Lookup for vulnerable packages by Package URL.

Purlpkg:deb/debian/libgig@3.3.0-1
Typedeb
Namespacedebian
Namelibgig
Version3.3.0-1
Qualifiers
Subpath
Is_vulnerabletrue
Next_non_vulnerable_version4.1.0~repack-2
Latest_non_vulnerable_version4.1.0~repack-2
Affected_by_vulnerabilities
0
url VCID-85gz-zcp6-z3e3
vulnerability_id VCID-85gz-zcp6-z3e3
summary The gig::Region::Region function in gig.cpp in libgig 4.0.0 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted gig file.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2017-12950
reference_id
reference_type
scores
0
value 0.04372
scoring_system epss
scoring_elements 0.89149
published_at 2026-06-04T12:55:00Z
1
value 0.04372
scoring_system epss
scoring_elements 0.89166
published_at 2026-06-08T12:55:00Z
2
value 0.04372
scoring_system epss
scoring_elements 0.89167
published_at 2026-06-06T12:55:00Z
3
value 0.04372
scoring_system epss
scoring_elements 0.89183
published_at 2026-06-09T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2017-12950
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12950
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12950
2
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=873718
reference_id 873718
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=873718
3
reference_url https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/linux/dos/42546.txt
reference_id CVE-2017-12954;CVE-2017-12953;CVE-2017-12952;CVE-2017-12951;CVE-2017-12950
reference_type exploit
scores
url https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/linux/dos/42546.txt
fixed_packages
0
url pkg:deb/debian/libgig@4.1.0~repack-2
purl pkg:deb/debian/libgig@4.1.0~repack-2
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/libgig@4.1.0~repack-2
aliases CVE-2017-12950
risk_score null
exploitability 2.0
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-85gz-zcp6-z3e3
1
url VCID-aenw-7qfd-9yg9
vulnerability_id VCID-aenw-7qfd-9yg9
summary The gig::Instrument::UpdateRegionKeyTable function in gig.cpp in libgig 4.0.0 allows remote attackers to cause a denial of service (invalid memory write and application crash) via a crafted gig file.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2017-12953
reference_id
reference_type
scores
0
value 0.03146
scoring_system epss
scoring_elements 0.87131
published_at 2026-06-04T12:55:00Z
1
value 0.03146
scoring_system epss
scoring_elements 0.87153
published_at 2026-06-05T12:55:00Z
2
value 0.03146
scoring_system epss
scoring_elements 0.87151
published_at 2026-06-06T12:55:00Z
3
value 0.03146
scoring_system epss
scoring_elements 0.87146
published_at 2026-06-07T12:55:00Z
4
value 0.03146
scoring_system epss
scoring_elements 0.87143
published_at 2026-06-08T12:55:00Z
5
value 0.03146
scoring_system epss
scoring_elements 0.87155
published_at 2026-06-09T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2017-12953
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12953
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12953
2
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=873718
reference_id 873718
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=873718
fixed_packages
0
url pkg:deb/debian/libgig@4.1.0~repack-2
purl pkg:deb/debian/libgig@4.1.0~repack-2
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/libgig@4.1.0~repack-2
aliases CVE-2017-12953
risk_score null
exploitability 2.0
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-aenw-7qfd-9yg9
2
url VCID-de4w-sm5k-4kfd
vulnerability_id VCID-de4w-sm5k-4kfd
summary The gig::Region::GetSampleFromWavePool function in gig.cpp in libgig 4.0.0 allows remote attackers to cause a denial of service (invalid memory read and application crash) via a crafted gig file.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2017-12954
reference_id
reference_type
scores
0
value 0.03146
scoring_system epss
scoring_elements 0.87131
published_at 2026-06-04T12:55:00Z
1
value 0.03146
scoring_system epss
scoring_elements 0.87153
published_at 2026-06-05T12:55:00Z
2
value 0.03146
scoring_system epss
scoring_elements 0.87151
published_at 2026-06-06T12:55:00Z
3
value 0.03146
scoring_system epss
scoring_elements 0.87146
published_at 2026-06-07T12:55:00Z
4
value 0.03146
scoring_system epss
scoring_elements 0.87143
published_at 2026-06-08T12:55:00Z
5
value 0.03146
scoring_system epss
scoring_elements 0.87155
published_at 2026-06-09T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2017-12954
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12954
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12954
2
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=877652
reference_id 877652
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=877652
fixed_packages
0
url pkg:deb/debian/libgig@4.1.0~repack-2
purl pkg:deb/debian/libgig@4.1.0~repack-2
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/libgig@4.1.0~repack-2
aliases CVE-2017-12954
risk_score null
exploitability 2.0
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-de4w-sm5k-4kfd
3
url VCID-q9xq-f72v-vqcb
vulnerability_id VCID-q9xq-f72v-vqcb
summary The gig::DimensionRegion::CreateVelocityTable function in gig.cpp in libgig 4.0.0 allows remote attackers to cause a denial of service (stack-based buffer over-read and application crash) via a crafted gig file.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2017-12951
reference_id
reference_type
scores
0
value 0.03146
scoring_system epss
scoring_elements 0.87131
published_at 2026-06-04T12:55:00Z
1
value 0.03146
scoring_system epss
scoring_elements 0.87153
published_at 2026-06-05T12:55:00Z
2
value 0.03146
scoring_system epss
scoring_elements 0.87151
published_at 2026-06-06T12:55:00Z
3
value 0.03146
scoring_system epss
scoring_elements 0.87146
published_at 2026-06-07T12:55:00Z
4
value 0.03146
scoring_system epss
scoring_elements 0.87143
published_at 2026-06-08T12:55:00Z
5
value 0.03146
scoring_system epss
scoring_elements 0.87155
published_at 2026-06-09T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2017-12951
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12951
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12951
2
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=877651
reference_id 877651
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=877651
fixed_packages
0
url pkg:deb/debian/libgig@4.1.0~repack-2
purl pkg:deb/debian/libgig@4.1.0~repack-2
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/libgig@4.1.0~repack-2
aliases CVE-2017-12951
risk_score null
exploitability 2.0
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-q9xq-f72v-vqcb
4
url VCID-y6vx-wmn8-7fee
vulnerability_id VCID-y6vx-wmn8-7fee
summary The LoadString function in helper.h in libgig 4.0.0 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted gig file.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2017-12952
reference_id
reference_type
scores
0
value 0.04733
scoring_system epss
scoring_elements 0.89591
published_at 2026-06-04T12:55:00Z
1
value 0.04733
scoring_system epss
scoring_elements 0.89608
published_at 2026-06-05T12:55:00Z
2
value 0.04733
scoring_system epss
scoring_elements 0.89607
published_at 2026-06-08T12:55:00Z
3
value 0.04733
scoring_system epss
scoring_elements 0.89606
published_at 2026-06-07T12:55:00Z
4
value 0.04733
scoring_system epss
scoring_elements 0.89623
published_at 2026-06-09T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2017-12952
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12952
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12952
2
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=873718
reference_id 873718
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=873718
fixed_packages
0
url pkg:deb/debian/libgig@4.1.0~repack-2
purl pkg:deb/debian/libgig@4.1.0~repack-2
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/libgig@4.1.0~repack-2
aliases CVE-2017-12952
risk_score null
exploitability 2.0
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-y6vx-wmn8-7fee
Fixing_vulnerabilities
Risk_scorenull
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:deb/debian/libgig@3.3.0-1