Vulnerability Instance

HTTP 200 OK
Allow: GET, HEAD, OPTIONS
Content-Type: application/json
Vary: Accept

{
    "url": "http://public2.vulnerablecode.io/api/vulnerabilities/42441?format=api",
    "vulnerability_id": "VCID-9f54-k8v3-x3ce",
    "summary": "A buffer overflow vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers who have gained user access to modify memory or crash processes.\n\nWe have already fixed the vulnerability in the following versions:\nQTS 5.2.4.3079 build 20250321 and later\nQuTS hero h5.2.4.3079 build 20250321 and later",
    "aliases": [
        {
            "alias": "CVE-2024-56805"
        }
    ],
    "fixed_packages": [],
    "affected_packages": [],
    "references": [
        {
            "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2024-56805",
            "reference_id": "",
            "reference_type": "",
            "scores": [
                {
                    "value": "0.00338",
                    "scoring_system": "epss",
                    "scoring_elements": "0.56988",
                    "published_at": "2026-06-11T12:55:00Z"
                },
                {
                    "value": "0.00338",
                    "scoring_system": "epss",
                    "scoring_elements": "0.57108",
                    "published_at": "2026-06-12T12:55:00Z"
                }
            ],
            "url": "https://api.first.org/data/v1/epss?cve=CVE-2024-56805"
        },
        {
            "reference_url": "https://www.qnap.com/en/security-advisory/qsa-25-12",
            "reference_id": "qsa-25-12",
            "reference_type": "",
            "scores": [
                {
                    "value": "5.3",
                    "scoring_system": "cvssv4",
                    "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N"
                },
                {
                    "value": "Track",
                    "scoring_system": "ssvc",
                    "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-06-06T16:19:29Z/"
                }
            ],
            "url": "https://www.qnap.com/en/security-advisory/qsa-25-12"
        }
    ],
    "weaknesses": [
        {
            "cwe_id": 120,
            "name": "Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')",
            "description": "The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer, leading to a buffer overflow."
        },
        {
            "cwe_id": 122,
            "name": "Heap-based Buffer Overflow",
            "description": "A heap overflow condition is a buffer overflow, where the buffer that can be overwritten is allocated in the heap portion of memory, generally meaning that the buffer was allocated using a routine such as malloc()."
        }
    ],
    "exploits": [],
    "severity_range_score": "5.3 - 5.3",
    "exploitability": null,
    "weighted_severity": null,
    "risk_score": null,
    "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-9f54-k8v3-x3ce"
}