Lookup for vulnerable packages by Package URL.

Purlpkg:deb/debian/libcommons-compress-java@1.4.1-1?distro=trixie
Typedeb
Namespacedebian
Namelibcommons-compress-java
Version1.4.1-1
Qualifiers
distro trixie
Subpath
Is_vulnerablefalse
Next_non_vulnerable_version1.13-2
Latest_non_vulnerable_version1.27.1-2
Affected_by_vulnerabilities
Fixing_vulnerabilities
0
url VCID-h5ex-bm2j-fken
vulnerability_id VCID-h5ex-bm2j-fken
summary Algorithmic complexity vulnerability in the sorting algorithms in bzip2 compressing stream (BZip2CompressorOutputStream) in Apache Commons Compress before 1.4.1 allows remote attackers to cause a denial of service (CPU consumption) via a file with many repeating inputs.
references
0
reference_url http://ant.apache.org/security.html
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://ant.apache.org/security.html
1
reference_url http://archives.neohapsis.com/archives/bugtraq/2012-05/0130.html
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://archives.neohapsis.com/archives/bugtraq/2012-05/0130.html
2
reference_url http://commons.apache.org/compress/security.html
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://commons.apache.org/compress/security.html
3
reference_url http://lists.fedoraproject.org/pipermail/package-announce/2012-June/081697.html
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://lists.fedoraproject.org/pipermail/package-announce/2012-June/081697.html
4
reference_url http://lists.fedoraproject.org/pipermail/package-announce/2012-June/081746.html
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://lists.fedoraproject.org/pipermail/package-announce/2012-June/081746.html
5
reference_url http://lists.fedoraproject.org/pipermail/package-announce/2013-May/105049.html
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://lists.fedoraproject.org/pipermail/package-announce/2013-May/105049.html
6
reference_url http://lists.fedoraproject.org/pipermail/package-announce/2013-May/105060.html
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://lists.fedoraproject.org/pipermail/package-announce/2013-May/105060.html
7
reference_url http://packetstormsecurity.org/files/113014/Apache-Commons-Compress-Apache-Ant-Denial-Of-Service.html
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://packetstormsecurity.org/files/113014/Apache-Commons-Compress-Apache-Ant-Denial-Of-Service.html
8
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-2098.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-2098.json
9
reference_url https://api.first.org/data/v1/epss?cve=CVE-2012-2098
reference_id
reference_type
scores
0
value 0.032
scoring_system epss
scoring_elements 0.87004
published_at 2026-04-12T12:55:00Z
1
value 0.032
scoring_system epss
scoring_elements 0.86948
published_at 2026-04-01T12:55:00Z
2
value 0.032
scoring_system epss
scoring_elements 0.86958
published_at 2026-04-02T12:55:00Z
3
value 0.032
scoring_system epss
scoring_elements 0.86977
published_at 2026-04-04T12:55:00Z
4
value 0.032
scoring_system epss
scoring_elements 0.86969
published_at 2026-04-07T12:55:00Z
5
value 0.032
scoring_system epss
scoring_elements 0.86989
published_at 2026-04-08T12:55:00Z
6
value 0.032
scoring_system epss
scoring_elements 0.86996
published_at 2026-04-09T12:55:00Z
7
value 0.032
scoring_system epss
scoring_elements 0.87009
published_at 2026-04-11T12:55:00Z
8
value 0.032
scoring_system epss
scoring_elements 0.86998
published_at 2026-04-13T12:55:00Z
9
value 0.032
scoring_system epss
scoring_elements 0.87014
published_at 2026-04-16T12:55:00Z
10
value 0.032
scoring_system epss
scoring_elements 0.87018
published_at 2026-04-18T12:55:00Z
11
value 0.032
scoring_system epss
scoring_elements 0.87016
published_at 2026-04-21T12:55:00Z
12
value 0.032
scoring_system epss
scoring_elements 0.87036
published_at 2026-04-24T12:55:00Z
13
value 0.032
scoring_system epss
scoring_elements 0.87041
published_at 2026-04-26T12:55:00Z
14
value 0.03709
scoring_system epss
scoring_elements 0.88017
published_at 2026-05-05T12:55:00Z
15
value 0.04283
scoring_system epss
scoring_elements 0.88885
published_at 2026-04-29T12:55:00Z
16
value 0.04396
scoring_system epss
scoring_elements 0.89074
published_at 2026-05-12T12:55:00Z
17
value 0.04396
scoring_system epss
scoring_elements 0.89059
published_at 2026-05-07T12:55:00Z
18
value 0.04396
scoring_system epss
scoring_elements 0.89065
published_at 2026-05-11T12:55:00Z
19
value 0.04396
scoring_system epss
scoring_elements 0.89069
published_at 2026-05-09T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2012-2098
10
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2098
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2098
11
reference_url https://exchange.xforce.ibmcloud.com/vulnerabilities/75857
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://exchange.xforce.ibmcloud.com/vulnerabilities/75857
12
reference_url https://github.com/apache/commons-compress
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/apache/commons-compress
13
reference_url https://github.com/apache/commons-compress/commit/020c03d8ef579e80511023fb46ece30e9c3dd27d
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/apache/commons-compress/commit/020c03d8ef579e80511023fb46ece30e9c3dd27d
14
reference_url https://github.com/apache/commons-compress/commit/0600296ab8f8a0bbdfedd483f51b38005eb8e34e
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/apache/commons-compress/commit/0600296ab8f8a0bbdfedd483f51b38005eb8e34e
15
reference_url https://github.com/apache/commons-compress/commit/1ce57d976c4f25fe99edcadf079840c278f3cb84
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/apache/commons-compress/commit/1ce57d976c4f25fe99edcadf079840c278f3cb84
16
reference_url https://github.com/apache/commons-compress/commit/2ab2fcb356753927afaa731b9d2dcc47d3083408
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/apache/commons-compress/commit/2ab2fcb356753927afaa731b9d2dcc47d3083408
17
reference_url https://github.com/apache/commons-compress/commit/654222e628097763ee6ca561ae77be5c06666173
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/apache/commons-compress/commit/654222e628097763ee6ca561ae77be5c06666173
18
reference_url https://github.com/apache/commons-compress/commit/6ced422bf5eca3aac05396367bafb33ec21bf74e
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/apache/commons-compress/commit/6ced422bf5eca3aac05396367bafb33ec21bf74e
19
reference_url https://github.com/apache/commons-compress/commit/6e95697e783767f3549f00d7d2e1b002eac4a3d4
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/apache/commons-compress/commit/6e95697e783767f3549f00d7d2e1b002eac4a3d4
20
reference_url https://github.com/apache/commons-compress/commit/8f702469cbf4c451b6dea349290bc4af0f6f76c7
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/apache/commons-compress/commit/8f702469cbf4c451b6dea349290bc4af0f6f76c7
21
reference_url https://github.com/apache/commons-compress/commit/b06f7b41c936ef1a79589d16ea5c1d8b93f71f66
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/apache/commons-compress/commit/b06f7b41c936ef1a79589d16ea5c1d8b93f71f66
22
reference_url https://github.com/apache/commons-compress/commit/cca0e6e5341aacddefd4c4d36cef7cbdbc2a8777
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/apache/commons-compress/commit/cca0e6e5341aacddefd4c4d36cef7cbdbc2a8777
23
reference_url https://github.com/apache/commons-compress/commit/ea31005111f0abede7e43e4ba0012e62e0808b22
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/apache/commons-compress/commit/ea31005111f0abede7e43e4ba0012e62e0808b22
24
reference_url https://github.com/apache/commons-compress/commit/fdd7459bc5470e90024dbe762249166481cce769
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/apache/commons-compress/commit/fdd7459bc5470e90024dbe762249166481cce769
25
reference_url https://lists.apache.org/thread.html/r204ba2a9ea750f38d789d2bb429cc0925ad6133deea7cbc3001d96b5@%3Csolr-user.lucene.apache.org%3E
reference_id
reference_type
scores
url https://lists.apache.org/thread.html/r204ba2a9ea750f38d789d2bb429cc0925ad6133deea7cbc3001d96b5@%3Csolr-user.lucene.apache.org%3E
26
reference_url https://lists.apache.org/thread.html/r204ba2a9ea750f38d789d2bb429cc0925ad6133deea7cbc3001d96b5@<solr-user.lucene.apache.org>
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://lists.apache.org/thread.html/r204ba2a9ea750f38d789d2bb429cc0925ad6133deea7cbc3001d96b5@<solr-user.lucene.apache.org>
27
reference_url https://web.archive.org/web/20130525085523/http://www.securityfocus.com/bid/53676
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://web.archive.org/web/20130525085523/http://www.securityfocus.com/bid/53676
28
reference_url https://web.archive.org/web/20140724002926/http://secunia.com/advisories/49286
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://web.archive.org/web/20140724002926/http://secunia.com/advisories/49286
29
reference_url https://web.archive.org/web/20140724023114/http://secunia.com/advisories/49255
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://web.archive.org/web/20140724023114/http://secunia.com/advisories/49255
30
reference_url https://web.archive.org/web/20200517014414/http://www.securitytracker.com/id?1027096
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://web.archive.org/web/20200517014414/http://www.securitytracker.com/id?1027096
31
reference_url https://www.oracle.com/security-alerts/cpujan2021.html
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://www.oracle.com/security-alerts/cpujan2021.html
32
reference_url http://www-01.ibm.com/support/docview.wss?uid=swg21644047
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://www-01.ibm.com/support/docview.wss?uid=swg21644047
33
reference_url http://www.openwall.com/lists/oss-security/2023/09/13/3
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://www.openwall.com/lists/oss-security/2023/09/13/3
34
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=674448
reference_id 674448
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=674448
35
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=810406
reference_id 810406
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=810406
36
reference_url https://nvd.nist.gov/vuln/detail/CVE-2012-2098
reference_id CVE-2012-2098
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2012-2098
37
reference_url https://github.com/advisories/GHSA-6fxm-66hq-fc96
reference_id GHSA-6fxm-66hq-fc96
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-6fxm-66hq-fc96
fixed_packages
0
url pkg:deb/debian/libcommons-compress-java@1.4.1-1?distro=trixie
purl pkg:deb/debian/libcommons-compress-java@1.4.1-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/libcommons-compress-java@1.4.1-1%3Fdistro=trixie
1
url pkg:deb/debian/libcommons-compress-java@1.20-1?distro=trixie
purl pkg:deb/debian/libcommons-compress-java@1.20-1?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-p41w-msyv-u7bk
1
vulnerability VCID-qsw3-wm4k-m7h3
2
vulnerability VCID-qu4m-4u1a-r3cv
3
vulnerability VCID-vaar-ytpp-eqc7
4
vulnerability VCID-y6ff-umvz-zbgd
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/libcommons-compress-java@1.20-1%3Fdistro=trixie
2
url pkg:deb/debian/libcommons-compress-java@1.22-1?distro=trixie
purl pkg:deb/debian/libcommons-compress-java@1.22-1?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-cg72-sg2w-t3ft
1
vulnerability VCID-k4wn-j55z-b3dk
2
vulnerability VCID-p41w-msyv-u7bk
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/libcommons-compress-java@1.22-1%3Fdistro=trixie
3
url pkg:deb/debian/libcommons-compress-java@1.27.1-2?distro=trixie
purl pkg:deb/debian/libcommons-compress-java@1.27.1-2?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/libcommons-compress-java@1.27.1-2%3Fdistro=trixie
aliases CVE-2012-2098, GHSA-6fxm-66hq-fc96
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-h5ex-bm2j-fken
Risk_scorenull
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:deb/debian/libcommons-compress-java@1.4.1-1%3Fdistro=trixie