Lookup for vulnerable packages by Package URL.

Purlpkg:deb/debian/kannel@1.4.5-12?distro=trixie
Typedeb
Namespacedebian
Namekannel
Version1.4.5-12
Qualifiers
distro trixie
Subpath
Is_vulnerablefalse
Next_non_vulnerable_version1.4.5-20
Latest_non_vulnerable_version1.4.5-23
Affected_by_vulnerabilities
Fixing_vulnerabilities
0
url VCID-hfk1-qa99-tbc3
vulnerability_id VCID-hfk1-qa99-tbc3
summary The server daemons in Kannel 1.5.0 and earlier create a PID file after dropping privileges to a non-root account, which might allow local users to kill arbitrary processes by leveraging access to this non-root account for PID file modification before a root script executes a "kill `cat /pathname`" command, as demonstrated by bearerbox.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2017-14609
reference_id
reference_type
scores
0
value 0.00051
scoring_system epss
scoring_elements 0.16371
published_at 2026-06-11T12:55:00Z
1
value 0.00051
scoring_system epss
scoring_elements 0.16517
published_at 2026-06-12T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2017-14609
fixed_packages
0
url pkg:deb/debian/kannel@0?distro=trixie
purl pkg:deb/debian/kannel@0?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/kannel@0%3Fdistro=trixie
1
url pkg:deb/debian/kannel@1.4.5-9?distro=trixie
purl pkg:deb/debian/kannel@1.4.5-9?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/kannel@1.4.5-9%3Fdistro=trixie
2
url pkg:deb/debian/kannel@1.4.5-12?distro=trixie
purl pkg:deb/debian/kannel@1.4.5-12?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/kannel@1.4.5-12%3Fdistro=trixie
3
url pkg:deb/debian/kannel@1.4.5-20?distro=trixie
purl pkg:deb/debian/kannel@1.4.5-20?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/kannel@1.4.5-20%3Fdistro=trixie
4
url pkg:deb/debian/kannel@1.4.5-22?distro=trixie
purl pkg:deb/debian/kannel@1.4.5-22?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/kannel@1.4.5-22%3Fdistro=trixie
5
url pkg:deb/debian/kannel@1.4.5-23?distro=trixie
purl pkg:deb/debian/kannel@1.4.5-23?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/kannel@1.4.5-23%3Fdistro=trixie
aliases CVE-2017-14609
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-hfk1-qa99-tbc3
Risk_scorenull
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:deb/debian/kannel@1.4.5-12%3Fdistro=trixie