Lookup for vulnerable packages by Package URL.

Purlpkg:deb/debian/google-authenticator@20250213-1.11-0.1?distro=trixie
Typedeb
Namespacedebian
Namegoogle-authenticator
Version20250213-1.11-0.1
Qualifiers
distro trixie
Subpath
Is_vulnerablefalse
Next_non_vulnerable_versionnull
Latest_non_vulnerable_versionnull
Affected_by_vulnerabilities
Fixing_vulnerabilities
0
url VCID-zufh-6mej-xfe9
vulnerability_id VCID-zufh-6mej-xfe9
summary pam_google_authenticator.c in the PAM module in Google Authenticator before 1.0 requires user-readable permissions for the secret file, which allows local users to bypass intended access restrictions and discover a shared secret via standard filesystem operations, a different vulnerability than CVE-2013-0258.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2012-6140
reference_id
reference_type
scores
0
value 0.00026
scoring_system epss
scoring_elements 0.07751
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2012-6140
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-6140
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-6140
2
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=666129
reference_id 666129
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=666129
fixed_packages
0
url pkg:deb/debian/google-authenticator@20130529-1?distro=trixie
purl pkg:deb/debian/google-authenticator@20130529-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/google-authenticator@20130529-1%3Fdistro=trixie
1
url pkg:deb/debian/google-authenticator@20191231-2?distro=trixie
purl pkg:deb/debian/google-authenticator@20191231-2?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/google-authenticator@20191231-2%3Fdistro=trixie
2
url pkg:deb/debian/google-authenticator@20191231-2.1?distro=trixie
purl pkg:deb/debian/google-authenticator@20191231-2.1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/google-authenticator@20191231-2.1%3Fdistro=trixie
3
url pkg:deb/debian/google-authenticator@20250213-1.11-0.1?distro=trixie
purl pkg:deb/debian/google-authenticator@20250213-1.11-0.1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/google-authenticator@20250213-1.11-0.1%3Fdistro=trixie
aliases CVE-2012-6140
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-zufh-6mej-xfe9
Risk_scorenull
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:deb/debian/google-authenticator@20250213-1.11-0.1%3Fdistro=trixie