Package Instance
Lookup for vulnerable packages by Package URL.
GET /api/packages/934143?format=api
{ "url": "http://public2.vulnerablecode.io/api/packages/934143?format=api", "purl": "pkg:deb/debian/openvswitch@2.8.1%2Bdfsg1-2?distro=trixie", "type": "deb", "namespace": "debian", "name": "openvswitch", "version": "2.8.1+dfsg1-2", "qualifiers": { "distro": "trixie" }, "subpath": "", "is_vulnerable": false, "next_non_vulnerable_version": "2.10.0+2018.08.28+git.8ca7c82b7d+ds1-1", "latest_non_vulnerable_version": "3.7.1-2", "affected_by_vulnerabilities": [], "fixing_vulnerabilities": [ { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/84284?format=api", "vulnerability_id": "VCID-21ps-f19w-87hx", "summary": "openvswitch: Buffer over-read while parsing the group mod OpenFlow message", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9265.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.6", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9265.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2017-9265", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.01417", "scoring_system": "epss", "scoring_elements": "0.80511", "published_at": "2026-04-01T12:55:00Z" }, { "value": "0.01417", "scoring_system": "epss", "scoring_elements": "0.80566", "published_at": "2026-04-13T12:55:00Z" }, { "value": "0.01417", "scoring_system": "epss", "scoring_elements": "0.80518", "published_at": "2026-04-02T12:55:00Z" }, { "value": "0.01417", "scoring_system": "epss", "scoring_elements": "0.8054", "published_at": "2026-04-04T12:55:00Z" }, { "value": "0.01417", "scoring_system": "epss", "scoring_elements": "0.80532", "published_at": "2026-04-07T12:55:00Z" }, { "value": "0.01417", "scoring_system": "epss", "scoring_elements": "0.80561", "published_at": "2026-04-08T12:55:00Z" }, { "value": "0.01417", "scoring_system": "epss", "scoring_elements": "0.80571", "published_at": "2026-04-09T12:55:00Z" }, { "value": "0.01417", "scoring_system": "epss", "scoring_elements": "0.80588", "published_at": "2026-04-11T12:55:00Z" }, { "value": "0.01417", "scoring_system": "epss", "scoring_elements": "0.80574", "published_at": "2026-04-12T12:55:00Z" }, { "value": "0.01532", "scoring_system": "epss", "scoring_elements": "0.81464", "published_at": "2026-05-12T12:55:00Z" }, { "value": "0.01532", "scoring_system": "epss", "scoring_elements": "0.81393", "published_at": "2026-04-29T12:55:00Z" }, { "value": "0.01532", "scoring_system": "epss", "scoring_elements": "0.81409", "published_at": "2026-05-05T12:55:00Z" }, { "value": "0.01532", "scoring_system": "epss", "scoring_elements": "0.81429", "published_at": "2026-05-07T12:55:00Z" }, { "value": "0.01532", "scoring_system": "epss", "scoring_elements": "0.81451", "published_at": "2026-05-09T12:55:00Z" }, { "value": "0.01532", "scoring_system": "epss", "scoring_elements": "0.81446", "published_at": "2026-05-11T12:55:00Z" }, { "value": "0.01532", "scoring_system": "epss", "scoring_elements": "0.81381", "published_at": "2026-04-24T12:55:00Z" }, { "value": "0.01532", "scoring_system": "epss", "scoring_elements": "0.81388", "published_at": "2026-04-26T12:55:00Z" }, { "value": "0.01843", "scoring_system": "epss", "scoring_elements": "0.83003", "published_at": "2026-04-16T12:55:00Z" }, { "value": "0.01843", "scoring_system": "epss", "scoring_elements": "0.83002", "published_at": "2026-04-18T12:55:00Z" }, { "value": "0.01843", "scoring_system": "epss", "scoring_elements": "0.83006", "published_at": "2026-04-21T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2017-9265" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9265", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9265" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.8", "scoring_system": "cvssv2", "scoring_elements": "AV:N/AC:M/Au:N/C:P/I:N/A:P" }, { "value": "6.5", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1457335", "reference_id": "1457335", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1457335" }, { "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=863662", "reference_id": "863662", "reference_type": "", "scores": [], "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=863662" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2017:2418", "reference_id": "RHSA-2017:2418", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2017:2418" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2017:2553", "reference_id": "RHSA-2017:2553", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2017:2553" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2017:2648", "reference_id": "RHSA-2017:2648", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2017:2648" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2017:2665", "reference_id": "RHSA-2017:2665", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2017:2665" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2017:2692", "reference_id": "RHSA-2017:2692", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2017:2692" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2017:2698", "reference_id": "RHSA-2017:2698", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2017:2698" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2017:2727", "reference_id": "RHSA-2017:2727", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2017:2727" }, { "reference_url": "https://usn.ubuntu.com/3450-1/", "reference_id": "USN-3450-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/3450-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/934143?format=api", "purl": "pkg:deb/debian/openvswitch@2.8.1%2Bdfsg1-2?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openvswitch@2.8.1%252Bdfsg1-2%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/934137?format=api", "purl": "pkg:deb/debian/openvswitch@2.15.0%2Bds1-2%2Bdeb11u5?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-y5t4-51s4-zqer" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openvswitch@2.15.0%252Bds1-2%252Bdeb11u5%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/934135?format=api", "purl": "pkg:deb/debian/openvswitch@3.1.0-2%2Bdeb12u1?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-y5t4-51s4-zqer" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openvswitch@3.1.0-2%252Bdeb12u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/934139?format=api", "purl": "pkg:deb/debian/openvswitch@3.5.0-1?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-y5t4-51s4-zqer" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openvswitch@3.5.0-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/934138?format=api", "purl": "pkg:deb/debian/openvswitch@3.7.1-1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openvswitch@3.7.1-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1067597?format=api", "purl": "pkg:deb/debian/openvswitch@3.7.1-2?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openvswitch@3.7.1-2%3Fdistro=trixie" } ], "aliases": [ "CVE-2017-9265" ], "risk_score": 2.5, "exploitability": "0.5", "weighted_severity": "5.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-21ps-f19w-87hx" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/84348?format=api", "vulnerability_id": "VCID-4rhb-vhvc-v3cx", "summary": "openvswitch: Integer underflow in the ofputil_pull_queue_get_config_reply10 function", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9214.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9214.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2017-9214", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.0339", "scoring_system": "epss", "scoring_elements": "0.8735", "published_at": "2026-04-01T12:55:00Z" }, { "value": "0.0339", "scoring_system": "epss", "scoring_elements": "0.87402", "published_at": "2026-04-13T12:55:00Z" }, { "value": "0.0339", "scoring_system": "epss", "scoring_elements": "0.87415", "published_at": "2026-04-21T12:55:00Z" }, { "value": "0.0339", "scoring_system": "epss", "scoring_elements": "0.87431", "published_at": "2026-04-24T12:55:00Z" }, { "value": "0.0339", "scoring_system": "epss", "scoring_elements": "0.87437", "published_at": "2026-04-29T12:55:00Z" }, { "value": "0.0339", "scoring_system": "epss", "scoring_elements": "0.87451", "published_at": "2026-05-05T12:55:00Z" }, { "value": "0.0339", "scoring_system": "epss", "scoring_elements": "0.87465", "published_at": "2026-05-07T12:55:00Z" }, { "value": "0.0339", "scoring_system": "epss", "scoring_elements": "0.87359", "published_at": "2026-04-02T12:55:00Z" }, { "value": "0.0339", "scoring_system": "epss", "scoring_elements": "0.87375", "published_at": "2026-04-04T12:55:00Z" }, { "value": "0.0339", "scoring_system": "epss", "scoring_elements": "0.87374", "published_at": "2026-04-07T12:55:00Z" }, { "value": "0.0339", "scoring_system": "epss", "scoring_elements": "0.87393", "published_at": "2026-04-08T12:55:00Z" }, { "value": "0.0339", "scoring_system": "epss", "scoring_elements": "0.87399", "published_at": "2026-04-09T12:55:00Z" }, { "value": "0.0339", "scoring_system": "epss", "scoring_elements": "0.87412", "published_at": "2026-04-11T12:55:00Z" }, { "value": "0.0339", "scoring_system": "epss", "scoring_elements": "0.87406", "published_at": "2026-04-12T12:55:00Z" }, { "value": "0.0339", "scoring_system": "epss", "scoring_elements": "0.87417", "published_at": "2026-04-16T12:55:00Z" }, { "value": "0.0339", "scoring_system": "epss", "scoring_elements": "0.8742", "published_at": "2026-04-18T12:55:00Z" }, { "value": "0.04372", "scoring_system": "epss", "scoring_elements": "0.8904", "published_at": "2026-05-12T12:55:00Z" }, { "value": "0.04372", "scoring_system": "epss", "scoring_elements": "0.89036", "published_at": "2026-05-09T12:55:00Z" }, { "value": "0.04372", "scoring_system": "epss", "scoring_elements": "0.8903", "published_at": "2026-05-11T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2017-9214" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9214", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9214" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.8", "scoring_system": "cvssv2", "scoring_elements": "AV:N/AC:M/Au:N/C:P/I:P/A:P" }, { "value": "7.3", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1456795", "reference_id": "1456795", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1456795" }, { "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=863228", "reference_id": "863228", "reference_type": "", "scores": [], "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=863228" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2017:2418", "reference_id": "RHSA-2017:2418", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2017:2418" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2017:2553", "reference_id": "RHSA-2017:2553", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2017:2553" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2017:2648", "reference_id": "RHSA-2017:2648", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2017:2648" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2017:2665", "reference_id": "RHSA-2017:2665", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2017:2665" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2017:2692", "reference_id": "RHSA-2017:2692", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2017:2692" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2017:2698", "reference_id": "RHSA-2017:2698", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2017:2698" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2017:2727", "reference_id": "RHSA-2017:2727", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2017:2727" }, { "reference_url": "https://usn.ubuntu.com/3450-1/", "reference_id": "USN-3450-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/3450-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/934143?format=api", "purl": "pkg:deb/debian/openvswitch@2.8.1%2Bdfsg1-2?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openvswitch@2.8.1%252Bdfsg1-2%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/934137?format=api", "purl": "pkg:deb/debian/openvswitch@2.15.0%2Bds1-2%2Bdeb11u5?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-y5t4-51s4-zqer" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openvswitch@2.15.0%252Bds1-2%252Bdeb11u5%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/934135?format=api", "purl": "pkg:deb/debian/openvswitch@3.1.0-2%2Bdeb12u1?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-y5t4-51s4-zqer" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openvswitch@3.1.0-2%252Bdeb12u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/934139?format=api", "purl": "pkg:deb/debian/openvswitch@3.5.0-1?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-y5t4-51s4-zqer" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openvswitch@3.5.0-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/934138?format=api", "purl": "pkg:deb/debian/openvswitch@3.7.1-1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openvswitch@3.7.1-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1067597?format=api", "purl": "pkg:deb/debian/openvswitch@3.7.1-2?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openvswitch@3.7.1-2%3Fdistro=trixie" } ], "aliases": [ "CVE-2017-9214" ], "risk_score": 3.4, "exploitability": "0.5", "weighted_severity": "6.8", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-4rhb-vhvc-v3cx" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/84283?format=api", "vulnerability_id": "VCID-qrfh-87d5-ybh6", "summary": "openvswitch: Invalid processing of a malicious OpenFlow role status message", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9263.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9263.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2017-9263", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00126", "scoring_system": "epss", "scoring_elements": "0.31364", "published_at": "2026-05-12T12:55:00Z" }, { "value": "0.00126", "scoring_system": "epss", "scoring_elements": "0.31354", "published_at": "2026-05-05T12:55:00Z" }, { "value": "0.00126", "scoring_system": "epss", "scoring_elements": "0.31424", "published_at": "2026-05-07T12:55:00Z" }, { "value": "0.00126", "scoring_system": "epss", "scoring_elements": "0.31433", "published_at": "2026-05-09T12:55:00Z" }, { "value": "0.00126", "scoring_system": "epss", "scoring_elements": "0.3134", "published_at": "2026-05-11T12:55:00Z" }, { "value": "0.00141", "scoring_system": "epss", "scoring_elements": "0.34381", "published_at": "2026-04-18T12:55:00Z" }, { "value": "0.00141", "scoring_system": "epss", "scoring_elements": "0.3434", "published_at": "2026-04-21T12:55:00Z" }, { "value": "0.00141", "scoring_system": "epss", "scoring_elements": "0.33968", "published_at": "2026-04-24T12:55:00Z" }, { "value": "0.00141", "scoring_system": "epss", "scoring_elements": "0.33948", "published_at": "2026-04-26T12:55:00Z" }, { "value": "0.00141", "scoring_system": "epss", "scoring_elements": "0.33865", "published_at": "2026-04-29T12:55:00Z" }, { "value": "0.00141", "scoring_system": "epss", "scoring_elements": "0.34394", "published_at": "2026-04-16T12:55:00Z" }, { "value": "0.00248", "scoring_system": "epss", "scoring_elements": "0.48037", "published_at": "2026-04-01T12:55:00Z" }, { "value": "0.00248", "scoring_system": "epss", "scoring_elements": "0.48096", "published_at": "2026-04-04T12:55:00Z" }, { "value": "0.00248", "scoring_system": "epss", "scoring_elements": "0.48099", "published_at": "2026-04-08T12:55:00Z" }, { "value": "0.00248", "scoring_system": "epss", "scoring_elements": "0.48093", "published_at": "2026-04-09T12:55:00Z" }, { "value": "0.00248", "scoring_system": "epss", "scoring_elements": "0.48117", "published_at": "2026-04-11T12:55:00Z" }, { "value": "0.00248", "scoring_system": "epss", "scoring_elements": "0.48092", "published_at": "2026-04-12T12:55:00Z" }, { "value": "0.00248", "scoring_system": "epss", "scoring_elements": "0.48103", "published_at": "2026-04-13T12:55:00Z" }, { "value": "0.00248", "scoring_system": "epss", "scoring_elements": "0.48075", "published_at": "2026-04-02T12:55:00Z" }, { "value": "0.00248", "scoring_system": "epss", "scoring_elements": "0.48046", "published_at": "2026-04-07T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2017-9263" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9263", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9263" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv2", "scoring_elements": "AV:N/AC:M/Au:N/C:N/I:N/A:P" }, { "value": "5.3", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1457327", "reference_id": "1457327", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1457327" }, { "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=863655", "reference_id": "863655", "reference_type": "", "scores": [], "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=863655" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2017:2418", "reference_id": "RHSA-2017:2418", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2017:2418" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2017:2553", "reference_id": "RHSA-2017:2553", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2017:2553" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2017:2648", "reference_id": "RHSA-2017:2648", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2017:2648" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2017:2665", "reference_id": "RHSA-2017:2665", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2017:2665" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2017:2692", "reference_id": "RHSA-2017:2692", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2017:2692" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2017:2698", "reference_id": "RHSA-2017:2698", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2017:2698" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2017:2727", "reference_id": "RHSA-2017:2727", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2017:2727" }, { "reference_url": "https://usn.ubuntu.com/3450-1/", "reference_id": "USN-3450-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/3450-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/934143?format=api", "purl": "pkg:deb/debian/openvswitch@2.8.1%2Bdfsg1-2?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openvswitch@2.8.1%252Bdfsg1-2%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/934137?format=api", "purl": "pkg:deb/debian/openvswitch@2.15.0%2Bds1-2%2Bdeb11u5?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-y5t4-51s4-zqer" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openvswitch@2.15.0%252Bds1-2%252Bdeb11u5%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/934135?format=api", "purl": "pkg:deb/debian/openvswitch@3.1.0-2%2Bdeb12u1?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-y5t4-51s4-zqer" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openvswitch@3.1.0-2%252Bdeb12u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/934139?format=api", "purl": "pkg:deb/debian/openvswitch@3.5.0-1?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-y5t4-51s4-zqer" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openvswitch@3.5.0-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/934138?format=api", "purl": "pkg:deb/debian/openvswitch@3.7.1-1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openvswitch@3.7.1-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1067597?format=api", "purl": "pkg:deb/debian/openvswitch@3.7.1-2?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openvswitch@3.7.1-2%3Fdistro=trixie" } ], "aliases": [ "CVE-2017-9263" ], "risk_score": 2.6, "exploitability": "0.5", "weighted_severity": "5.3", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-qrfh-87d5-ybh6" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/83947?format=api", "vulnerability_id": "VCID-s6b4-xqmn-w3dc", "summary": "openvswitch: Multiple memory leaks in lib/ofp-util.c while parsing malformed OpenFlow group mod messages", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14970.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "2.2", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14970.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2017-14970", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00512", "scoring_system": "epss", "scoring_elements": "0.66399", "published_at": "2026-04-01T12:55:00Z" }, { "value": "0.00512", "scoring_system": "epss", "scoring_elements": "0.66608", "published_at": "2026-05-12T12:55:00Z" }, { "value": "0.00512", "scoring_system": "epss", "scoring_elements": "0.66526", "published_at": "2026-05-05T12:55:00Z" }, { "value": "0.00512", "scoring_system": "epss", "scoring_elements": "0.66571", "published_at": "2026-05-07T12:55:00Z" }, { "value": "0.00512", "scoring_system": "epss", "scoring_elements": "0.66615", "published_at": "2026-05-09T12:55:00Z" }, { "value": "0.00512", "scoring_system": "epss", "scoring_elements": "0.66588", "published_at": "2026-05-11T12:55:00Z" }, { "value": "0.00512", "scoring_system": "epss", "scoring_elements": "0.66438", "published_at": "2026-04-02T12:55:00Z" }, { "value": "0.00512", "scoring_system": "epss", "scoring_elements": "0.66464", "published_at": "2026-04-04T12:55:00Z" }, { "value": "0.00512", "scoring_system": "epss", "scoring_elements": "0.66435", "published_at": "2026-04-07T12:55:00Z" }, { "value": "0.00512", "scoring_system": "epss", "scoring_elements": "0.66484", "published_at": "2026-04-08T12:55:00Z" }, { "value": "0.00512", "scoring_system": "epss", "scoring_elements": "0.66497", "published_at": "2026-04-09T12:55:00Z" }, { "value": "0.00512", "scoring_system": "epss", "scoring_elements": "0.66517", "published_at": "2026-04-11T12:55:00Z" }, { "value": "0.00512", "scoring_system": "epss", "scoring_elements": "0.66505", "published_at": "2026-04-12T12:55:00Z" }, { "value": "0.00512", "scoring_system": "epss", "scoring_elements": "0.66474", "published_at": "2026-04-13T12:55:00Z" }, { "value": "0.00512", "scoring_system": "epss", "scoring_elements": "0.66509", "published_at": "2026-04-16T12:55:00Z" }, { "value": "0.00512", "scoring_system": "epss", "scoring_elements": "0.66527", "published_at": "2026-04-18T12:55:00Z" }, { "value": "0.00512", "scoring_system": "epss", "scoring_elements": "0.66511", "published_at": "2026-04-21T12:55:00Z" }, { "value": "0.00512", "scoring_system": "epss", "scoring_elements": "0.66536", "published_at": "2026-04-24T12:55:00Z" }, { "value": "0.00512", "scoring_system": "epss", "scoring_elements": "0.66551", "published_at": "2026-04-26T12:55:00Z" }, { "value": "0.00512", "scoring_system": "epss", "scoring_elements": "0.66552", "published_at": "2026-04-29T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2017-14970" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14970", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14970" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "5", "scoring_system": "cvssv2", "scoring_elements": "AV:N/AC:L/Au:N/C:N/I:N/A:P" }, { "value": "5.3", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://mail.openvswitch.org/pipermail/ovs-dev/2017-September/339085.html", "reference_id": "", "reference_type": "", "scores": [], "url": "https://mail.openvswitch.org/pipermail/ovs-dev/2017-September/339085.html" }, { "reference_url": "https://mail.openvswitch.org/pipermail/ovs-dev/2017-September/339086.html", "reference_id": "", "reference_type": "", "scores": [], "url": "https://mail.openvswitch.org/pipermail/ovs-dev/2017-September/339086.html" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1497966", "reference_id": "1497966", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1497966" }, { "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=877543", "reference_id": "877543", "reference_type": "", "scores": [], "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=877543" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:openvswitch:openvswitch:*:*:*:*:*:*:*:*", "reference_id": "cpe:2.3:a:openvswitch:openvswitch:*:*:*:*:*:*:*:*", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:openvswitch:openvswitch:*:*:*:*:*:*:*:*" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2017-14970", "reference_id": "CVE-2017-14970", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv2", "scoring_elements": "AV:N/AC:M/Au:N/C:N/I:N/A:P" }, { "value": "5.9", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-14970" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/934143?format=api", "purl": "pkg:deb/debian/openvswitch@2.8.1%2Bdfsg1-2?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openvswitch@2.8.1%252Bdfsg1-2%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/934137?format=api", "purl": "pkg:deb/debian/openvswitch@2.15.0%2Bds1-2%2Bdeb11u5?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-y5t4-51s4-zqer" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openvswitch@2.15.0%252Bds1-2%252Bdeb11u5%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/934135?format=api", "purl": "pkg:deb/debian/openvswitch@3.1.0-2%2Bdeb12u1?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-y5t4-51s4-zqer" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openvswitch@3.1.0-2%252Bdeb12u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/934139?format=api", "purl": "pkg:deb/debian/openvswitch@3.5.0-1?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-y5t4-51s4-zqer" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openvswitch@3.5.0-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/934138?format=api", "purl": "pkg:deb/debian/openvswitch@3.7.1-1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openvswitch@3.7.1-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1067597?format=api", "purl": "pkg:deb/debian/openvswitch@3.7.1-2?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openvswitch@3.7.1-2%3Fdistro=trixie" } ], "aliases": [ "CVE-2017-14970" ], "risk_score": 2.6, "exploitability": "0.5", "weighted_severity": "5.3", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-s6b4-xqmn-w3dc" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/84539?format=api", "vulnerability_id": "VCID-xcxc-et9w-uqhd", "summary": "openvswitch: Buffer over-read while parsing malformed TCP, UDP and IPv6 packets", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9264.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.6", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9264.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2017-9264", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00786", "scoring_system": "epss", "scoring_elements": "0.7376", "published_at": "2026-04-01T12:55:00Z" }, { "value": "0.00786", "scoring_system": "epss", "scoring_elements": "0.7377", "published_at": "2026-04-02T12:55:00Z" }, { "value": "0.00786", "scoring_system": "epss", "scoring_elements": "0.73793", "published_at": "2026-04-04T12:55:00Z" }, { "value": "0.00786", "scoring_system": "epss", "scoring_elements": "0.73764", "published_at": "2026-04-07T12:55:00Z" }, { "value": "0.00786", "scoring_system": "epss", "scoring_elements": "0.73799", "published_at": "2026-04-08T12:55:00Z" }, { "value": "0.00786", "scoring_system": "epss", "scoring_elements": "0.73812", "published_at": "2026-04-09T12:55:00Z" }, { "value": "0.00786", "scoring_system": "epss", "scoring_elements": "0.73834", "published_at": "2026-04-11T12:55:00Z" }, { "value": "0.00786", "scoring_system": "epss", "scoring_elements": "0.73816", "published_at": "2026-04-12T12:55:00Z" }, { "value": "0.00786", "scoring_system": "epss", "scoring_elements": "0.73807", "published_at": "2026-04-13T12:55:00Z" }, { "value": "0.00786", "scoring_system": "epss", "scoring_elements": "0.7385", "published_at": "2026-04-16T12:55:00Z" }, { "value": "0.00786", "scoring_system": "epss", "scoring_elements": "0.73858", "published_at": "2026-04-18T12:55:00Z" }, { "value": "0.00786", "scoring_system": "epss", "scoring_elements": "0.73849", "published_at": "2026-04-21T12:55:00Z" }, { "value": "0.00786", "scoring_system": "epss", "scoring_elements": "0.73884", "published_at": "2026-04-24T12:55:00Z" }, { "value": "0.00786", "scoring_system": "epss", "scoring_elements": "0.73893", "published_at": "2026-04-29T12:55:00Z" }, { "value": "0.00786", "scoring_system": "epss", "scoring_elements": "0.73888", "published_at": "2026-05-05T12:55:00Z" }, { "value": "0.00786", "scoring_system": "epss", "scoring_elements": "0.73914", "published_at": "2026-05-07T12:55:00Z" }, { "value": "0.00786", "scoring_system": "epss", "scoring_elements": "0.73938", "published_at": "2026-05-09T12:55:00Z" }, { "value": "0.00786", "scoring_system": "epss", "scoring_elements": "0.73901", "published_at": "2026-05-11T12:55:00Z" }, { "value": "0.00786", "scoring_system": "epss", "scoring_elements": "0.73924", "published_at": "2026-05-12T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2017-9264" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9264", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9264" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1457329", "reference_id": "1457329", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1457329" }, { "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=863661", "reference_id": "863661", "reference_type": "", "scores": [], "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=863661" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2017:2418", "reference_id": "RHSA-2017:2418", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2017:2418" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2017:2648", "reference_id": "RHSA-2017:2648", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2017:2648" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2017:2727", "reference_id": "RHSA-2017:2727", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2017:2727" }, { "reference_url": "https://usn.ubuntu.com/3450-1/", "reference_id": "USN-3450-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/3450-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/934143?format=api", "purl": "pkg:deb/debian/openvswitch@2.8.1%2Bdfsg1-2?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openvswitch@2.8.1%252Bdfsg1-2%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/934137?format=api", "purl": "pkg:deb/debian/openvswitch@2.15.0%2Bds1-2%2Bdeb11u5?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-y5t4-51s4-zqer" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openvswitch@2.15.0%252Bds1-2%252Bdeb11u5%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/934135?format=api", "purl": "pkg:deb/debian/openvswitch@3.1.0-2%2Bdeb12u1?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-y5t4-51s4-zqer" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openvswitch@3.1.0-2%252Bdeb12u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/934139?format=api", "purl": "pkg:deb/debian/openvswitch@3.5.0-1?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-y5t4-51s4-zqer" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openvswitch@3.5.0-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/934138?format=api", "purl": "pkg:deb/debian/openvswitch@3.7.1-1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openvswitch@3.7.1-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1067597?format=api", "purl": "pkg:deb/debian/openvswitch@3.7.1-2?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openvswitch@3.7.1-2%3Fdistro=trixie" } ], "aliases": [ "CVE-2017-9264" ], "risk_score": 2.5, "exploitability": "0.5", "weighted_severity": "5.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-xcxc-et9w-uqhd" } ], "risk_score": null, "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/openvswitch@2.8.1%252Bdfsg1-2%3Fdistro=trixie" }