Django REST framework

Package Instance

Lookup for vulnerable packages by Package URL.

Purlpkg:conan/libtiff@3.9.0
Typeconan
Namespace
Namelibtiff
Version3.9.0
Qualifiers
Subpath
Is_vulnerabletrue
Next_non_vulnerable_version4.2.0
Latest_non_vulnerable_version4.2.0
Affected_by_vulnerabilities
0
url VCID-6wfa-5chm-2ubp
vulnerability_id VCID-6wfa-5chm-2ubp
summary 
NULL Pointer Dereference
A NULL pointer dereference in TIFFClose() is caused by a failure to open an output file (non-existent path or a path that requires permissions like /dev/null) while specifying zones.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-3316.json
reference_id
reference_type
scores
0
value 5.5
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-3316.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2023-3316
reference_id
reference_type
scores
0
value 0.00023
scoring_system epss
scoring_elements 0.06767
published_at 2026-05-30T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2023-3316
2
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 5.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
3
reference_url https://research.jfrog.com/vulnerabilities/libtiff-nullderef-dos-xray-522144/
reference_id
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-12-09T21:09:26Z/
url https://research.jfrog.com/vulnerabilities/libtiff-nullderef-dos-xray-522144/
4
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2216080
reference_id 2216080
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2216080
5
reference_url https://gitlab.com/libtiff/libtiff/-/merge_requests/468
reference_id 468
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-12-09T21:09:26Z/
url https://gitlab.com/libtiff/libtiff/-/merge_requests/468
6
reference_url https://gitlab.com/libtiff/libtiff/-/issues/515
reference_id 515
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-12-09T21:09:26Z/
url https://gitlab.com/libtiff/libtiff/-/issues/515
7
reference_url https://nvd.nist.gov/vuln/detail/CVE-2023-3316
reference_id CVE-2023-3316
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2023-3316
8
reference_url https://lists.debian.org/debian-lts-announce/2023/07/msg00034.html
reference_id msg00034.html
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-12-09T21:09:26Z/
url https://lists.debian.org/debian-lts-announce/2023/07/msg00034.html
9
reference_url https://access.redhat.com/errata/RHSA-2023:6575
reference_id RHSA-2023:6575
reference_type
scores
url https://access.redhat.com/errata/RHSA-2023:6575
10
reference_url https://usn.ubuntu.com/6229-1/
reference_id USN-6229-1
reference_type
scores
url https://usn.ubuntu.com/6229-1/
11
reference_url https://usn.ubuntu.com/6290-1/
reference_id USN-6290-1
reference_type
scores
url https://usn.ubuntu.com/6290-1/
fixed_packages
0
url pkg:conan/libtiff@4.5.1
purl pkg:conan/libtiff@4.5.1
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:conan/libtiff@4.5.1
aliases CVE-2023-3316
risk_score 2.5
exploitability 0.5
weighted_severity 5.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-6wfa-5chm-2ubp
1
url VCID-fd5e-62s6-9fet
vulnerability_id VCID-fd5e-62s6-9fet
summary multiple issues
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-0561.json
reference_id
reference_type
scores
0
value 5.5
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-0561.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2022-0561
reference_id
reference_type
scores
0
value 0.00059
scoring_system epss
scoring_elements 0.18686
published_at 2026-05-30T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2022-0561
2
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 5.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
3
reference_url https://gitlab.com/freedesktop-sdk/mirrors/gitlab/libtiff/libtiff/-/commit/eecb0712f4c3a5b449f70c57988260a667ddbdef
reference_id
reference_type
scores
url https://gitlab.com/freedesktop-sdk/mirrors/gitlab/libtiff/libtiff/-/commit/eecb0712f4c3a5b449f70c57988260a667ddbdef
4
reference_url https://gitlab.com/libtiff/libtiff/-/issues/362
reference_id
reference_type
scores
url https://gitlab.com/libtiff/libtiff/-/issues/362
5
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2054494
reference_id 2054494
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2054494
6
reference_url https://security.archlinux.org/ASA-202204-6
reference_id ASA-202204-6
reference_type
scores
url https://security.archlinux.org/ASA-202204-6
7
reference_url https://security.archlinux.org/AVG-2658
reference_id AVG-2658
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-2658
8
reference_url https://security.archlinux.org/AVG-2659
reference_id AVG-2659
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-2659
9
reference_url https://nvd.nist.gov/vuln/detail/CVE-2022-0561
reference_id CVE-2022-0561
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2022-0561
10
reference_url https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-0561.json
reference_id CVE-2022-0561.JSON
reference_type
scores
url https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-0561.json
11
reference_url https://security.gentoo.org/glsa/202210-10
reference_id GLSA-202210-10
reference_type
scores
url https://security.gentoo.org/glsa/202210-10
12
reference_url https://access.redhat.com/errata/RHSA-2022:7585
reference_id RHSA-2022:7585
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:7585
13
reference_url https://access.redhat.com/errata/RHSA-2022:8194
reference_id RHSA-2022:8194
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:8194
14
reference_url https://usn.ubuntu.com/5421-1/
reference_id USN-5421-1
reference_type
scores
url https://usn.ubuntu.com/5421-1/
fixed_packages
0
url pkg:conan/libtiff@4.4.0
purl pkg:conan/libtiff@4.4.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2891-9w9h-cbhn
1
vulnerability VCID-2s5u-we8d-a7ak
2
vulnerability VCID-5e4x-ve8y-x7e1
3
vulnerability VCID-5ref-7p86-euep
4
vulnerability VCID-67bq-3nun-13h5
5
vulnerability VCID-agmh-fvxr-mqch
6
vulnerability VCID-bh8u-7t2n-j3aq
7
vulnerability VCID-eh8n-g3z2-7bgs
8
vulnerability VCID-evn9-jupy-7yh5
9
vulnerability VCID-pgft-1x9s-8khe
10
vulnerability VCID-vcsa-tjyw-ryas
11
vulnerability VCID-zdke-z72w-d7cc
resource_url http://public2.vulnerablecode.io/packages/pkg:conan/libtiff@4.4.0
aliases CVE-2022-0561
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-fd5e-62s6-9fet
2
url VCID-kvcg-87qf-eqgh
vulnerability_id VCID-kvcg-87qf-eqgh
summary multiple issues
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-0891.json
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-0891.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2022-0891
reference_id
reference_type
scores
0
value 0.00029
scoring_system epss
scoring_elements 0.08707
published_at 2026-05-30T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2022-0891
2
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 7.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
3
reference_url https://gitlab.com/freedesktop-sdk/mirrors/gitlab/libtiff/libtiff/-/commit/232282fd8f9c21eefe8d2d2b96cdbbb172fe7b7c
reference_id
reference_type
scores
url https://gitlab.com/freedesktop-sdk/mirrors/gitlab/libtiff/libtiff/-/commit/232282fd8f9c21eefe8d2d2b96cdbbb172fe7b7c
4
reference_url https://gitlab.com/libtiff/libtiff/-/issues/380
reference_id
reference_type
scores
url https://gitlab.com/libtiff/libtiff/-/issues/380
5
reference_url https://gitlab.com/libtiff/libtiff/-/issues/382
reference_id
reference_type
scores
url https://gitlab.com/libtiff/libtiff/-/issues/382
6
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2064411
reference_id 2064411
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2064411
7
reference_url https://security.archlinux.org/ASA-202204-6
reference_id ASA-202204-6
reference_type
scores
url https://security.archlinux.org/ASA-202204-6
8
reference_url https://security.archlinux.org/AVG-2658
reference_id AVG-2658
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-2658
9
reference_url https://security.archlinux.org/AVG-2659
reference_id AVG-2659
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-2659
10
reference_url https://nvd.nist.gov/vuln/detail/CVE-2022-0891
reference_id CVE-2022-0891
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2022-0891
11
reference_url https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-0891.json
reference_id CVE-2022-0891.JSON
reference_type
scores
url https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-0891.json
12
reference_url https://security.gentoo.org/glsa/202210-10
reference_id GLSA-202210-10
reference_type
scores
url https://security.gentoo.org/glsa/202210-10
13
reference_url https://access.redhat.com/errata/RHSA-2022:7585
reference_id RHSA-2022:7585
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:7585
14
reference_url https://access.redhat.com/errata/RHSA-2022:8194
reference_id RHSA-2022:8194
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:8194
15
reference_url https://usn.ubuntu.com/5421-1/
reference_id USN-5421-1
reference_type
scores
url https://usn.ubuntu.com/5421-1/
fixed_packages
0
url pkg:conan/libtiff@4.4.0
purl pkg:conan/libtiff@4.4.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2891-9w9h-cbhn
1
vulnerability VCID-2s5u-we8d-a7ak
2
vulnerability VCID-5e4x-ve8y-x7e1
3
vulnerability VCID-5ref-7p86-euep
4
vulnerability VCID-67bq-3nun-13h5
5
vulnerability VCID-agmh-fvxr-mqch
6
vulnerability VCID-bh8u-7t2n-j3aq
7
vulnerability VCID-eh8n-g3z2-7bgs
8
vulnerability VCID-evn9-jupy-7yh5
9
vulnerability VCID-pgft-1x9s-8khe
10
vulnerability VCID-vcsa-tjyw-ryas
11
vulnerability VCID-zdke-z72w-d7cc
resource_url http://public2.vulnerablecode.io/packages/pkg:conan/libtiff@4.4.0
aliases CVE-2022-0891
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-kvcg-87qf-eqgh
Fixing_vulnerabilities
Risk_score4.0
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:conan/libtiff@3.9.0