Lookup for vulnerable packages by Package URL.
| Purl | pkg:apk/alpine/f2fs-tools@1.14.0-r0?arch=armhf&distroversion=v3.17&reponame=main |
| Type | apk |
| Namespace | alpine |
| Name | f2fs-tools |
| Version | 1.14.0-r0 |
| Qualifiers |
| arch |
armhf |
| distroversion |
v3.17 |
| reponame |
main |
|
| Subpath | |
| Is_vulnerable | false |
| Next_non_vulnerable_version | null |
| Latest_non_vulnerable_version | null |
| Affected_by_vulnerabilities |
|
| Fixing_vulnerabilities |
| 0 |
| url |
VCID-gtx4-gqmz-p3bz |
| vulnerability_id |
VCID-gtx4-gqmz-p3bz |
| summary |
An exploitable information disclosure vulnerability exists in the get_dnode_of_data functionality of F2fs-Tools F2fs.Fsck 1.13. A specially crafted f2fs filesystem can cause information disclosure resulting in a information disclosure. An attacker can provide a malicious file to trigger this vulnerability. |
| references |
| 0 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2020-6104 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.0026 |
| scoring_system |
epss |
| scoring_elements |
0.49602 |
| published_at |
2026-06-04T12:55:00Z |
|
| 1 |
| value |
0.0026 |
| scoring_system |
epss |
| scoring_elements |
0.49664 |
| published_at |
2026-06-05T12:55:00Z |
|
| 2 |
| value |
0.0026 |
| scoring_system |
epss |
| scoring_elements |
0.49674 |
| published_at |
2026-06-06T12:55:00Z |
|
| 3 |
| value |
0.0026 |
| scoring_system |
epss |
| scoring_elements |
0.49657 |
| published_at |
2026-06-07T12:55:00Z |
|
| 4 |
| value |
0.0026 |
| scoring_system |
epss |
| scoring_elements |
0.49628 |
| published_at |
2026-06-08T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2020-6104 |
|
| 1 |
|
| 2 |
|
| 3 |
|
|
| fixed_packages |
|
| aliases |
CVE-2020-6104
|
| risk_score |
null |
| exploitability |
0.5 |
| weighted_severity |
0.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-gtx4-gqmz-p3bz |
|
| 1 |
| url |
VCID-hae8-uxsc-uybp |
| vulnerability_id |
VCID-hae8-uxsc-uybp |
| summary |
An exploitable information disclosure vulnerability exists in the init_node_manager functionality of F2fs-Tools F2fs.Fsck 1.12 and 1.13. A specially crafted filesystem can be used to disclose information. An attacker can provide a malicious file to trigger this vulnerability. |
| references |
| 0 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2020-6106 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.00292 |
| scoring_system |
epss |
| scoring_elements |
0.52858 |
| published_at |
2026-06-04T12:55:00Z |
|
| 1 |
| value |
0.00292 |
| scoring_system |
epss |
| scoring_elements |
0.52919 |
| published_at |
2026-06-05T12:55:00Z |
|
| 2 |
| value |
0.00292 |
| scoring_system |
epss |
| scoring_elements |
0.52925 |
| published_at |
2026-06-06T12:55:00Z |
|
| 3 |
| value |
0.00292 |
| scoring_system |
epss |
| scoring_elements |
0.52905 |
| published_at |
2026-06-07T12:55:00Z |
|
| 4 |
| value |
0.00292 |
| scoring_system |
epss |
| scoring_elements |
0.5288 |
| published_at |
2026-06-08T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2020-6106 |
|
| 1 |
|
| 2 |
|
| 3 |
|
|
| fixed_packages |
|
| aliases |
CVE-2020-6106
|
| risk_score |
null |
| exploitability |
0.5 |
| weighted_severity |
0.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-hae8-uxsc-uybp |
|
| 2 |
| url |
VCID-rn1x-zvg4-nfev |
| vulnerability_id |
VCID-rn1x-zvg4-nfev |
| summary |
An exploitable information disclosure vulnerability exists in the dev_read functionality of F2fs-Tools F2fs.Fsck 1.13. A specially crafted f2fs filesystem can cause an uninitialized read resulting in an information disclosure. An attacker can provide a malicious file to trigger this vulnerability. |
| references |
| 0 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2020-6107 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.0026 |
| scoring_system |
epss |
| scoring_elements |
0.49602 |
| published_at |
2026-06-04T12:55:00Z |
|
| 1 |
| value |
0.0026 |
| scoring_system |
epss |
| scoring_elements |
0.49664 |
| published_at |
2026-06-05T12:55:00Z |
|
| 2 |
| value |
0.0026 |
| scoring_system |
epss |
| scoring_elements |
0.49674 |
| published_at |
2026-06-06T12:55:00Z |
|
| 3 |
| value |
0.0026 |
| scoring_system |
epss |
| scoring_elements |
0.49657 |
| published_at |
2026-06-07T12:55:00Z |
|
| 4 |
| value |
0.0026 |
| scoring_system |
epss |
| scoring_elements |
0.49628 |
| published_at |
2026-06-08T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2020-6107 |
|
| 1 |
|
| 2 |
|
| 3 |
|
|
| fixed_packages |
|
| aliases |
CVE-2020-6107
|
| risk_score |
null |
| exploitability |
0.5 |
| weighted_severity |
0.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-rn1x-zvg4-nfev |
|
| 3 |
| url |
VCID-un23-7e7v-6uhn |
| vulnerability_id |
VCID-un23-7e7v-6uhn |
| summary |
An exploitable code execution vulnerability exists in the fsck_chk_orphan_node functionality of F2fs-Tools F2fs.Fsck 1.13. A specially crafted f2fs filesystem can cause a heap buffer overflow resulting in a code execution. An attacker can provide a malicious file to trigger this vulnerability. |
| references |
| 0 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2020-6108 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.0116 |
| scoring_system |
epss |
| scoring_elements |
0.78926 |
| published_at |
2026-06-04T12:55:00Z |
|
| 1 |
| value |
0.0116 |
| scoring_system |
epss |
| scoring_elements |
0.78952 |
| published_at |
2026-06-05T12:55:00Z |
|
| 2 |
| value |
0.0116 |
| scoring_system |
epss |
| scoring_elements |
0.78959 |
| published_at |
2026-06-06T12:55:00Z |
|
| 3 |
| value |
0.0116 |
| scoring_system |
epss |
| scoring_elements |
0.78949 |
| published_at |
2026-06-07T12:55:00Z |
|
| 4 |
| value |
0.0116 |
| scoring_system |
epss |
| scoring_elements |
0.78938 |
| published_at |
2026-06-08T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2020-6108 |
|
| 1 |
|
| 2 |
|
| 3 |
|
|
| fixed_packages |
|
| aliases |
CVE-2020-6108
|
| risk_score |
null |
| exploitability |
0.5 |
| weighted_severity |
0.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-un23-7e7v-6uhn |
|
|
| Risk_score | null |
| Resource_url | http://public2.vulnerablecode.io/packages/pkg:apk/alpine/f2fs-tools@1.14.0-r0%3Farch=armhf&distroversion=v3.17&reponame=main |