{"url":"http://public2.vulnerablecode.io/api/packages/937104?format=json","purl":"pkg:deb/debian/qemu@1:3.1%2Bdfsg-3?distro=trixie","type":"deb","namespace":"debian","name":"qemu","version":"1:3.1+dfsg-3","qualifiers":{"distro":"trixie"},"subpath":"","is_vulnerable":false,"next_non_vulnerable_version":"1:3.1+dfsg-5","latest_non_vulnerable_version":"1:11.0.0+ds-1","affected_by_vulnerabilities":[],"fixing_vulnerabilities":[{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/73636?format=json","vulnerability_id":"VCID-mzsa-tcqf-effc","summary":"security update","references":[{"reference_url":"http://lists.opensuse.org/opensuse-security-announce/2019-02/msg00073.html","reference_id":"","reference_type":"","scores":[],"url":"http://lists.opensuse.org/opensuse-security-announce/2019-02/msg00073.html"},{"reference_url":"http://lists.opensuse.org/opensuse-security-announce/2019-03/msg00042.html","reference_id":"","reference_type":"","scores":[],"url":"http://lists.opensuse.org/opensuse-security-announce/2019-03/msg00042.html"},{"reference_url":"http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00072.html","reference_id":"","reference_type":"","scores":[],"url":"http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00072.html"},{"reference_url":"http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00001.html","reference_id":"","reference_type":"","scores":[],"url":"http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00001.html"},{"reference_url":"http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00007.html","reference_id":"","reference_type":"","scores":[],"url":"http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00007.html"},{"reference_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-6778.json","reference_id":"","reference_type":"","scores":[{"value":"7.8","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H"}],"url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-6778.json"},{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2019-6778","reference_id":"","reference_type":"","scores":[{"value":"0.00076","scoring_system":"epss","scoring_elements":"0.22685","published_at":"2026-04-01T12:55:00Z"},{"value":"0.00076","scoring_system":"epss","scoring_elements":"0.22453","published_at":"2026-05-05T12:55:00Z"},{"value":"0.00076","scoring_system":"epss","scoring_elements":"0.22559","published_at":"2026-04-24T12:55:00Z"},{"value":"0.00076","scoring_system":"epss","scoring_elements":"0.2255","published_at":"2026-04-26T12:55:00Z"},{"value":"0.00076","scoring_system":"epss","scoring_elements":"0.22548","published_at":"2026-04-29T12:55:00Z"},{"value":"0.00076","scoring_system":"epss","scoring_elements":"0.22861","published_at":"2026-04-02T12:55:00Z"},{"value":"0.00076","scoring_system":"epss","scoring_elements":"0.22905","published_at":"2026-04-04T12:55:00Z"},{"value":"0.00076","scoring_system":"epss","scoring_elements":"0.22697","published_at":"2026-04-07T12:55:00Z"},{"value":"0.00076","scoring_system":"epss","scoring_elements":"0.22773","published_at":"2026-04-08T12:55:00Z"},{"value":"0.00076","scoring_system":"epss","scoring_elements":"0.22825","published_at":"2026-04-09T12:55:00Z"},{"value":"0.00076","scoring_system":"epss","scoring_elements":"0.22847","published_at":"2026-04-11T12:55:00Z"},{"value":"0.00076","scoring_system":"epss","scoring_elements":"0.2281","published_at":"2026-04-12T12:55:00Z"},{"value":"0.00076","scoring_system":"epss","scoring_elements":"0.22753","published_at":"2026-04-13T12:55:00Z"},{"value":"0.00076","scoring_system":"epss","scoring_elements":"0.22767","published_at":"2026-04-16T12:55:00Z"},{"value":"0.00076","scoring_system":"epss","scoring_elements":"0.22762","published_at":"2026-04-18T12:55:00Z"},{"value":"0.00076","scoring_system":"epss","scoring_elements":"0.22721","published_at":"2026-04-21T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2019-6778"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-11806","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-11806"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12617","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12617"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-16872","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-16872"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-17958","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-17958"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-18849","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-18849"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-18954","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-18954"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-19364","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-19364"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-19489","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-19489"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12155","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12155"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-3812","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-3812"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-6778","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-6778"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9824","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9824"},{"reference_url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml","reference_id":"","reference_type":"","scores":[{"value":"7.8","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H"}],"url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml"},{"reference_url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CGCFIFSIWUREEQQOZDZFBYKWZHXCWBZN/","reference_id":"","reference_type":"","scores":[],"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CGCFIFSIWUREEQQOZDZFBYKWZHXCWBZN/"},{"reference_url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KJMTVGDLA654HNCDGLCUEIP36SNJEKK7/","reference_id":"","reference_type":"","scores":[],"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KJMTVGDLA654HNCDGLCUEIP36SNJEKK7/"},{"reference_url":"https://lists.gnu.org/archive/html/qemu-devel/2019-01/msg03132.html","reference_id":"","reference_type":"","scores":[],"url":"https://lists.gnu.org/archive/html/qemu-devel/2019-01/msg03132.html"},{"reference_url":"https://seclists.org/bugtraq/2019/May/76","reference_id":"","reference_type":"","scores":[],"url":"https://seclists.org/bugtraq/2019/May/76"},{"reference_url":"https://www.debian.org/security/2019/dsa-4454","reference_id":"","reference_type":"","scores":[],"url":"https://www.debian.org/security/2019/dsa-4454"},{"reference_url":"http://www.openwall.com/lists/oss-security/2019/01/24/5","reference_id":"","reference_type":"","scores":[],"url":"http://www.openwall.com/lists/oss-security/2019/01/24/5"},{"reference_url":"http://www.securityfocus.com/bid/106758","reference_id":"","reference_type":"","scores":[],"url":"http://www.securityfocus.com/bid/106758"},{"reference_url":"https://bugzilla.redhat.com/show_bug.cgi?id=1664205","reference_id":"1664205","reference_type":"","scores":[],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1664205"},{"reference_url":"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=921525","reference_id":"921525","reference_type":"","scores":[],"url":"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=921525"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:qemu:qemu:3.0.0:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:qemu:qemu:3.0.0:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:qemu:qemu:3.0.0:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*","reference_id":"cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*","reference_id":"cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*","reference_id":"cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:canonical:ubuntu_linux:18.10:*:*:*:*:*:*:*","reference_id":"cpe:2.3:o:canonical:ubuntu_linux:18.10:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:canonical:ubuntu_linux:18.10:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:fedoraproject:fedora:29:*:*:*:*:*:*:*","reference_id":"cpe:2.3:o:fedoraproject:fedora:29:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:fedoraproject:fedora:29:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:fedoraproject:fedora:30:*:*:*:*:*:*:*","reference_id":"cpe:2.3:o:fedoraproject:fedora:30:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:fedoraproject:fedora:30:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:opensuse:leap:15.0:*:*:*:*:*:*:*","reference_id":"cpe:2.3:o:opensuse:leap:15.0:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:opensuse:leap:15.0:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:opensuse:leap:42.3:*:*:*:*:*:*:*","reference_id":"cpe:2.3:o:opensuse:leap:42.3:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:opensuse:leap:42.3:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2019-6778","reference_id":"CVE-2019-6778","reference_type":"","scores":[{"value":"4.6","scoring_system":"cvssv2","scoring_elements":"AV:L/AC:L/Au:N/C:P/I:P/A:P"},{"value":"7.8","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-6778"},{"reference_url":"https://access.redhat.com/errata/RHSA-2019:1883","reference_id":"RHSA-2019:1883","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2019:1883"},{"reference_url":"https://access.redhat.com/errata/RHSA-2019:1968","reference_id":"RHSA-2019:1968","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2019:1968"},{"reference_url":"https://access.redhat.com/errata/RHSA-2019:2425","reference_id":"RHSA-2019:2425","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2019:2425"},{"reference_url":"https://access.redhat.com/errata/RHSA-2019:2892","reference_id":"RHSA-2019:2892","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2019:2892"},{"reference_url":"https://usn.ubuntu.com/3923-1/","reference_id":"USN-3923-1","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/3923-1/"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/1103054?format=json","purl":"pkg:deb/debian/qemu@1:11.0.0%2Bds-2?distro=trixie","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/qemu@1:11.0.0%252Bds-2%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/937104?format=json","purl":"pkg:deb/debian/qemu@1:3.1%2Bdfsg-3?distro=trixie","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/qemu@1:3.1%252Bdfsg-3%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/937037?format=json","purl":"pkg:deb/debian/qemu@1:5.2%2Bdfsg-11%2Bdeb11u3?distro=trixie","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-3kyg-9mf3-kfft"},{"vulnerability":"VCID-46gg-8h8g-2kf5"},{"vulnerability":"VCID-4mt9-kf9m-2fbz"},{"vulnerability":"VCID-6qnt-yaa3-p3bb"},{"vulnerability":"VCID-b6b6-s7cj-sygh"},{"vulnerability":"VCID-cenj-mz55-jbg6"},{"vulnerability":"VCID-d2ve-dnmj-4bbz"},{"vulnerability":"VCID-ej5p-r4az-6ud2"},{"vulnerability":"VCID-ewb7-nrtu-g7ex"},{"vulnerability":"VCID-gc6n-kgsc-f3b6"},{"vulnerability":"VCID-m47q-17n6-t7gg"},{"vulnerability":"VCID-mtj9-1cns-yybw"},{"vulnerability":"VCID-n71j-fz74-kyhf"},{"vulnerability":"VCID-p2dz-mtns-5bb4"},{"vulnerability":"VCID-ptty-88p4-ybe9"},{"vulnerability":"VCID-pxjg-chmx-nkdc"},{"vulnerability":"VCID-qh2s-apkz-sbaz"},{"vulnerability":"VCID-t58m-9jqp-43c9"},{"vulnerability":"VCID-t5gq-4bhn-gkej"},{"vulnerability":"VCID-uzxc-npak-yyc4"},{"vulnerability":"VCID-w7gc-1eh2-3ufu"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/qemu@1:5.2%252Bdfsg-11%252Bdeb11u3%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/937035?format=json","purl":"pkg:deb/debian/qemu@1:7.2%2Bdfsg-7%2Bdeb12u18?distro=trixie","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-46gg-8h8g-2kf5"},{"vulnerability":"VCID-4mt9-kf9m-2fbz"},{"vulnerability":"VCID-hkf8-96k7-kuc9"},{"vulnerability":"VCID-m47q-17n6-t7gg"},{"vulnerability":"VCID-n71j-fz74-kyhf"},{"vulnerability":"VCID-t58m-9jqp-43c9"},{"vulnerability":"VCID-uzxc-npak-yyc4"},{"vulnerability":"VCID-vcun-y6d5-6uby"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/qemu@1:7.2%252Bdfsg-7%252Bdeb12u18%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/937040?format=json","purl":"pkg:deb/debian/qemu@1:10.0.8%2Bds-0%2Bdeb13u1?distro=trixie","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-1j9f-u62h-rug2"},{"vulnerability":"VCID-46gg-8h8g-2kf5"},{"vulnerability":"VCID-4mt9-kf9m-2fbz"},{"vulnerability":"VCID-9szt-c829-zfdh"},{"vulnerability":"VCID-b6b6-s7cj-sygh"},{"vulnerability":"VCID-detn-3zsq-3qh7"},{"vulnerability":"VCID-m47q-17n6-t7gg"},{"vulnerability":"VCID-n71j-fz74-kyhf"},{"vulnerability":"VCID-n9n4-prkb-f3c6"},{"vulnerability":"VCID-vcun-y6d5-6uby"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/qemu@1:10.0.8%252Bds-0%252Bdeb13u1%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/937038?format=json","purl":"pkg:deb/debian/qemu@1:10.2.1%2Bds-1?distro=trixie","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-9szt-c829-zfdh"},{"vulnerability":"VCID-detn-3zsq-3qh7"},{"vulnerability":"VCID-m47q-17n6-t7gg"},{"vulnerability":"VCID-vcun-y6d5-6uby"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/qemu@1:10.2.1%252Bds-1%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/937039?format=json","purl":"pkg:deb/debian/qemu@1:10.2.2%2Bds-1?distro=trixie","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-1j9f-u62h-rug2"},{"vulnerability":"VCID-46gg-8h8g-2kf5"},{"vulnerability":"VCID-4mt9-kf9m-2fbz"},{"vulnerability":"VCID-b6b6-s7cj-sygh"},{"vulnerability":"VCID-n9n4-prkb-f3c6"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/qemu@1:10.2.2%252Bds-1%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/1076120?format=json","purl":"pkg:deb/debian/qemu@1:11.0.0%2Bds-1?distro=trixie","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/qemu@1:11.0.0%252Bds-1%3Fdistro=trixie"}],"aliases":["CVE-2019-6778"],"risk_score":3.5,"exploitability":"0.5","weighted_severity":"7.0","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-mzsa-tcqf-effc"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/82880?format=json","vulnerability_id":"VCID-zfwq-v3sh-kkbp","summary":"QEMU: scsi-generic: possible OOB access while handling inquiry request","references":[{"reference_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-6501.json","reference_id":"","reference_type":"","scores":[{"value":"2.8","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:L/A:N"}],"url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-6501.json"},{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2019-6501","reference_id":"","reference_type":"","scores":[{"value":"0.00119","scoring_system":"epss","scoring_elements":"0.30839","published_at":"2026-04-01T12:55:00Z"},{"value":"0.00119","scoring_system":"epss","scoring_elements":"0.30304","published_at":"2026-05-05T12:55:00Z"},{"value":"0.00119","scoring_system":"epss","scoring_elements":"0.30645","published_at":"2026-04-24T12:55:00Z"},{"value":"0.00119","scoring_system":"epss","scoring_elements":"0.30529","published_at":"2026-04-26T12:55:00Z"},{"value":"0.00119","scoring_system":"epss","scoring_elements":"0.30445","published_at":"2026-04-29T12:55:00Z"},{"value":"0.00119","scoring_system":"epss","scoring_elements":"0.30966","published_at":"2026-04-02T12:55:00Z"},{"value":"0.00119","scoring_system":"epss","scoring_elements":"0.31013","published_at":"2026-04-04T12:55:00Z"},{"value":"0.00119","scoring_system":"epss","scoring_elements":"0.30831","published_at":"2026-04-07T12:55:00Z"},{"value":"0.00119","scoring_system":"epss","scoring_elements":"0.30889","published_at":"2026-04-08T12:55:00Z"},{"value":"0.00119","scoring_system":"epss","scoring_elements":"0.30919","published_at":"2026-04-09T12:55:00Z"},{"value":"0.00119","scoring_system":"epss","scoring_elements":"0.30921","published_at":"2026-04-11T12:55:00Z"},{"value":"0.00119","scoring_system":"epss","scoring_elements":"0.30879","published_at":"2026-04-12T12:55:00Z"},{"value":"0.00119","scoring_system":"epss","scoring_elements":"0.30834","published_at":"2026-04-13T12:55:00Z"},{"value":"0.00119","scoring_system":"epss","scoring_elements":"0.30865","published_at":"2026-04-16T12:55:00Z"},{"value":"0.00119","scoring_system":"epss","scoring_elements":"0.30845","published_at":"2026-04-18T12:55:00Z"},{"value":"0.00119","scoring_system":"epss","scoring_elements":"0.3081","published_at":"2026-04-21T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2019-6501"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-6501","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-6501"},{"reference_url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml","reference_id":"","reference_type":"","scores":[{"value":"2.8","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:L/A:N"}],"url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml"},{"reference_url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KJMTVGDLA654HNCDGLCUEIP36SNJEKK7/","reference_id":"","reference_type":"","scores":[],"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KJMTVGDLA654HNCDGLCUEIP36SNJEKK7/"},{"reference_url":"https://lists.gnu.org/archive/html/qemu-devel/2019-01/msg02324.html","reference_id":"","reference_type":"","scores":[],"url":"https://lists.gnu.org/archive/html/qemu-devel/2019-01/msg02324.html"},{"reference_url":"https://security.netapp.com/advisory/ntap-20190411-0006/","reference_id":"","reference_type":"","scores":[],"url":"https://security.netapp.com/advisory/ntap-20190411-0006/"},{"reference_url":"http://www.openwall.com/lists/oss-security/2019/01/24/1","reference_id":"","reference_type":"","scores":[],"url":"http://www.openwall.com/lists/oss-security/2019/01/24/1"},{"reference_url":"https://bugzilla.redhat.com/show_bug.cgi?id=1668160","reference_id":"1668160","reference_type":"","scores":[],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1668160"},{"reference_url":"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=920222","reference_id":"920222","reference_type":"","scores":[],"url":"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=920222"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:qemu:qemu:3.1:*:*:*:*:*:*:*","reference_id":"cpe:2.3:a:qemu:qemu:3.1:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:qemu:qemu:3.1:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:fedoraproject:fedora:30:*:*:*:*:*:*:*","reference_id":"cpe:2.3:o:fedoraproject:fedora:30:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:fedoraproject:fedora:30:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2019-6501","reference_id":"CVE-2019-6501","reference_type":"","scores":[{"value":"2.1","scoring_system":"cvssv2","scoring_elements":"AV:L/AC:L/Au:N/C:N/I:N/A:P"},{"value":"5.5","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-6501"},{"reference_url":"https://access.redhat.com/errata/RHSA-2019:2166","reference_id":"RHSA-2019:2166","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2019:2166"},{"reference_url":"https://access.redhat.com/errata/RHSA-2019:2425","reference_id":"RHSA-2019:2425","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2019:2425"},{"reference_url":"https://access.redhat.com/errata/RHSA-2019:2553","reference_id":"RHSA-2019:2553","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2019:2553"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/1103054?format=json","purl":"pkg:deb/debian/qemu@1:11.0.0%2Bds-2?distro=trixie","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/qemu@1:11.0.0%252Bds-2%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/937104?format=json","purl":"pkg:deb/debian/qemu@1:3.1%2Bdfsg-3?distro=trixie","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/qemu@1:3.1%252Bdfsg-3%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/937037?format=json","purl":"pkg:deb/debian/qemu@1:5.2%2Bdfsg-11%2Bdeb11u3?distro=trixie","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-3kyg-9mf3-kfft"},{"vulnerability":"VCID-46gg-8h8g-2kf5"},{"vulnerability":"VCID-4mt9-kf9m-2fbz"},{"vulnerability":"VCID-6qnt-yaa3-p3bb"},{"vulnerability":"VCID-b6b6-s7cj-sygh"},{"vulnerability":"VCID-cenj-mz55-jbg6"},{"vulnerability":"VCID-d2ve-dnmj-4bbz"},{"vulnerability":"VCID-ej5p-r4az-6ud2"},{"vulnerability":"VCID-ewb7-nrtu-g7ex"},{"vulnerability":"VCID-gc6n-kgsc-f3b6"},{"vulnerability":"VCID-m47q-17n6-t7gg"},{"vulnerability":"VCID-mtj9-1cns-yybw"},{"vulnerability":"VCID-n71j-fz74-kyhf"},{"vulnerability":"VCID-p2dz-mtns-5bb4"},{"vulnerability":"VCID-ptty-88p4-ybe9"},{"vulnerability":"VCID-pxjg-chmx-nkdc"},{"vulnerability":"VCID-qh2s-apkz-sbaz"},{"vulnerability":"VCID-t58m-9jqp-43c9"},{"vulnerability":"VCID-t5gq-4bhn-gkej"},{"vulnerability":"VCID-uzxc-npak-yyc4"},{"vulnerability":"VCID-w7gc-1eh2-3ufu"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/qemu@1:5.2%252Bdfsg-11%252Bdeb11u3%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/937035?format=json","purl":"pkg:deb/debian/qemu@1:7.2%2Bdfsg-7%2Bdeb12u18?distro=trixie","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-46gg-8h8g-2kf5"},{"vulnerability":"VCID-4mt9-kf9m-2fbz"},{"vulnerability":"VCID-hkf8-96k7-kuc9"},{"vulnerability":"VCID-m47q-17n6-t7gg"},{"vulnerability":"VCID-n71j-fz74-kyhf"},{"vulnerability":"VCID-t58m-9jqp-43c9"},{"vulnerability":"VCID-uzxc-npak-yyc4"},{"vulnerability":"VCID-vcun-y6d5-6uby"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/qemu@1:7.2%252Bdfsg-7%252Bdeb12u18%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/937040?format=json","purl":"pkg:deb/debian/qemu@1:10.0.8%2Bds-0%2Bdeb13u1?distro=trixie","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-1j9f-u62h-rug2"},{"vulnerability":"VCID-46gg-8h8g-2kf5"},{"vulnerability":"VCID-4mt9-kf9m-2fbz"},{"vulnerability":"VCID-9szt-c829-zfdh"},{"vulnerability":"VCID-b6b6-s7cj-sygh"},{"vulnerability":"VCID-detn-3zsq-3qh7"},{"vulnerability":"VCID-m47q-17n6-t7gg"},{"vulnerability":"VCID-n71j-fz74-kyhf"},{"vulnerability":"VCID-n9n4-prkb-f3c6"},{"vulnerability":"VCID-vcun-y6d5-6uby"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/qemu@1:10.0.8%252Bds-0%252Bdeb13u1%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/937038?format=json","purl":"pkg:deb/debian/qemu@1:10.2.1%2Bds-1?distro=trixie","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-9szt-c829-zfdh"},{"vulnerability":"VCID-detn-3zsq-3qh7"},{"vulnerability":"VCID-m47q-17n6-t7gg"},{"vulnerability":"VCID-vcun-y6d5-6uby"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/qemu@1:10.2.1%252Bds-1%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/937039?format=json","purl":"pkg:deb/debian/qemu@1:10.2.2%2Bds-1?distro=trixie","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-1j9f-u62h-rug2"},{"vulnerability":"VCID-46gg-8h8g-2kf5"},{"vulnerability":"VCID-4mt9-kf9m-2fbz"},{"vulnerability":"VCID-b6b6-s7cj-sygh"},{"vulnerability":"VCID-n9n4-prkb-f3c6"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/qemu@1:10.2.2%252Bds-1%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/1076120?format=json","purl":"pkg:deb/debian/qemu@1:11.0.0%2Bds-1?distro=trixie","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/qemu@1:11.0.0%252Bds-1%3Fdistro=trixie"}],"aliases":["CVE-2019-6501"],"risk_score":2.5,"exploitability":"0.5","weighted_severity":"5.0","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-zfwq-v3sh-kkbp"}],"risk_score":null,"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/qemu@1:3.1%252Bdfsg-3%3Fdistro=trixie"}