Package Instance
Lookup for vulnerable packages by Package URL.
GET /api/packages/524628?format=api
{ "url": "http://public2.vulnerablecode.io/api/packages/524628?format=api", "purl": "pkg:deb/debian/nas@1.9.4-3", "type": "deb", "namespace": "debian", "name": "nas", "version": "1.9.4-3", "qualifiers": {}, "subpath": "", "is_vulnerable": false, "next_non_vulnerable_version": null, "latest_non_vulnerable_version": null, "affected_by_vulnerabilities": [], "fixing_vulnerabilities": [ { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/94364?format=api", "vulnerability_id": "VCID-pz7w-mwwk-3qb9", "summary": "Multiple stack-based and heap-based buffer overflows in Network Audio System (NAS) 1.9.3 allow local users to cause a denial of service (crash) or possibly execute arbitrary code via the (1) display command argument to the ProcessCommandLine function in server/os/utils.c; (2) ResetHosts function in server/os/access.c; (3) open_unix_socket, (4) open_isc_local, (5) open_xsight_local, (6) open_att_local, or (7) open_att_svr4_local function in server/os/connection.c; the (8) AUDIOHOST environment variable to the CreateWellKnownSockets or (9) AmoebaTCPConnectorThread function in server/os/connection.c; or (10) unspecified vectors related to logging in the osLogMsg function in server/os/aulog.c.", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2013-4256", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00151", "scoring_system": "epss", "scoring_elements": "0.3535", "published_at": "2026-06-04T12:55:00Z" }, { "value": "0.00151", "scoring_system": "epss", "scoring_elements": "0.35446", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.00151", "scoring_system": "epss", "scoring_elements": "0.35457", "published_at": "2026-06-06T12:55:00Z" }, { "value": "0.00151", "scoring_system": "epss", "scoring_elements": "0.35421", "published_at": "2026-06-07T12:55:00Z" }, { "value": "0.00151", "scoring_system": "epss", "scoring_elements": "0.3538", "published_at": "2026-06-08T12:55:00Z" }, { "value": "0.00151", "scoring_system": "epss", "scoring_elements": "0.35397", "published_at": "2026-06-09T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2013-4256" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4256", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4256" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4258", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4258" }, { "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=720287", "reference_id": "720287", "reference_type": "", "scores": [], "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=720287" }, { "reference_url": "https://security.gentoo.org/glsa/201406-22", "reference_id": "GLSA-201406-22", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/201406-22" }, { "reference_url": "https://usn.ubuntu.com/1986-1/", "reference_id": "USN-1986-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/1986-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/239102?format=api", "purl": "pkg:deb/debian/nas@1.9.3-5wheezy1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-pz7w-mwwk-3qb9" }, { "vulnerability": "VCID-xu28-a5az-n7ez" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/nas@1.9.3-5wheezy1" }, { "url": "http://public2.vulnerablecode.io/api/packages/524628?format=api", "purl": "pkg:deb/debian/nas@1.9.4-3", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/nas@1.9.4-3" } ], "aliases": [ "CVE-2013-4256" ], "risk_score": null, "exploitability": "0.5", "weighted_severity": "0.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-pz7w-mwwk-3qb9" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/94365?format=api", "vulnerability_id": "VCID-xu28-a5az-n7ez", "summary": "Format string vulnerability in the osLogMsg function in server/os/aulog.c in Network Audio System (NAS) 1.9.3 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via format string specifiers in unspecified vectors, related to syslog.", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2013-4258", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.01226", "scoring_system": "epss", "scoring_elements": "0.79473", "published_at": "2026-06-04T12:55:00Z" }, { "value": "0.01226", "scoring_system": "epss", "scoring_elements": "0.795", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.01226", "scoring_system": "epss", "scoring_elements": "0.79506", "published_at": "2026-06-06T12:55:00Z" }, { "value": "0.01226", "scoring_system": "epss", "scoring_elements": "0.79499", "published_at": "2026-06-07T12:55:00Z" }, { "value": "0.01226", "scoring_system": "epss", "scoring_elements": "0.79489", "published_at": "2026-06-08T12:55:00Z" }, { "value": "0.01226", "scoring_system": "epss", "scoring_elements": "0.79507", "published_at": "2026-06-09T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2013-4258" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4256", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4256" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4258", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4258" }, { "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=720287", "reference_id": "720287", "reference_type": "", "scores": [], "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=720287" }, { "reference_url": "https://security.gentoo.org/glsa/201406-22", "reference_id": "GLSA-201406-22", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/201406-22" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/239102?format=api", "purl": "pkg:deb/debian/nas@1.9.3-5wheezy1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-pz7w-mwwk-3qb9" }, { "vulnerability": "VCID-xu28-a5az-n7ez" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/nas@1.9.3-5wheezy1" }, { "url": "http://public2.vulnerablecode.io/api/packages/524628?format=api", "purl": "pkg:deb/debian/nas@1.9.4-3", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/nas@1.9.4-3" } ], "aliases": [ "CVE-2013-4258" ], "risk_score": null, "exploitability": "0.5", "weighted_severity": "0.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-xu28-a5az-n7ez" } ], "risk_score": null, "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/nas@1.9.4-3" }