Lookup for vulnerabilities affecting packages.

Vulnerability_idVCID-u6sr-5vnv-3bb3
Summarydwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, mishandles NULL files in a .debug_line file table, which allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted ELF file, related to concat_filename. NOTE: this issue is caused by an incomplete fix for CVE-2017-15023.
Aliases
0
alias CVE-2017-15939
Fixed_packages
0
url pkg:deb/debian/binutils@0?distro=trixie
purl pkg:deb/debian/binutils@0?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/binutils@0%3Fdistro=trixie
1
url pkg:deb/debian/binutils@2.35.2-2?distro=trixie
purl pkg:deb/debian/binutils@2.35.2-2?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-13sg-vnwx-e3au
1
vulnerability VCID-1q89-5fpv-xufp
2
vulnerability VCID-26nf-gatz-w7d9
3
vulnerability VCID-2bq7-4txd-audc
4
vulnerability VCID-2msu-1qmt-j7hh
5
vulnerability VCID-31xx-kcqr-uyb5
6
vulnerability VCID-39b4-jy5b-wyhv
7
vulnerability VCID-3qpx-z6qm-jycg
8
vulnerability VCID-3qs1-hpg5-rkgu
9
vulnerability VCID-47qh-4hy8-fuhr
10
vulnerability VCID-484t-wtdb-e3de
11
vulnerability VCID-63pk-fun7-3fhr
12
vulnerability VCID-6f4u-nbce-fyeq
13
vulnerability VCID-6kcf-s35h-uqhk
14
vulnerability VCID-7nrw-67ae-zbap
15
vulnerability VCID-8bwu-un3b-jfhq
16
vulnerability VCID-8eu7-1vxt-9kh2
17
vulnerability VCID-94gu-dt9j-9kcq
18
vulnerability VCID-9b55-m8k1-p3ad
19
vulnerability VCID-a5c8-dd7w-b7a3
20
vulnerability VCID-a72c-187w-uqem
21
vulnerability VCID-a7am-aqmd-akhe
22
vulnerability VCID-a9v8-gc3v-eybb
23
vulnerability VCID-aaya-jzc2-pyem
24
vulnerability VCID-ayra-kncw-xfem
25
vulnerability VCID-b6v7-xrsy-kffw
26
vulnerability VCID-b8uw-m25z-sfbg
27
vulnerability VCID-becf-z7z4-uuf4
28
vulnerability VCID-bw9y-d617-y3cn
29
vulnerability VCID-c6qr-qkbn-cfcx
30
vulnerability VCID-ce52-r43w-a7g8
31
vulnerability VCID-d5ph-eegf-h3gx
32
vulnerability VCID-dm86-sdup-z7e2
33
vulnerability VCID-dy6u-1dju-57bw
34
vulnerability VCID-g8xf-e4q5-33d2
35
vulnerability VCID-h2vh-h3t3-fbea
36
vulnerability VCID-h66d-2att-afab
37
vulnerability VCID-h6j5-rr4h-xkgm
38
vulnerability VCID-hkky-g7kv-kkg3
39
vulnerability VCID-jmnb-p5js-gkcy
40
vulnerability VCID-kjbz-f1q3-pbdw
41
vulnerability VCID-m29v-t4rx-rqfu
42
vulnerability VCID-m3eb-2q8j-ryde
43
vulnerability VCID-mjxb-h3c2-xqae
44
vulnerability VCID-mpwg-g44n-b3a4
45
vulnerability VCID-nkj3-v17h-gfdh
46
vulnerability VCID-nz18-v55y-5kav
47
vulnerability VCID-p2j2-ewme-hqff
48
vulnerability VCID-pdjd-2pxy-5qhg
49
vulnerability VCID-pp32-aq7j-dqc5
50
vulnerability VCID-r16e-t1ks-3bgg
51
vulnerability VCID-rfv2-sye9-3ua2
52
vulnerability VCID-samj-nyu7-73eh
53
vulnerability VCID-tm7f-qkd5-ruez
54
vulnerability VCID-tzx1-f57b-pqfy
55
vulnerability VCID-ud5g-wn8w-syhe
56
vulnerability VCID-urtu-grgf-nkbs
57
vulnerability VCID-urxv-f5cr-q7hn
58
vulnerability VCID-v7ew-yr1f-2yec
59
vulnerability VCID-v8et-6ggb-afen
60
vulnerability VCID-vvdq-88wp-a3fw
61
vulnerability VCID-wgpn-1e2g-kkdh
62
vulnerability VCID-x8jp-gd9c-j3gc
63
vulnerability VCID-yzkq-1m63-g7gc
64
vulnerability VCID-zaxe-xnj6-6qdd
65
vulnerability VCID-zs44-kckm-pyb7
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/binutils@2.35.2-2%3Fdistro=trixie
2
url pkg:deb/debian/binutils@2.40-2?distro=trixie
purl pkg:deb/debian/binutils@2.40-2?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1q89-5fpv-xufp
1
vulnerability VCID-2bq7-4txd-audc
2
vulnerability VCID-2msu-1qmt-j7hh
3
vulnerability VCID-31xx-kcqr-uyb5
4
vulnerability VCID-47qh-4hy8-fuhr
5
vulnerability VCID-484t-wtdb-e3de
6
vulnerability VCID-63pk-fun7-3fhr
7
vulnerability VCID-7nrw-67ae-zbap
8
vulnerability VCID-8bwu-un3b-jfhq
9
vulnerability VCID-8eu7-1vxt-9kh2
10
vulnerability VCID-a9v8-gc3v-eybb
11
vulnerability VCID-ayra-kncw-xfem
12
vulnerability VCID-b8uw-m25z-sfbg
13
vulnerability VCID-becf-z7z4-uuf4
14
vulnerability VCID-c6qr-qkbn-cfcx
15
vulnerability VCID-ce52-r43w-a7g8
16
vulnerability VCID-d5ph-eegf-h3gx
17
vulnerability VCID-dm86-sdup-z7e2
18
vulnerability VCID-dy6u-1dju-57bw
19
vulnerability VCID-g8xf-e4q5-33d2
20
vulnerability VCID-h66d-2att-afab
21
vulnerability VCID-h6j5-rr4h-xkgm
22
vulnerability VCID-jmnb-p5js-gkcy
23
vulnerability VCID-kjbz-f1q3-pbdw
24
vulnerability VCID-m29v-t4rx-rqfu
25
vulnerability VCID-nz18-v55y-5kav
26
vulnerability VCID-p2j2-ewme-hqff
27
vulnerability VCID-pdjd-2pxy-5qhg
28
vulnerability VCID-tzx1-f57b-pqfy
29
vulnerability VCID-urtu-grgf-nkbs
30
vulnerability VCID-v7ew-yr1f-2yec
31
vulnerability VCID-v8et-6ggb-afen
32
vulnerability VCID-wgpn-1e2g-kkdh
33
vulnerability VCID-zs44-kckm-pyb7
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/binutils@2.40-2%3Fdistro=trixie
3
url pkg:deb/debian/binutils@2.44-3?distro=trixie
purl pkg:deb/debian/binutils@2.44-3?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1q89-5fpv-xufp
1
vulnerability VCID-2bq7-4txd-audc
2
vulnerability VCID-2msu-1qmt-j7hh
3
vulnerability VCID-47qh-4hy8-fuhr
4
vulnerability VCID-484t-wtdb-e3de
5
vulnerability VCID-63pk-fun7-3fhr
6
vulnerability VCID-8bwu-un3b-jfhq
7
vulnerability VCID-a9v8-gc3v-eybb
8
vulnerability VCID-b8uw-m25z-sfbg
9
vulnerability VCID-becf-z7z4-uuf4
10
vulnerability VCID-c6qr-qkbn-cfcx
11
vulnerability VCID-ce52-r43w-a7g8
12
vulnerability VCID-d5ph-eegf-h3gx
13
vulnerability VCID-dm86-sdup-z7e2
14
vulnerability VCID-dy6u-1dju-57bw
15
vulnerability VCID-g8xf-e4q5-33d2
16
vulnerability VCID-h66d-2att-afab
17
vulnerability VCID-jmnb-p5js-gkcy
18
vulnerability VCID-kjbz-f1q3-pbdw
19
vulnerability VCID-m29v-t4rx-rqfu
20
vulnerability VCID-nz18-v55y-5kav
21
vulnerability VCID-p2j2-ewme-hqff
22
vulnerability VCID-pdjd-2pxy-5qhg
23
vulnerability VCID-tzx1-f57b-pqfy
24
vulnerability VCID-urtu-grgf-nkbs
25
vulnerability VCID-v7ew-yr1f-2yec
26
vulnerability VCID-v8et-6ggb-afen
27
vulnerability VCID-zs44-kckm-pyb7
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/binutils@2.44-3%3Fdistro=trixie
4
url pkg:deb/debian/binutils@2.46-3?distro=trixie
purl pkg:deb/debian/binutils@2.46-3?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/binutils@2.46-3%3Fdistro=trixie
5
url pkg:ebuild/sys-devel/binutils@2.29.1-r1
purl pkg:ebuild/sys-devel/binutils@2.29.1-r1
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:ebuild/sys-devel/binutils@2.29.1-r1
Affected_packages
References
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-15939.json
reference_id
reference_type
scores
0
value 3.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-15939.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2017-15939
reference_id
reference_type
scores
0
value 0.00335
scoring_system epss
scoring_elements 0.56558
published_at 2026-06-04T12:55:00Z
1
value 0.00335
scoring_system epss
scoring_elements 0.56611
published_at 2026-06-05T12:55:00Z
2
value 0.00335
scoring_system epss
scoring_elements 0.56618
published_at 2026-06-06T12:55:00Z
3
value 0.00335
scoring_system epss
scoring_elements 0.56606
published_at 2026-06-07T12:55:00Z
4
value 0.00335
scoring_system epss
scoring_elements 0.56591
published_at 2026-06-08T12:55:00Z
5
value 0.00335
scoring_system epss
scoring_elements 0.5661
published_at 2026-06-09T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2017-15939
2
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1510338
reference_id 1510338
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1510338
3
reference_url https://security.gentoo.org/glsa/201801-01
reference_id GLSA-201801-01
reference_type
scores
url https://security.gentoo.org/glsa/201801-01
4
reference_url https://usn.ubuntu.com/4336-2/
reference_id USN-4336-2
reference_type
scores
url https://usn.ubuntu.com/4336-2/
Weaknesses
0
cwe_id 476
name NULL Pointer Dereference
description A NULL pointer dereference occurs when the application dereferences a pointer that it expects to be valid, but is NULL, typically causing a crash or exit.
Exploits
Severity_range_score3.3 - 3.3
Exploitabilitynull
Weighted_severitynull
Risk_scorenull
Resource_urlhttp://public2.vulnerablecode.io/vulnerabilities/VCID-u6sr-5vnv-3bb3