Django REST framework

Vulnerability Instance

Lookup for vulnerabilities affecting packages.

Vulnerability_idVCID-8sey-6qs1-vbb5
SummaryMultiple integer overflows in inter-color spaces conversion tools in libtiff 3.8 through 3.8.2, 3.9, and 4.0 allow context-dependent attackers to execute arbitrary code via a TIFF image with large (1) width and (2) height values, which triggers a heap-based buffer overflow in the (a) cvt_whole_image function in tiff2rgba and (b) tiffcvt function in rgb2ycbcr.
Aliases
0
alias CVE-2009-2347
Fixed_packages
0
url pkg:deb/debian/tiff@3.8.2-13?distro=trixie
purl pkg:deb/debian/tiff@3.8.2-13?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/tiff@3.8.2-13%3Fdistro=trixie
1
url pkg:deb/debian/tiff@4.2.0-1%2Bdeb11u5?distro=trixie
purl pkg:deb/debian/tiff@4.2.0-1%2Bdeb11u5?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-5qdp-vzrd-uqgc
1
vulnerability VCID-5zvp-ysut-juep
2
vulnerability VCID-6hf4-rc1a-pbg6
3
vulnerability VCID-6v96-k8cs-13f7
4
vulnerability VCID-92dt-g6m8-fufk
5
vulnerability VCID-anfx-xj8v-kfg8
6
vulnerability VCID-c7nt-5d64-kkev
7
vulnerability VCID-d52s-g5c7-qka3
8
vulnerability VCID-fbks-9s7e-wfcj
9
vulnerability VCID-gyvd-4m8g-jkdu
10
vulnerability VCID-hhgz-j76b-k7d4
11
vulnerability VCID-kxdc-8rht-vfdy
12
vulnerability VCID-n3p5-9ykg-sufd
13
vulnerability VCID-nwgs-pqj7-xkbs
14
vulnerability VCID-su9v-ewt3-6ua8
15
vulnerability VCID-xg35-8jbc-wqa4
16
vulnerability VCID-xms6-c2j7-hfh8
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/tiff@4.2.0-1%252Bdeb11u5%3Fdistro=trixie
2
url pkg:deb/debian/tiff@4.5.0-6%2Bdeb12u4?distro=trixie
purl pkg:deb/debian/tiff@4.5.0-6%2Bdeb12u4?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-5qdp-vzrd-uqgc
1
vulnerability VCID-5zvp-ysut-juep
2
vulnerability VCID-6hf4-rc1a-pbg6
3
vulnerability VCID-6v96-k8cs-13f7
4
vulnerability VCID-92dt-g6m8-fufk
5
vulnerability VCID-c7nt-5d64-kkev
6
vulnerability VCID-cpk7-uyvf-3kb6
7
vulnerability VCID-d52s-g5c7-qka3
8
vulnerability VCID-fbks-9s7e-wfcj
9
vulnerability VCID-gyvd-4m8g-jkdu
10
vulnerability VCID-kxdc-8rht-vfdy
11
vulnerability VCID-n3p5-9ykg-sufd
12
vulnerability VCID-nwgs-pqj7-xkbs
13
vulnerability VCID-su9v-ewt3-6ua8
14
vulnerability VCID-xg35-8jbc-wqa4
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/tiff@4.5.0-6%252Bdeb12u4%3Fdistro=trixie
3
url pkg:deb/debian/tiff@4.7.0-3%2Bdeb13u2?distro=trixie
purl pkg:deb/debian/tiff@4.7.0-3%2Bdeb13u2?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-5qdp-vzrd-uqgc
1
vulnerability VCID-6hf4-rc1a-pbg6
2
vulnerability VCID-92dt-g6m8-fufk
3
vulnerability VCID-fbks-9s7e-wfcj
4
vulnerability VCID-n3p5-9ykg-sufd
5
vulnerability VCID-su9v-ewt3-6ua8
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/tiff@4.7.0-3%252Bdeb13u2%3Fdistro=trixie
4
url pkg:deb/debian/tiff@4.7.1-2?distro=trixie
purl pkg:deb/debian/tiff@4.7.1-2?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/tiff@4.7.1-2%3Fdistro=trixie
5
url pkg:ebuild/media-libs/tiff@4.0.2-r1
purl pkg:ebuild/media-libs/tiff@4.0.2-r1
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:ebuild/media-libs/tiff@4.0.2-r1
Affected_packages
0
url pkg:rpm/redhat/libtiff@3.5.7-33?arch=el3
purl pkg:rpm/redhat/libtiff@3.5.7-33?arch=el3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-8sey-6qs1-vbb5
1
vulnerability VCID-np9z-tebu-ckb1
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/libtiff@3.5.7-33%3Farch=el3
1
url pkg:rpm/redhat/libtiff@3.6.1-12.el4_8?arch=4
purl pkg:rpm/redhat/libtiff@3.6.1-12.el4_8?arch=4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-8sey-6qs1-vbb5
1
vulnerability VCID-np9z-tebu-ckb1
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/libtiff@3.6.1-12.el4_8%3Farch=4
2
url pkg:rpm/redhat/libtiff@3.8.2-7.el5_3?arch=4
purl pkg:rpm/redhat/libtiff@3.8.2-7.el5_3?arch=4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-8sey-6qs1-vbb5
1
vulnerability VCID-np9z-tebu-ckb1
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/libtiff@3.8.2-7.el5_3%3Farch=4
References
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-2347.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-2347.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2009-2347
reference_id
reference_type
scores
0
value 0.01061
scoring_system epss
scoring_elements 0.77985
published_at 2026-06-04T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2009-2347
2
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=510041
reference_id 510041
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=510041
3
reference_url https://security.gentoo.org/glsa/201209-02
reference_id GLSA-201209-02
reference_type
scores
url https://security.gentoo.org/glsa/201209-02
4
reference_url https://access.redhat.com/errata/RHSA-2009:1159
reference_id RHSA-2009:1159
reference_type
scores
url https://access.redhat.com/errata/RHSA-2009:1159
Weaknesses
0
cwe_id 190
name Integer Overflow or Wraparound
description The product performs a calculation that can produce an integer overflow or wraparound, when the logic assumes that the resulting value will always be larger than the original value. This can introduce other weaknesses when the calculation is used for resource management or execution control.
Exploits
Severity_range_scorenull
Exploitability0.5
Weighted_severity0.0
Risk_scorenull
Resource_urlhttp://public2.vulnerablecode.io/vulnerabilities/VCID-8sey-6qs1-vbb5