Django REST framework

Lookup for vulnerabilities affecting packages.

Vulnerability_id VCID-6qfy-e7q9-bqb3

Summary Mozilla developers Andrew McCreight, Tyson Smith, Christian Holler, and Gabriele Svelto reported memory safety bugs present in Firefox 89. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code.

Aliases

alias	CVE-2021-29977

Fixed_packages

url	pkg:alpm/archlinux/firefox@90.0-1
purl	pkg:alpm/archlinux/firefox@90.0-1
is_vulnerable	`false`
affected_by_vulnerabilities
resource_url	http://public2.vulnerablecode.io/packages/pkg:alpm/archlinux/firefox@90.0-1

Affected_packages

url pkg:alpm/archlinux/firefox@89.0.2-1

purl pkg:alpm/archlinux/firefox@89.0.2-1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-6c2k-d8ee-bybf

vulnerability	VCID-6qfy-e7q9-bqb3

vulnerability	VCID-frk8-st1s-y3cr

vulnerability	VCID-fyq3-ek6m-vybe

vulnerability	VCID-j7v9-pfg1-v3c7

vulnerability	VCID-mv47-mh43-wfg1

vulnerability	VCID-s8rq-59wr-zbby

vulnerability	VCID-t42u-qmna-k7dg

vulnerability	VCID-w6kt-w2ua-myfm

resource_url http://public2.vulnerablecode.io/packages/pkg:alpm/archlinux/firefox@89.0.2-1

References

reference_url	https://security.archlinux.org/ASA-202107-20
reference_id	ASA-202107-20
reference_type
scores
url	https://security.archlinux.org/ASA-202107-20

reference_url

https://security.archlinux.org/AVG-2148

reference_id

AVG-2148

reference_type

scores

value	High
scoring_system	archlinux
scoring_elements

url

https://security.archlinux.org/AVG-2148

reference_url

https://www.mozilla.org/en-US/security/advisories/mfsa2021-28

reference_id

mfsa2021-28

reference_type

scores

value	high
scoring_system	generic_textual
scoring_elements

url

https://www.mozilla.org/en-US/security/advisories/mfsa2021-28

Weaknesses

Exploits

Severity_range_score 7.0 - 8.9

Exploitability null

Weighted_severity null

Risk_score null

Resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-6qfy-e7q9-bqb3

Vulnerability Instance