06-08T12:55:00Z |
|
| 4 |
| value |
0.00242 |
| scoring_system |
epss |
| scoring_elements |
0.47742 |
| published_at |
2026-06-05T12:55:00Z |
|
| 5 |
| value |
0.00242 |
| scoring_system |
epss |
| scoring_elements |
0.47743 |
| published_at |
2026-06-06T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2017-7585 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
|
| fixed_packages |
|
| aliases |
CVE-2017-7585
|
| risk_score |
1.8 |
| exploitability |
0.5 |
| weighted_severity |
3.6 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-zpzg-h8p6-abcs |
|
|
| Risk_score | null |
| Resource_url | http://public2.vulnerablecode.io/packages/pkg:apk/alpine/libsndfile@1.0.28-r0%3Farch=armv7&distroversion=edge&reponame=main |