Django REST framework

Lookup for vulnerable packages by Package URL.

Purl pkg:apk/alpine/rpcbind@0.2.4-r0?arch=armhf&distroversion=v3.11&reponame=main

Type apk

Namespace alpine

Name rpcbind

Version 0.2.4-r0

Qualifiers

arch	armhf
distroversion	v3.11
reponame	main

Subpath

Is_vulnerable false

Next_non_vulnerable_version null

Latest_non_vulnerable_version null

Affected_by_vulnerabilities

Fixing_vulnerabilities

url VCID-41ku-u8s2-e3e9

vulnerability_id VCID-41ku-u8s2-e3e9

summary rpcbind through 0.2.4, LIBTIRPC through 1.0.1 and 1.0.2-rc through 1.0.2-rc3, and NTIRPC through 1.4.3 do not consider the maximum RPC data size during memory allocation for XDR strings, which allows remote attackers to cause a denial of service (memory consumption with no subsequent free) via a crafted UDP packet to port 111, aka rpcbomb.

references

reference_url

https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-8779.json

reference_id

reference_type

scores

value	7.5
scoring_system	cvssv3
scoring_elements	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

url

https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-8779.json

reference_url

https://api.first.org/data/v1/epss?cve=CVE-2017-8779

reference_id

reference_type

scores

value	0.81381
scoring_system	epss
scoring_elements	0.99194
published_at	2026-06-09T12:55:00Z

value	0.81381
scoring_system	epss
scoring_elements	0.99191
published_at	2026-06-04T12:55:00Z

value	0.81381
scoring_system	epss
scoring_elements	0.99193
published_at	2026-06-07T12:55:00Z

url

https://api.first.org/data/v1/epss?cve=CVE-2017-8779

reference_url	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8779
reference_id
reference_type
scores
url	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8779

reference_url

https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml

reference_id

reference_type

scores

value	7.8
scoring_system	cvssv2
scoring_elements	AV:N/AC:L/Au:N/C:N/I:N/A:C

value	7.5
scoring_system	cvssv3.1
scoring_elements	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

url

https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml

reference_url	https://bugzilla.redhat.com/show_bug.cgi?id=1448124
reference_id	1448124
reference_type
scores
url	https://bugzilla.redhat.com/show_bug.cgi?id=1448124

reference_url	https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=861834
reference_id	861834
reference_type
scores
url	https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=861834

reference_url	https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=861835
reference_id	861835
reference_type
scores
url	https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=861835

reference_url	https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=861836
reference_id	861836
reference_type
scores
url	https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=861836

reference_url	https://security.archlinux.org/ASA-201705-4
reference_id	ASA-201705-4
reference_type
scores
url	https://security.archlinux.org/ASA-201705-4

reference_url	https://security.archlinux.org/ASA-201705-5
reference_id	ASA-201705-5
reference_type
scores
url	https://security.archlinux.org/ASA-201705-5

reference_url	https://security.archlinux.org/ASA-201705-6
reference_id	ASA-201705-6
reference_type
scores
url	https://security.archlinux.org/ASA-201705-6

reference_url

https://security.archlinux.org/AVG-261

reference_id

AVG-261

reference_type

scores

value	Medium
scoring_system	archlinux
scoring_elements

url

https://security.archlinux.org/AVG-261

reference_url

https://security.archlinux.org/AVG-262

reference_id

AVG-262

reference_type

scores

value	Medium
scoring_system	archlinux
scoring_elements

url

https://security.archlinux.org/AVG-262

reference_url

https://security.archlinux.org/AVG-263

reference_id

AVG-263

reference_type

scores

value	Medium
scoring_system	archlinux
scoring_elements

url

https://security.archlinux.org/AVG-263

reference_url	https://github.com/guidovranken/rpcbomb/blob/fe53048af2d4fb78c911e71a30f21afcffbbf5e1/rpcbomb.rb
reference_id	CVE-2017-8779
reference_type	exploit
scores
url	https://github.com/guidovranken/rpcbomb/blob/fe53048af2d4fb78c911e71a30f21afcffbbf5e1/rpcbomb.rb

reference_url	https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/linux/dos/41974.rb
reference_id	CVE-2017-8779
reference_type	exploit
scores
url	https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/linux/dos/41974.rb

reference_url	https://security.gentoo.org/glsa/201706-07
reference_id	GLSA-201706-07
reference_type
scores
url	https://security.gentoo.org/glsa/201706-07

reference_url	https://access.redhat.com/errata/RHSA-2017:1262
reference_id	RHSA-2017:1262
reference_type
scores
url	https://access.redhat.com/errata/RHSA-2017:1262

reference_url	https://access.redhat.com/errata/RHSA-2017:1263
reference_id	RHSA-2017:1263
reference_type
scores
url	https://access.redhat.com/errata/RHSA-2017:1263

reference_url	https://access.redhat.com/errata/RHSA-2017:1267
reference_id	RHSA-2017:1267
reference_type
scores
url	https://access.redhat.com/errata/RHSA-2017:1267

reference_url	https://access.redhat.com/errata/RHSA-2017:1268
reference_id	RHSA-2017:1268
reference_type
scores
url	https://access.redhat.com/errata/RHSA-2017:1268

reference_url	https://access.redhat.com/errata/RHSA-2017:1395
reference_id	RHSA-2017:1395
reference_type
scores
url	https://access.redhat.com/errata/RHSA-2017:1395

reference_url	https://usn.ubuntu.com/3759-1/
reference_id	USN-3759-1
reference_type
scores
url	https://usn.ubuntu.com/3759-1/

reference_url	https://usn.ubuntu.com/3759-2/
reference_id	USN-3759-2
reference_type
scores
url	https://usn.ubuntu.com/3759-2/

reference_url	https://usn.ubuntu.com/4986-1/
reference_id	USN-4986-1
reference_type
scores
url	https://usn.ubuntu.com/4986-1/

reference_url	https://usn.ubuntu.com/4986-2/
reference_id	USN-4986-2
reference_type
scores
url	https://usn.ubuntu.com/4986-2/

fixed_packages

url	pkg:apk/alpine/rpcbind@0.2.4-r0?arch=armhf&distroversion=v3.11&reponame=main
purl	pkg:apk/alpine/rpcbind@0.2.4-r0?arch=armhf&distroversion=v3.11&reponame=main
is_vulnerable	`false`
affected_by_vulnerabilities
resource_url	http://public2.vulnerablecode.io/packages/pkg:apk/alpine/rpcbind@0.2.4-r0%3Farch=armhf&distroversion=v3.11&reponame=main

aliases CVE-2017-8779

risk_score 10.0

exploitability 2.0

weighted_severity 6.8

resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-41ku-u8s2-e3e9

Risk_score null

Resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/rpcbind@0.2.4-r0%3Farch=armhf&distroversion=v3.11&reponame=main

Package Instance