Vulnerability Instance
Lookup for vulnerabilities affecting packages.
GET /api/vulnerabilities/60426?format=api
{ "url": "http://public2.vulnerablecode.io/api/vulnerabilities/60426?format=api", "vulnerability_id": "VCID-u6sr-5vnv-3bb3", "summary": "dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, mishandles NULL files in a .debug_line file table, which allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted ELF file, related to concat_filename. NOTE: this issue is caused by an incomplete fix for CVE-2017-15023.", "aliases": [ { "alias": "CVE-2017-15939" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/89096?format=api", "purl": "pkg:deb/debian/binutils@0?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/binutils@0%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/89093?format=api", "purl": "pkg:deb/debian/binutils@2.35.2-2?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-13sg-vnwx-e3au" }, { "vulnerability": "VCID-1q89-5fpv-xufp" }, { "vulnerability": "VCID-26nf-gatz-w7d9" }, { "vulnerability": "VCID-2bq7-4txd-audc" }, { "vulnerability": "VCID-2msu-1qmt-j7hh" }, { "vulnerability": "VCID-31xx-kcqr-uyb5" }, { "vulnerability": "VCID-39b4-jy5b-wyhv" }, { "vulnerability": "VCID-3qpx-z6qm-jycg" }, { "vulnerability": "VCID-3qs1-hpg5-rkgu" }, { "vulnerability": "VCID-47qh-4hy8-fuhr" }, { "vulnerability": "VCID-484t-wtdb-e3de" }, { "vulnerability": "VCID-63pk-fun7-3fhr" }, { "vulnerability": "VCID-6f4u-nbce-fyeq" }, { "vulnerability": "VCID-6kcf-s35h-uqhk" }, { "vulnerability": "VCID-7nrw-67ae-zbap" }, { "vulnerability": "VCID-8bwu-un3b-jfhq" }, { "vulnerability": "VCID-8eu7-1vxt-9kh2" }, { "vulnerability": "VCID-94gu-dt9j-9kcq" }, { "vulnerability": "VCID-9b55-m8k1-p3ad" }, { "vulnerability": "VCID-a5c8-dd7w-b7a3" }, { "vulnerability": "VCID-a72c-187w-uqem" }, { "vulnerability": "VCID-a7am-aqmd-akhe" }, { "vulnerability": "VCID-a9v8-gc3v-eybb" }, { "vulnerability": "VCID-aaya-jzc2-pyem" }, { "vulnerability": "VCID-ayra-kncw-xfem" }, { "vulnerability": "VCID-b6v7-xrsy-kffw" }, { "vulnerability": "VCID-b8uw-m25z-sfbg" }, { "vulnerability": "VCID-becf-z7z4-uuf4" }, { "vulnerability": "VCID-bw9y-d617-y3cn" }, { "vulnerability": "VCID-c6qr-qkbn-cfcx" }, { "vulnerability": "VCID-ce52-r43w-a7g8" }, { "vulnerability": "VCID-d5ph-eegf-h3gx" }, { "vulnerability": "VCID-dm86-sdup-z7e2" }, { "vulnerability": "VCID-dy6u-1dju-57bw" }, { "vulnerability": "VCID-g8xf-e4q5-33d2" }, { "vulnerability": "VCID-h2vh-h3t3-fbea" }, { "vulnerability": "VCID-h66d-2att-afab" }, { "vulnerability": "VCID-h6j5-rr4h-xkgm" }, { "vulnerability": "VCID-hkky-g7kv-kkg3" }, { "vulnerability": "VCID-jmnb-p5js-gkcy" }, { "vulnerability": "VCID-kjbz-f1q3-pbdw" }, { "vulnerability": "VCID-m29v-t4rx-rqfu" }, { "vulnerability": "VCID-m3eb-2q8j-ryde" }, { "vulnerability": "VCID-mjxb-h3c2-xqae" }, { "vulnerability": "VCID-mpwg-g44n-b3a4" }, { "vulnerability": "VCID-nkj3-v17h-gfdh" }, { "vulnerability": "VCID-nz18-v55y-5kav" }, { "vulnerability": "VCID-p2j2-ewme-hqff" }, { "vulnerability": "VCID-pdjd-2pxy-5qhg" }, { "vulnerability": "VCID-pp32-aq7j-dqc5" }, { "vulnerability": "VCID-r16e-t1ks-3bgg" }, { "vulnerability": "VCID-rfv2-sye9-3ua2" }, { "vulnerability": "VCID-samj-nyu7-73eh" }, { "vulnerability": "VCID-tm7f-qkd5-ruez" }, { "vulnerability": "VCID-tzx1-f57b-pqfy" }, { "vulnerability": "VCID-ud5g-wn8w-syhe" }, { "vulnerability": "VCID-urtu-grgf-nkbs" }, { "vulnerability": "VCID-urxv-f5cr-q7hn" }, { "vulnerability": "VCID-v7ew-yr1f-2yec" }, { "vulnerability": "VCID-v8et-6ggb-afen" }, { "vulnerability": "VCID-vvdq-88wp-a3fw" }, { "vulnerability": "VCID-wgpn-1e2g-kkdh" }, { "vulnerability": "VCID-x8jp-gd9c-j3gc" }, { "vulnerability": "VCID-yzkq-1m63-g7gc" }, { "vulnerability": "VCID-zaxe-xnj6-6qdd" }, { "vulnerability": "VCID-zs44-kckm-pyb7" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/binutils@2.35.2-2%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/89091?format=api", "purl": "pkg:deb/debian/binutils@2.40-2?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1q89-5fpv-xufp" }, { "vulnerability": "VCID-2bq7-4txd-audc" }, { "vulnerability": "VCID-2msu-1qmt-j7hh" }, { "vulnerability": "VCID-31xx-kcqr-uyb5" }, { "vulnerability": "VCID-47qh-4hy8-fuhr" }, { "vulnerability": "VCID-484t-wtdb-e3de" }, { "vulnerability": "VCID-63pk-fun7-3fhr" }, { "vulnerability": "VCID-7nrw-67ae-zbap" }, { "vulnerability": "VCID-8bwu-un3b-jfhq" }, { "vulnerability": "VCID-8eu7-1vxt-9kh2" }, { "vulnerability": "VCID-a9v8-gc3v-eybb" }, { "vulnerability": "VCID-ayra-kncw-xfem" }, { "vulnerability": "VCID-b8uw-m25z-sfbg" }, { "vulnerability": "VCID-becf-z7z4-uuf4" }, { "vulnerability": "VCID-c6qr-qkbn-cfcx" }, { "vulnerability": "VCID-ce52-r43w-a7g8" }, { "vulnerability": "VCID-d5ph-eegf-h3gx" }, { "vulnerability": "VCID-dm86-sdup-z7e2" }, { "vulnerability": "VCID-dy6u-1dju-57bw" }, { "vulnerability": "VCID-g8xf-e4q5-33d2" }, { "vulnerability": "VCID-h66d-2att-afab" }, { "vulnerability": "VCID-h6j5-rr4h-xkgm" }, { "vulnerability": "VCID-jmnb-p5js-gkcy" }, { "vulnerability": "VCID-kjbz-f1q3-pbdw" }, { "vulnerability": "VCID-m29v-t4rx-rqfu" }, { "vulnerability": "VCID-nz18-v55y-5kav" }, { "vulnerability": "VCID-p2j2-ewme-hqff" }, { "vulnerability": "VCID-pdjd-2pxy-5qhg" }, { "vulnerability": "VCID-tzx1-f57b-pqfy" }, { "vulnerability": "VCID-urtu-grgf-nkbs" }, { "vulnerability": "VCID-v7ew-yr1f-2yec" }, { "vulnerability": "VCID-v8et-6ggb-afen" }, { "vulnerability": "VCID-wgpn-1e2g-kkdh" }, { "vulnerability": "VCID-zs44-kckm-pyb7" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/binutils@2.40-2%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/89095?format=api", "purl": "pkg:deb/debian/binutils@2.44-3?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1q89-5fpv-xufp" }, { "vulnerability": "VCID-2bq7-4txd-audc" }, { "vulnerability": "VCID-2msu-1qmt-j7hh" }, { "vulnerability": "VCID-47qh-4hy8-fuhr" }, { "vulnerability": "VCID-484t-wtdb-e3de" }, { "vulnerability": "VCID-63pk-fun7-3fhr" }, { "vulnerability": "VCID-8bwu-un3b-jfhq" }, { "vulnerability": "VCID-a9v8-gc3v-eybb" }, { "vulnerability": "VCID-b8uw-m25z-sfbg" }, { "vulnerability": "VCID-becf-z7z4-uuf4" }, { "vulnerability": "VCID-c6qr-qkbn-cfcx" }, { "vulnerability": "VCID-ce52-r43w-a7g8" }, { "vulnerability": "VCID-d5ph-eegf-h3gx" }, { "vulnerability": "VCID-dm86-sdup-z7e2" }, { "vulnerability": "VCID-dy6u-1dju-57bw" }, { "vulnerability": "VCID-g8xf-e4q5-33d2" }, { "vulnerability": "VCID-h66d-2att-afab" }, { "vulnerability": "VCID-jmnb-p5js-gkcy" }, { "vulnerability": "VCID-kjbz-f1q3-pbdw" }, { "vulnerability": "VCID-m29v-t4rx-rqfu" }, { "vulnerability": "VCID-nz18-v55y-5kav" }, { "vulnerability": "VCID-p2j2-ewme-hqff" }, { "vulnerability": "VCID-pdjd-2pxy-5qhg" }, { "vulnerability": "VCID-tzx1-f57b-pqfy" }, { "vulnerability": "VCID-urtu-grgf-nkbs" }, { "vulnerability": "VCID-v7ew-yr1f-2yec" }, { "vulnerability": "VCID-v8et-6ggb-afen" }, { "vulnerability": "VCID-zs44-kckm-pyb7" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/binutils@2.44-3%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/89094?format=api", "purl": "pkg:deb/debian/binutils@2.46-3?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/binutils@2.46-3%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/506065?format=api", "purl": "pkg:ebuild/sys-devel/binutils@2.29.1-r1", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:ebuild/sys-devel/binutils@2.29.1-r1" } ], "affected_packages": [], "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-15939.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "3.3", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-15939.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2017-15939", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00335", "scoring_system": "epss", "scoring_elements": "0.56558", "published_at": "2026-06-04T12:55:00Z" }, { "value": "0.00335", "scoring_system": "epss", "scoring_elements": "0.56611", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.00335", "scoring_system": "epss", "scoring_elements": "0.56618", "published_at": "2026-06-06T12:55:00Z" }, { "value": "0.00335", "scoring_system": "epss", "scoring_elements": "0.56606", "published_at": "2026-06-07T12:55:00Z" }, { "value": "0.00335", "scoring_system": "epss", "scoring_elements": "0.56591", "published_at": "2026-06-08T12:55:00Z" }, { "value": "0.00335", "scoring_system": "epss", "scoring_elements": "0.5661", "published_at": "2026-06-09T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2017-15939" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1510338", "reference_id": "1510338", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1510338" }, { "reference_url": "https://security.gentoo.org/glsa/201801-01", "reference_id": "GLSA-201801-01", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/201801-01" }, { "reference_url": "https://usn.ubuntu.com/4336-2/", "reference_id": "USN-4336-2", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/4336-2/" } ], "weaknesses": [ { "cwe_id": 476, "name": "NULL Pointer Dereference", "description": "A NULL pointer dereference occurs when the application dereferences a pointer that it expects to be valid, but is NULL, typically causing a crash or exit." } ], "exploits": [], "severity_range_score": "3.3 - 3.3", "exploitability": null, "weighted_severity": null, "risk_score": null, "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-u6sr-5vnv-3bb3" }