Lookup for vulnerable packages by Package URL.

Purlpkg:apk/alpine/pdns-recursor@4.1.8-r0?arch=riscv64&distroversion=edge&reponame=community
Typeapk
Namespacealpine
Namepdns-recursor
Version4.1.8-r0
Qualifiers
arch riscv64
distroversion edge
reponame community
Subpath
Is_vulnerablefalse
Next_non_vulnerable_version4.1.9-r0
Latest_non_vulnerable_version5.4.1-r0
Affected_by_vulnerabilities
Fixing_vulnerabilities
0
url VCID-q6eg-qzcn-fqbp
vulnerability_id VCID-q6eg-qzcn-fqbp
summary An issue has been found in PowerDNS Recursor before version 4.1.8 where a remote attacker sending a DNS query can trigger an out-of-bounds memory read while computing the hash of the query for a packet cache lookup, possibly leading to a crash.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2018-16855
reference_id
reference_type
scores
0
value 0.70787
scoring_system epss
scoring_elements 0.98718
published_at 2026-06-09T12:55:00Z
1
value 0.70787
scoring_system epss
scoring_elements 0.98719
published_at 2026-06-07T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2018-16855
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-16855
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-16855
2
reference_url https://security.archlinux.org/ASA-201811-21
reference_id ASA-201811-21
reference_type
scores
url https://security.archlinux.org/ASA-201811-21
3
reference_url https://security.archlinux.org/AVG-821
reference_id AVG-821
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-821
fixed_packages
0
url pkg:apk/alpine/pdns-recursor@4.1.8-r0?arch=riscv64&distroversion=edge&reponame=community
purl pkg:apk/alpine/pdns-recursor@4.1.8-r0?arch=riscv64&distroversion=edge&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/pdns-recursor@4.1.8-r0%3Farch=riscv64&distroversion=edge&reponame=community
aliases CVE-2018-16855
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-q6eg-qzcn-fqbp
Risk_scorenull
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:apk/alpine/pdns-recursor@4.1.8-r0%3Farch=riscv64&distroversion=edge&reponame=community