Django REST framework

Package Instance

Lookup for vulnerable packages by Package URL.

Purlpkg:deb/debian/libcoap3@4.3.5-3?distro=trixie
Typedeb
Namespacedebian
Namelibcoap3
Version4.3.5-3
Qualifiers
distro trixie
Subpath
Is_vulnerablefalse
Next_non_vulnerable_versionnull
Latest_non_vulnerable_versionnull
Affected_by_vulnerabilities
Fixing_vulnerabilities
0
url VCID-5tgh-x6d9-mbgb
vulnerability_id VCID-5tgh-x6d9-mbgb
summary Buffer Overflow vulnerability in coap_send function in libcoap library 4.3.1-103-g52cfd56 fixed in 4.3.1-120-ge242200 allows attackers to obtain sensitive information via malformed pdu.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2023-30362
reference_id
reference_type
scores
0
value 0.00193
scoring_system epss
scoring_elements 0.41103
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2023-30362
1
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1040594
reference_id 1040594
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1040594
2
reference_url https://github.com/obgm/libcoap/issues/1063
reference_id 1063
reference_type
scores
0
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-12-05T16:58:49Z/
url https://github.com/obgm/libcoap/issues/1063
3
reference_url https://github.com/obgm/libcoap/pull/1065
reference_id 1065
reference_type
scores
0
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-12-05T16:58:49Z/
url https://github.com/obgm/libcoap/pull/1065
fixed_packages
0
url pkg:deb/debian/libcoap3@4.3.1-2?distro=trixie
purl pkg:deb/debian/libcoap3@4.3.1-2?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/libcoap3@4.3.1-2%3Fdistro=trixie
1
url pkg:deb/debian/libcoap3@4.3.4-1.1%2Bdeb13u3?distro=trixie
purl pkg:deb/debian/libcoap3@4.3.4-1.1%2Bdeb13u3?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-mv5x-1zqs-jug2
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/libcoap3@4.3.4-1.1%252Bdeb13u3%3Fdistro=trixie
2
url pkg:deb/debian/libcoap3@4.3.5-3?distro=trixie
purl pkg:deb/debian/libcoap3@4.3.5-3?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/libcoap3@4.3.5-3%3Fdistro=trixie
aliases CVE-2023-30362
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-5tgh-x6d9-mbgb
1
url VCID-5w1d-wgvr-r7bg
vulnerability_id VCID-5w1d-wgvr-r7bg
summary Integer signedness error in tls_verify_call_back() in src/coap_openssl.c in OISM libcoap 4.3.5 allows remote attackers to cause a denial of service via a crafted TLS certificate that causes i2d_X509() to return -1 and be misused as a malloc() size parameter.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2025-65495
reference_id
reference_type
scores
0
value 0.00185
scoring_system epss
scoring_elements 0.40119
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2025-65495
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-65495
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-65495
2
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1121415
reference_id 1121415
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1121415
3
reference_url https://github.com/obgm/libcoap/issues/1744
reference_id 1744
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-11-24T14:39:26Z/
url https://github.com/obgm/libcoap/issues/1744
4
reference_url https://github.com/obgm/libcoap/pull/1750
reference_id 1750
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-11-24T14:39:26Z/
url https://github.com/obgm/libcoap/pull/1750
fixed_packages
0
url pkg:deb/debian/libcoap3@4.3.4-1.1%2Bdeb13u2?distro=trixie
purl pkg:deb/debian/libcoap3@4.3.4-1.1%2Bdeb13u2?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/libcoap3@4.3.4-1.1%252Bdeb13u2%3Fdistro=trixie
1
url pkg:deb/debian/libcoap3@4.3.4-1.1%2Bdeb13u3?distro=trixie
purl pkg:deb/debian/libcoap3@4.3.4-1.1%2Bdeb13u3?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-mv5x-1zqs-jug2
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/libcoap3@4.3.4-1.1%252Bdeb13u3%3Fdistro=trixie
2
url pkg:deb/debian/libcoap3@4.3.5-2?distro=trixie
purl pkg:deb/debian/libcoap3@4.3.5-2?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/libcoap3@4.3.5-2%3Fdistro=trixie
3
url pkg:deb/debian/libcoap3@4.3.5-3?distro=trixie
purl pkg:deb/debian/libcoap3@4.3.5-3?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/libcoap3@4.3.5-3%3Fdistro=trixie
aliases CVE-2025-65495
risk_score 3.4
exploitability 0.5
weighted_severity 6.8
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-5w1d-wgvr-r7bg
2
url VCID-7djz-xrep-k7ef
vulnerability_id VCID-7djz-xrep-k7ef
summary libcoap contains out-of-bounds read vulnerabilities in OSCORE Appendix B.2 CBOR unwrap handling where get_byte_inc() in src/oscore/oscore_cbor.c relies solely on assert() for bounds checking, which is removed in release builds compiled with NDEBUG. Attackers can send crafted CoAP requests with malformed OSCORE options or responses during OSCORE negotiation to trigger out-of-bounds reads during CBOR parsing and potentially cause out-of-bounds reads through integer wraparound in allocation size computation.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2026-29013
reference_id
reference_type
scores
0
value 0.00058
scoring_system epss
scoring_elements 0.18515
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2026-29013
1
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1134340
reference_id 1134340
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1134340
2
reference_url https://github.com/obgm/libcoap/commit/b7847c4dbb0dbee7c90b09a673d4cae256f03718
reference_id b7847c4dbb0dbee7c90b09a673d4cae256f03718
reference_type
scores
0
value 8.8
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:L/VA:H/SC:N/SI:N/SA:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-20T13:53:33Z/
url https://github.com/obgm/libcoap/commit/b7847c4dbb0dbee7c90b09a673d4cae256f03718
fixed_packages
0
url pkg:deb/debian/libcoap3@4.3.4-1.1%2Bdeb13u3?distro=trixie
purl pkg:deb/debian/libcoap3@4.3.4-1.1%2Bdeb13u3?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-mv5x-1zqs-jug2
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/libcoap3@4.3.4-1.1%252Bdeb13u3%3Fdistro=trixie
1
url pkg:deb/debian/libcoap3@4.3.5-3?distro=trixie
purl pkg:deb/debian/libcoap3@4.3.5-3?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/libcoap3@4.3.5-3%3Fdistro=trixie
aliases CVE-2026-29013
risk_score 4.0
exploitability 0.5
weighted_severity 7.9
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-7djz-xrep-k7ef
3
url VCID-b2uf-h5my-6bck
vulnerability_id VCID-b2uf-h5my-6bck
summary NULL pointer dereference in coap_dtls_generate_cookie() in src/coap_openssl.c in OISM libcoap 4.3.5 allows remote attackers to cause a denial of service via a crafted DTLS handshake that triggers SSL_get_SSL_CTX() to return NULL.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2025-65500
reference_id
reference_type
scores
0
value 0.00171
scoring_system epss
scoring_elements 0.38227
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2025-65500
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-65500
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-65500
2
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1121415
reference_id 1121415
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1121415
3
reference_url https://github.com/obgm/libcoap/issues/1746
reference_id 1746
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-11-24T18:27:41Z/
url https://github.com/obgm/libcoap/issues/1746
4
reference_url https://github.com/obgm/libcoap/pull/1750
reference_id 1750
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-11-24T18:27:41Z/
url https://github.com/obgm/libcoap/pull/1750
fixed_packages
0
url pkg:deb/debian/libcoap3@4.3.4-1.1%2Bdeb13u2?distro=trixie
purl pkg:deb/debian/libcoap3@4.3.4-1.1%2Bdeb13u2?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/libcoap3@4.3.4-1.1%252Bdeb13u2%3Fdistro=trixie
1
url pkg:deb/debian/libcoap3@4.3.4-1.1%2Bdeb13u3?distro=trixie
purl pkg:deb/debian/libcoap3@4.3.4-1.1%2Bdeb13u3?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-mv5x-1zqs-jug2
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/libcoap3@4.3.4-1.1%252Bdeb13u3%3Fdistro=trixie
2
url pkg:deb/debian/libcoap3@4.3.5-2?distro=trixie
purl pkg:deb/debian/libcoap3@4.3.5-2?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/libcoap3@4.3.5-2%3Fdistro=trixie
3
url pkg:deb/debian/libcoap3@4.3.5-3?distro=trixie
purl pkg:deb/debian/libcoap3@4.3.5-3?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/libcoap3@4.3.5-3%3Fdistro=trixie
aliases CVE-2025-65500
risk_score 1.9
exploitability 0.5
weighted_severity 3.9
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-b2uf-h5my-6bck
4
url VCID-b315-43mj-fqb3
vulnerability_id VCID-b315-43mj-fqb3
summary A memory disclosure vulnerability exists in libcoap's OSCORE configuration parser in libcoap before release-4.3.5-patches. An out-of-bounds read may occur when parsing certain configuration values, allowing an attacker to infer or read memory beyond string boundaries in the .rodata section. This could potentially lead to information disclosure or denial of service.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2025-59391
reference_id
reference_type
scores
0
value 0.00117
scoring_system epss
scoring_elements 0.30142
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2025-59391
1
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1122290
reference_id 1122290
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1122290
2
reference_url https://github.com/obgm/libcoap/pull/1730
reference_id 1730
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-12-08T17:51:22Z/
url https://github.com/obgm/libcoap/pull/1730
3
reference_url https://github.com/obgm/libcoap/releases/tag/v4.3.5a
reference_id v4.3.5a
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-12-08T17:51:22Z/
url https://github.com/obgm/libcoap/releases/tag/v4.3.5a
fixed_packages
0
url pkg:deb/debian/libcoap3@4.3.4-1.1%2Bdeb13u2?distro=trixie
purl pkg:deb/debian/libcoap3@4.3.4-1.1%2Bdeb13u2?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/libcoap3@4.3.4-1.1%252Bdeb13u2%3Fdistro=trixie
1
url pkg:deb/debian/libcoap3@4.3.4-1.1%2Bdeb13u3?distro=trixie
purl pkg:deb/debian/libcoap3@4.3.4-1.1%2Bdeb13u3?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-mv5x-1zqs-jug2
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/libcoap3@4.3.4-1.1%252Bdeb13u3%3Fdistro=trixie
2
url pkg:deb/debian/libcoap3@4.3.5-2?distro=trixie
purl pkg:deb/debian/libcoap3@4.3.5-2?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/libcoap3@4.3.5-2%3Fdistro=trixie
3
url pkg:deb/debian/libcoap3@4.3.5-3?distro=trixie
purl pkg:deb/debian/libcoap3@4.3.5-3?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/libcoap3@4.3.5-3%3Fdistro=trixie
aliases CVE-2025-59391
risk_score 3.0
exploitability 0.5
weighted_severity 5.9
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-b315-43mj-fqb3
5
url VCID-c8vb-bh6q-q7hb
vulnerability_id VCID-c8vb-bh6q-q7hb
summary Array index error in tls_verify_call_back() in src/coap_openssl.c in OISM libcoap 4.3.5 allows remote attackers to cause a denial of service via a crafted DTLS handshake that triggers SSL_get_ex_data_X509_STORE_CTX_idx() to return -1.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2025-65499
reference_id
reference_type
scores
0
value 0.00171
scoring_system epss
scoring_elements 0.3814
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2025-65499
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-65499
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-65499
2
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1121415
reference_id 1121415
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1121415
3
reference_url https://github.com/obgm/libcoap/issues/1747
reference_id 1747
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-11-24T18:27:04Z/
url https://github.com/obgm/libcoap/issues/1747
4
reference_url https://github.com/obgm/libcoap/pull/1750
reference_id 1750
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-11-24T18:27:04Z/
url https://github.com/obgm/libcoap/pull/1750
fixed_packages
0
url pkg:deb/debian/libcoap3@4.3.4-1.1%2Bdeb13u2?distro=trixie
purl pkg:deb/debian/libcoap3@4.3.4-1.1%2Bdeb13u2?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/libcoap3@4.3.4-1.1%252Bdeb13u2%3Fdistro=trixie
1
url pkg:deb/debian/libcoap3@4.3.4-1.1%2Bdeb13u3?distro=trixie
purl pkg:deb/debian/libcoap3@4.3.4-1.1%2Bdeb13u3?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-mv5x-1zqs-jug2
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/libcoap3@4.3.4-1.1%252Bdeb13u3%3Fdistro=trixie
2
url pkg:deb/debian/libcoap3@4.3.5-2?distro=trixie
purl pkg:deb/debian/libcoap3@4.3.5-2?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/libcoap3@4.3.5-2%3Fdistro=trixie
3
url pkg:deb/debian/libcoap3@4.3.5-3?distro=trixie
purl pkg:deb/debian/libcoap3@4.3.5-3?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/libcoap3@4.3.5-3%3Fdistro=trixie
aliases CVE-2025-65499
risk_score 1.9
exploitability 0.5
weighted_severity 3.9
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-c8vb-bh6q-q7hb
6
url VCID-e459-2ggn-vycq
vulnerability_id VCID-e459-2ggn-vycq
summary A use-after-free vulnerability exists in the coap_delete_pdu_lkd function within coap_pdu.c of the libcoap library. This issue occurs due to improper handling of memory after the freeing of a PDU object, leading to potential memory corruption or the possibility of executing arbitrary code. NOTE: this is disputed by the Supplier because it only occurs when an application uses libcoap incorrectly.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2025-50518
reference_id
reference_type
scores
0
value 0.00538
scoring_system epss
scoring_elements 0.68002
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2025-50518
1
reference_url https://github.com/IreneTheITCrowd/blog/issues/1
reference_id 1
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track*
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:T/P:M/B:A/M:M/D:R/2025-08-15T12:37:01Z/
url https://github.com/IreneTheITCrowd/blog/issues/1
2
reference_url https://github.com/obgm/libcoap/issues/1724#issuecomment-3199631257
reference_id 1724#issuecomment-3199631257
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track*
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:T/P:M/B:A/M:M/D:R/2025-08-15T12:37:01Z/
url https://github.com/obgm/libcoap/issues/1724#issuecomment-3199631257
3
reference_url https://github.com/obgm/libcoap/issues/1724#issuecomment-3234613482
reference_id 1724#issuecomment-3234613482
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track*
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:T/P:M/B:A/M:M/D:R/2025-08-15T12:37:01Z/
url https://github.com/obgm/libcoap/issues/1724#issuecomment-3234613482
4
reference_url https://github.com/IreneTheITCrowd/blog/blob/main/libcoap-vulnerability.md
reference_id libcoap-vulnerability.md
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track*
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:T/P:M/B:A/M:M/D:R/2025-08-15T12:37:01Z/
url https://github.com/IreneTheITCrowd/blog/blob/main/libcoap-vulnerability.md
fixed_packages
0
url pkg:deb/debian/libcoap3@0?distro=trixie
purl pkg:deb/debian/libcoap3@0?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/libcoap3@0%3Fdistro=trixie
1
url pkg:deb/debian/libcoap3@4.3.1-1?distro=trixie
purl pkg:deb/debian/libcoap3@4.3.1-1?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-5tgh-x6d9-mbgb
1
vulnerability VCID-5w1d-wgvr-r7bg
2
vulnerability VCID-7djz-xrep-k7ef
3
vulnerability VCID-b2uf-h5my-6bck
4
vulnerability VCID-b315-43mj-fqb3
5
vulnerability VCID-c8vb-bh6q-q7hb
6
vulnerability VCID-fhgk-zn6u-9fbn
7
vulnerability VCID-mv5x-1zqs-jug2
8
vulnerability VCID-nxvj-r8hb-rqg9
9
vulnerability VCID-r6an-ggdy-sfav
10
vulnerability VCID-rx5d-fpth-4ucf
11
vulnerability VCID-s4uj-j29w-bfba
12
vulnerability VCID-ukp6-3xj7-ubf5
13
vulnerability VCID-v8k5-h7yw-tkh6
14
vulnerability VCID-wrqe-w5pf-w7dq
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/libcoap3@4.3.1-1%3Fdistro=trixie
2
url pkg:deb/debian/libcoap3@4.3.4-1.1%2Bdeb13u3?distro=trixie
purl pkg:deb/debian/libcoap3@4.3.4-1.1%2Bdeb13u3?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-mv5x-1zqs-jug2
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/libcoap3@4.3.4-1.1%252Bdeb13u3%3Fdistro=trixie
3
url pkg:deb/debian/libcoap3@4.3.5-3?distro=trixie
purl pkg:deb/debian/libcoap3@4.3.5-3?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/libcoap3@4.3.5-3%3Fdistro=trixie
aliases CVE-2025-50518
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-e459-2ggn-vycq
7
url VCID-fhgk-zn6u-9fbn
vulnerability_id VCID-fhgk-zn6u-9fbn
summary An issue in `coap_pdu.c` in libcoap 4.3.4 allows attackers to cause undefined behavior via a sequence of messages leading to unsigned integer overflow.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2024-31031
reference_id
reference_type
scores
0
value 0.00088
scoring_system epss
scoring_elements 0.25234
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2024-31031
1
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1070362
reference_id 1070362
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1070362
2
reference_url https://github.com/obgm/libcoap/issues/1351
reference_id 1351
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2024-04-22T19:36:57Z/
url https://github.com/obgm/libcoap/issues/1351
3
reference_url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LPENEJBV3KSASIYKNZAKXDAH7Q66KPYG/
reference_id LPENEJBV3KSASIYKNZAKXDAH7Q66KPYG
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2024-04-22T19:36:57Z/
url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LPENEJBV3KSASIYKNZAKXDAH7Q66KPYG/
4
reference_url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TUL7QDYFGEIJVO2ZSG4O5HEAWR6PFC52/
reference_id TUL7QDYFGEIJVO2ZSG4O5HEAWR6PFC52
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2024-04-22T19:36:57Z/
url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TUL7QDYFGEIJVO2ZSG4O5HEAWR6PFC52/
fixed_packages
0
url pkg:deb/debian/libcoap3@4.3.4-1.1%2Bdeb13u1?distro=trixie
purl pkg:deb/debian/libcoap3@4.3.4-1.1%2Bdeb13u1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/libcoap3@4.3.4-1.1%252Bdeb13u1%3Fdistro=trixie
1
url pkg:deb/debian/libcoap3@4.3.4-1.1%2Bdeb13u3?distro=trixie
purl pkg:deb/debian/libcoap3@4.3.4-1.1%2Bdeb13u3?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-mv5x-1zqs-jug2
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/libcoap3@4.3.4-1.1%252Bdeb13u3%3Fdistro=trixie
2
url pkg:deb/debian/libcoap3@4.3.5-1?distro=trixie
purl pkg:deb/debian/libcoap3@4.3.5-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/libcoap3@4.3.5-1%3Fdistro=trixie
3
url pkg:deb/debian/libcoap3@4.3.5-3?distro=trixie
purl pkg:deb/debian/libcoap3@4.3.5-3?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/libcoap3@4.3.5-3%3Fdistro=trixie
aliases CVE-2024-31031
risk_score 3.4
exploitability 0.5
weighted_severity 6.8
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-fhgk-zn6u-9fbn
8
url VCID-hbrs-jrds-vufx
vulnerability_id VCID-hbrs-jrds-vufx
summary An issue in obgm and Libcoap v.a3ed466 allows a remote attacker to cause a denial of service via thecoap_context_t function in the src/coap_threadsafe.c:297:3 component.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2023-51847
reference_id
reference_type
scores
0
value 0.00316
scoring_system epss
scoring_elements 0.55133
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2023-51847
1
reference_url https://github.com/obgm/libcoap/issues/1302
reference_id 1302
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2024-06-10T14:38:58Z/
url https://github.com/obgm/libcoap/issues/1302
fixed_packages
0
url pkg:deb/debian/libcoap3@0?distro=trixie
purl pkg:deb/debian/libcoap3@0?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/libcoap3@0%3Fdistro=trixie
1
url pkg:deb/debian/libcoap3@4.3.1-1?distro=trixie
purl pkg:deb/debian/libcoap3@4.3.1-1?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-5tgh-x6d9-mbgb
1
vulnerability VCID-5w1d-wgvr-r7bg
2
vulnerability VCID-7djz-xrep-k7ef
3
vulnerability VCID-b2uf-h5my-6bck
4
vulnerability VCID-b315-43mj-fqb3
5
vulnerability VCID-c8vb-bh6q-q7hb
6
vulnerability VCID-fhgk-zn6u-9fbn
7
vulnerability VCID-mv5x-1zqs-jug2
8
vulnerability VCID-nxvj-r8hb-rqg9
9
vulnerability VCID-r6an-ggdy-sfav
10
vulnerability VCID-rx5d-fpth-4ucf
11
vulnerability VCID-s4uj-j29w-bfba
12
vulnerability VCID-ukp6-3xj7-ubf5
13
vulnerability VCID-v8k5-h7yw-tkh6
14
vulnerability VCID-wrqe-w5pf-w7dq
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/libcoap3@4.3.1-1%3Fdistro=trixie
2
url pkg:deb/debian/libcoap3@4.3.4-1.1%2Bdeb13u3?distro=trixie
purl pkg:deb/debian/libcoap3@4.3.4-1.1%2Bdeb13u3?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-mv5x-1zqs-jug2
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/libcoap3@4.3.4-1.1%252Bdeb13u3%3Fdistro=trixie
3
url pkg:deb/debian/libcoap3@4.3.5-3?distro=trixie
purl pkg:deb/debian/libcoap3@4.3.5-3?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/libcoap3@4.3.5-3%3Fdistro=trixie
aliases CVE-2023-51847
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-hbrs-jrds-vufx
9
url VCID-mv5x-1zqs-jug2
vulnerability_id VCID-mv5x-1zqs-jug2
summary A NULL pointer dereference in libcoap v4.3.5-rc2 and below allows a remote attacker to cause a denial of service via the coap_handle_request_put_block function in src/coap_block.c.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2024-46304
reference_id
reference_type
scores
0
value 0.00648
scoring_system epss
scoring_elements 0.71267
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2024-46304
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46304
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46304
2
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1084981
reference_id 1084981
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1084981
3
reference_url https://github.com/obgm/libcoap/issues/1509
reference_id 1509
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2024-10-09T16:42:02Z/
url https://github.com/obgm/libcoap/issues/1509
fixed_packages
0
url pkg:deb/debian/libcoap3@4.3.5-1?distro=trixie
purl pkg:deb/debian/libcoap3@4.3.5-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/libcoap3@4.3.5-1%3Fdistro=trixie
1
url pkg:deb/debian/libcoap3@4.3.5-3?distro=trixie
purl pkg:deb/debian/libcoap3@4.3.5-3?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/libcoap3@4.3.5-3%3Fdistro=trixie
aliases CVE-2024-46304
risk_score 3.4
exploitability 0.5
weighted_severity 6.8
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-mv5x-1zqs-jug2
10
url VCID-nxvj-r8hb-rqg9
vulnerability_id VCID-nxvj-r8hb-rqg9
summary NULL pointer dereference in coap_dtls_generate_cookie() in src/coap_openssl.c in OISM libcoap 4.3.5 allows remote attackers to cause a denial of service via a crafted DTLS handshake that triggers SSL_get_SSL_CTX() to return NULL.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2025-65497
reference_id
reference_type
scores
0
value 0.00171
scoring_system epss
scoring_elements 0.38227
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2025-65497
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-65497
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-65497
2
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1121415
reference_id 1121415
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1121415
3
reference_url https://github.com/obgm/libcoap/issues/1745
reference_id 1745
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-11-24T18:26:11Z/
url https://github.com/obgm/libcoap/issues/1745
4
reference_url https://github.com/obgm/libcoap/pull/1750
reference_id 1750
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-11-24T18:26:11Z/
url https://github.com/obgm/libcoap/pull/1750
fixed_packages
0
url pkg:deb/debian/libcoap3@4.3.4-1.1%2Bdeb13u2?distro=trixie
purl pkg:deb/debian/libcoap3@4.3.4-1.1%2Bdeb13u2?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/libcoap3@4.3.4-1.1%252Bdeb13u2%3Fdistro=trixie
1
url pkg:deb/debian/libcoap3@4.3.4-1.1%2Bdeb13u3?distro=trixie
purl pkg:deb/debian/libcoap3@4.3.4-1.1%2Bdeb13u3?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-mv5x-1zqs-jug2
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/libcoap3@4.3.4-1.1%252Bdeb13u3%3Fdistro=trixie
2
url pkg:deb/debian/libcoap3@4.3.5-2?distro=trixie
purl pkg:deb/debian/libcoap3@4.3.5-2?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/libcoap3@4.3.5-2%3Fdistro=trixie
3
url pkg:deb/debian/libcoap3@4.3.5-3?distro=trixie
purl pkg:deb/debian/libcoap3@4.3.5-3?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/libcoap3@4.3.5-3%3Fdistro=trixie
aliases CVE-2025-65497
risk_score 1.9
exploitability 0.5
weighted_severity 3.9
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-nxvj-r8hb-rqg9
11
url VCID-r6an-ggdy-sfav
vulnerability_id VCID-r6an-ggdy-sfav
summary libcoap versions up to and including 4.3.5, prior to commit 30db3ea, contain a stack-based buffer overflow in address resolution when attacker-controlled hostname data is copied into a fixed 256-byte stack buffer without proper bounds checking. A remote attacker can trigger a crash and potentially achieve remote code execution depending on compiler options and runtime memory protections. Exploitation requires the proxy logic to be enabled (i.e., the proxy request handling code path in an application using libcoap).
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2025-34468
reference_id
reference_type
scores
0
value 0.00498
scoring_system epss
scoring_elements 0.66307
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2025-34468
1
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1124407
reference_id 1124407
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1124407
2
reference_url https://github.com/obgm/libcoap/pull/1737
reference_id 1737
reference_type
scores
0
value 8.2
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-01-02T14:18:50Z/
url https://github.com/obgm/libcoap/pull/1737
3
reference_url https://github.com/obgm/libcoap/commit/30db3ea
reference_id 30db3ea
reference_type
scores
0
value 8.2
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-01-02T14:18:50Z/
url https://github.com/obgm/libcoap/commit/30db3ea
4
reference_url https://libcoap.net/
reference_id libcoap.net
reference_type
scores
0
value 8.2
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-01-02T14:18:50Z/
url https://libcoap.net/
5
reference_url https://www.vulncheck.com/advisories/libcoap-stack-based-buffer-overflow-in-address-resolution-dos-or-potential-rce
reference_id libcoap-stack-based-buffer-overflow-in-address-resolution-dos-or-potential-rce
reference_type
scores
0
value 8.2
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-01-02T14:18:50Z/
url https://www.vulncheck.com/advisories/libcoap-stack-based-buffer-overflow-in-address-resolution-dos-or-potential-rce
fixed_packages
0
url pkg:deb/debian/libcoap3@4.3.4-1.1%2Bdeb13u3?distro=trixie
purl pkg:deb/debian/libcoap3@4.3.4-1.1%2Bdeb13u3?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-mv5x-1zqs-jug2
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/libcoap3@4.3.4-1.1%252Bdeb13u3%3Fdistro=trixie
1
url pkg:deb/debian/libcoap3@4.3.5-3?distro=trixie
purl pkg:deb/debian/libcoap3@4.3.5-3?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/libcoap3@4.3.5-3%3Fdistro=trixie
aliases CVE-2025-34468
risk_score 3.7
exploitability 0.5
weighted_severity 7.4
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-r6an-ggdy-sfav
12
url VCID-rx5d-fpth-4ucf
vulnerability_id VCID-rx5d-fpth-4ucf
summary NULL pointer dereference in coap_dtls_generate_cookie() in src/coap_openssl.c in OISM libcoap 4.3.5 allows remote attackers to cause a denial of service via a crafted DTLS handshake that triggers SSL_get_SSL_CTX() to return NULL.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2025-65498
reference_id
reference_type
scores
0
value 0.00171
scoring_system epss
scoring_elements 0.38227
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2025-65498
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-65498
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-65498
2
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1121415
reference_id 1121415
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1121415
3
reference_url https://github.com/obgm/libcoap/issues/1746
reference_id 1746
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-11-24T18:25:52Z/
url https://github.com/obgm/libcoap/issues/1746
4
reference_url https://github.com/obgm/libcoap/pull/1750
reference_id 1750
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-11-24T18:25:52Z/
url https://github.com/obgm/libcoap/pull/1750
fixed_packages
0
url pkg:deb/debian/libcoap3@4.3.4-1.1%2Bdeb13u2?distro=trixie
purl pkg:deb/debian/libcoap3@4.3.4-1.1%2Bdeb13u2?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/libcoap3@4.3.4-1.1%252Bdeb13u2%3Fdistro=trixie
1
url pkg:deb/debian/libcoap3@4.3.4-1.1%2Bdeb13u3?distro=trixie
purl pkg:deb/debian/libcoap3@4.3.4-1.1%2Bdeb13u3?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-mv5x-1zqs-jug2
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/libcoap3@4.3.4-1.1%252Bdeb13u3%3Fdistro=trixie
2
url pkg:deb/debian/libcoap3@4.3.5-2?distro=trixie
purl pkg:deb/debian/libcoap3@4.3.5-2?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/libcoap3@4.3.5-2%3Fdistro=trixie
3
url pkg:deb/debian/libcoap3@4.3.5-3?distro=trixie
purl pkg:deb/debian/libcoap3@4.3.5-3?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/libcoap3@4.3.5-3%3Fdistro=trixie
aliases CVE-2025-65498
risk_score 1.9
exploitability 0.5
weighted_severity 3.9
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-rx5d-fpth-4ucf
13
url VCID-s4uj-j29w-bfba
vulnerability_id VCID-s4uj-j29w-bfba
summary Null pointer dereference in coap_dtls_info_callback() in OISM libcoap 4.3.5 allows remote attackers to cause a denial of service via a DTLS handshake where SSL_get_app_data() returns NULL.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2025-65501
reference_id
reference_type
scores
0
value 0.00171
scoring_system epss
scoring_elements 0.38227
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2025-65501
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-65501
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-65501
2
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1121415
reference_id 1121415
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1121415
3
reference_url https://github.com/obgm/libcoap/issues/1748
reference_id 1748
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-11-24T18:28:13Z/
url https://github.com/obgm/libcoap/issues/1748
4
reference_url https://github.com/obgm/libcoap/pull/1750
reference_id 1750
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-11-24T18:28:13Z/
url https://github.com/obgm/libcoap/pull/1750
fixed_packages
0
url pkg:deb/debian/libcoap3@4.3.4-1.1%2Bdeb13u2?distro=trixie
purl pkg:deb/debian/libcoap3@4.3.4-1.1%2Bdeb13u2?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/libcoap3@4.3.4-1.1%252Bdeb13u2%3Fdistro=trixie
1
url pkg:deb/debian/libcoap3@4.3.4-1.1%2Bdeb13u3?distro=trixie
purl pkg:deb/debian/libcoap3@4.3.4-1.1%2Bdeb13u3?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-mv5x-1zqs-jug2
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/libcoap3@4.3.4-1.1%252Bdeb13u3%3Fdistro=trixie
2
url pkg:deb/debian/libcoap3@4.3.5-2?distro=trixie
purl pkg:deb/debian/libcoap3@4.3.5-2?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/libcoap3@4.3.5-2%3Fdistro=trixie
3
url pkg:deb/debian/libcoap3@4.3.5-3?distro=trixie
purl pkg:deb/debian/libcoap3@4.3.5-3?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/libcoap3@4.3.5-3%3Fdistro=trixie
aliases CVE-2025-65501
risk_score 1.9
exploitability 0.5
weighted_severity 3.9
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-s4uj-j29w-bfba
14
url VCID-ukp6-3xj7-ubf5
vulnerability_id VCID-ukp6-3xj7-ubf5
summary NULL pointer dereference in coap_dtls_generate_cookie() in src/coap_openssl.c in OISM libcoap 4.3.5 allows remote attackers to cause a denial of service via a crafted DTLS handshake that triggers SSL_get_SSL_CTX() to return NULL.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2025-65496
reference_id
reference_type
scores
0
value 0.00171
scoring_system epss
scoring_elements 0.38227
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2025-65496
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-65496
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-65496
2
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1121415
reference_id 1121415
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1121415
3
reference_url https://github.com/obgm/libcoap/issues/1745
reference_id 1745
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-11-24T18:26:37Z/
url https://github.com/obgm/libcoap/issues/1745
4
reference_url https://github.com/obgm/libcoap/pull/1750
reference_id 1750
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-11-24T18:26:37Z/
url https://github.com/obgm/libcoap/pull/1750
fixed_packages
0
url pkg:deb/debian/libcoap3@4.3.4-1.1%2Bdeb13u2?distro=trixie
purl pkg:deb/debian/libcoap3@4.3.4-1.1%2Bdeb13u2?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/libcoap3@4.3.4-1.1%252Bdeb13u2%3Fdistro=trixie
1
url pkg:deb/debian/libcoap3@4.3.4-1.1%2Bdeb13u3?distro=trixie
purl pkg:deb/debian/libcoap3@4.3.4-1.1%2Bdeb13u3?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-mv5x-1zqs-jug2
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/libcoap3@4.3.4-1.1%252Bdeb13u3%3Fdistro=trixie
2
url pkg:deb/debian/libcoap3@4.3.5-2?distro=trixie
purl pkg:deb/debian/libcoap3@4.3.5-2?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/libcoap3@4.3.5-2%3Fdistro=trixie
3
url pkg:deb/debian/libcoap3@4.3.5-3?distro=trixie
purl pkg:deb/debian/libcoap3@4.3.5-3?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/libcoap3@4.3.5-3%3Fdistro=trixie
aliases CVE-2025-65496
risk_score 1.9
exploitability 0.5
weighted_severity 3.9
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-ukp6-3xj7-ubf5
15
url VCID-v8k5-h7yw-tkh6
vulnerability_id VCID-v8k5-h7yw-tkh6
summary NULL pointer dereference in src/coap_openssl.c in OISM libcoap 4.3.5 allows remote attackers to cause a denial of service via a crafted DTLS/TLS connection that triggers BIO_get_data() to return NULL.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2025-65493
reference_id
reference_type
scores
0
value 0.00276
scoring_system epss
scoring_elements 0.5137
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2025-65493
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-65493
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-65493
2
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1121415
reference_id 1121415
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1121415
3
reference_url https://github.com/obgm/libcoap/issues/1743
reference_id 1743
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-11-24T14:52:15Z/
url https://github.com/obgm/libcoap/issues/1743
4
reference_url https://github.com/obgm/libcoap/pull/1750
reference_id 1750
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-11-24T14:52:15Z/
url https://github.com/obgm/libcoap/pull/1750
fixed_packages
0
url pkg:deb/debian/libcoap3@4.3.4-1.1%2Bdeb13u2?distro=trixie
purl pkg:deb/debian/libcoap3@4.3.4-1.1%2Bdeb13u2?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/libcoap3@4.3.4-1.1%252Bdeb13u2%3Fdistro=trixie
1
url pkg:deb/debian/libcoap3@4.3.4-1.1%2Bdeb13u3?distro=trixie
purl pkg:deb/debian/libcoap3@4.3.4-1.1%2Bdeb13u3?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-mv5x-1zqs-jug2
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/libcoap3@4.3.4-1.1%252Bdeb13u3%3Fdistro=trixie
2
url pkg:deb/debian/libcoap3@4.3.5-2?distro=trixie
purl pkg:deb/debian/libcoap3@4.3.5-2?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/libcoap3@4.3.5-2%3Fdistro=trixie
3
url pkg:deb/debian/libcoap3@4.3.5-3?distro=trixie
purl pkg:deb/debian/libcoap3@4.3.5-3?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/libcoap3@4.3.5-3%3Fdistro=trixie
aliases CVE-2025-65493
risk_score 3.4
exploitability 0.5
weighted_severity 6.8
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-v8k5-h7yw-tkh6
16
url VCID-wrqe-w5pf-w7dq
vulnerability_id VCID-wrqe-w5pf-w7dq
summary NULL pointer dereference in get_san_or_cn_from_cert() in src/coap_openssl.c in OISM libcoap 4.3.5 allows remote attackers to cause a denial of service via a crafted X.509 certificate that causes sk_GENERAL_NAME_value() to return NULL.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2025-65494
reference_id
reference_type
scores
0
value 0.00183
scoring_system epss
scoring_elements 0.39867
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2025-65494
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-65494
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-65494
2
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1121415
reference_id 1121415
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1121415
3
reference_url https://github.com/obgm/libcoap/issues/1745
reference_id 1745
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-11-24T14:46:32Z/
url https://github.com/obgm/libcoap/issues/1745
4
reference_url https://github.com/obgm/libcoap/pull/1750
reference_id 1750
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-11-24T14:46:32Z/
url https://github.com/obgm/libcoap/pull/1750
fixed_packages
0
url pkg:deb/debian/libcoap3@4.3.4-1.1%2Bdeb13u2?distro=trixie
purl pkg:deb/debian/libcoap3@4.3.4-1.1%2Bdeb13u2?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/libcoap3@4.3.4-1.1%252Bdeb13u2%3Fdistro=trixie
1
url pkg:deb/debian/libcoap3@4.3.4-1.1%2Bdeb13u3?distro=trixie
purl pkg:deb/debian/libcoap3@4.3.4-1.1%2Bdeb13u3?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-mv5x-1zqs-jug2
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/libcoap3@4.3.4-1.1%252Bdeb13u3%3Fdistro=trixie
2
url pkg:deb/debian/libcoap3@4.3.5-2?distro=trixie
purl pkg:deb/debian/libcoap3@4.3.5-2?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/libcoap3@4.3.5-2%3Fdistro=trixie
3
url pkg:deb/debian/libcoap3@4.3.5-3?distro=trixie
purl pkg:deb/debian/libcoap3@4.3.5-3?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/libcoap3@4.3.5-3%3Fdistro=trixie
aliases CVE-2025-65494
risk_score 3.4
exploitability 0.5
weighted_severity 6.8
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-wrqe-w5pf-w7dq
17
url VCID-zezb-he8c-sfbt
vulnerability_id VCID-zezb-he8c-sfbt
summary A vulnerability was found in obgm libcoap 4.3.4. It has been rated as critical. Affected by this issue is the function get_split_entry of the file src/coap_oscore.c of the component Configuration File Handler. The manipulation leads to stack-based buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. It is recommended to apply a patch to fix this issue. VDB-252206 is the identifier assigned to this vulnerability.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2024-0962
reference_id
reference_type
scores
0
value 0.00159
scoring_system epss
scoring_elements 0.36553
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2024-0962
1
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1061704
reference_id 1061704
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1061704
2
reference_url https://github.com/obgm/libcoap/issues/1310
reference_id 1310
reference_type
scores
0
value 7.5
scoring_system cvssv2
scoring_elements AV:N/AC:L/Au:N/C:P/I:P/A:P
1
value 6.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
2
value 6.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2024-01-31T17:58:52Z/
url https://github.com/obgm/libcoap/issues/1310
3
reference_url https://github.com/obgm/libcoap/issues/1310#issue-2099860835
reference_id 1310#issue-2099860835
reference_type
scores
0
value 7.5
scoring_system cvssv2
scoring_elements AV:N/AC:L/Au:N/C:P/I:P/A:P
1
value 6.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
2
value 6.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2024-01-31T17:58:52Z/
url https://github.com/obgm/libcoap/issues/1310#issue-2099860835
4
reference_url https://github.com/obgm/libcoap/pull/1311
reference_id 1311
reference_type
scores
0
value 7.5
scoring_system cvssv2
scoring_elements AV:N/AC:L/Au:N/C:P/I:P/A:P
1
value 6.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
2
value 6.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2024-01-31T17:58:52Z/
url https://github.com/obgm/libcoap/pull/1311
5
reference_url https://vuldb.com/?ctiid.252206
reference_id ?ctiid.252206
reference_type
scores
0
value 7.5
scoring_system cvssv2
scoring_elements AV:N/AC:L/Au:N/C:P/I:P/A:P
1
value 6.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
2
value 6.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2024-01-31T17:58:52Z/
url https://vuldb.com/?ctiid.252206
6
reference_url https://vuldb.com/?id.252206
reference_id ?id.252206
reference_type
scores
0
value 7.5
scoring_system cvssv2
scoring_elements AV:N/AC:L/Au:N/C:P/I:P/A:P
1
value 6.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
2
value 6.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2024-01-31T17:58:52Z/
url https://vuldb.com/?id.252206
fixed_packages
0
url pkg:deb/debian/libcoap3@0?distro=trixie
purl pkg:deb/debian/libcoap3@0?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/libcoap3@0%3Fdistro=trixie
1
url pkg:deb/debian/libcoap3@4.3.1-1?distro=trixie
purl pkg:deb/debian/libcoap3@4.3.1-1?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-5tgh-x6d9-mbgb
1
vulnerability VCID-5w1d-wgvr-r7bg
2
vulnerability VCID-7djz-xrep-k7ef
3
vulnerability VCID-b2uf-h5my-6bck
4
vulnerability VCID-b315-43mj-fqb3
5
vulnerability VCID-c8vb-bh6q-q7hb
6
vulnerability VCID-fhgk-zn6u-9fbn
7
vulnerability VCID-mv5x-1zqs-jug2
8
vulnerability VCID-nxvj-r8hb-rqg9
9
vulnerability VCID-r6an-ggdy-sfav
10
vulnerability VCID-rx5d-fpth-4ucf
11
vulnerability VCID-s4uj-j29w-bfba
12
vulnerability VCID-ukp6-3xj7-ubf5
13
vulnerability VCID-v8k5-h7yw-tkh6
14
vulnerability VCID-wrqe-w5pf-w7dq
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/libcoap3@4.3.1-1%3Fdistro=trixie
2
url pkg:deb/debian/libcoap3@4.3.4-1.1%2Bdeb13u1?distro=trixie
purl pkg:deb/debian/libcoap3@4.3.4-1.1%2Bdeb13u1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/libcoap3@4.3.4-1.1%252Bdeb13u1%3Fdistro=trixie
3
url pkg:deb/debian/libcoap3@4.3.4-1.1%2Bdeb13u3?distro=trixie
purl pkg:deb/debian/libcoap3@4.3.4-1.1%2Bdeb13u3?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-mv5x-1zqs-jug2
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/libcoap3@4.3.4-1.1%252Bdeb13u3%3Fdistro=trixie
4
url pkg:deb/debian/libcoap3@4.3.5-1?distro=trixie
purl pkg:deb/debian/libcoap3@4.3.5-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/libcoap3@4.3.5-1%3Fdistro=trixie
5
url pkg:deb/debian/libcoap3@4.3.5-3?distro=trixie
purl pkg:deb/debian/libcoap3@4.3.5-3?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/libcoap3@4.3.5-3%3Fdistro=trixie
aliases CVE-2024-0962
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-zezb-he8c-sfbt
Risk_scorenull
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:deb/debian/libcoap3@4.3.5-3%3Fdistro=trixie