Django REST framework

Vulnerability Instance

Lookup for vulnerabilities affecting packages.

Vulnerability_idVCID-6vxc-35x2-3fek
Summarygrub2: fs/bfs: Integer overflow in the BFS parser.
Aliases
0
alias CVE-2024-45778
Fixed_packages
0
url pkg:deb/debian/grub2@2.06-13%2Bdeb12u2
purl pkg:deb/debian/grub2@2.06-13%2Bdeb12u2
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/grub2@2.06-13%252Bdeb12u2
1
url pkg:deb/debian/grub2@2.12-1~bpo12%2B1
purl pkg:deb/debian/grub2@2.12-1~bpo12%2B1
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/grub2@2.12-1~bpo12%252B1
2
url pkg:deb/debian/grub2@2.12-6?distro=trixie
purl pkg:deb/debian/grub2@2.12-6?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/grub2@2.12-6%3Fdistro=trixie
3
url pkg:deb/debian/grub2@2.12-9%2Bdeb13u1?distro=trixie
purl pkg:deb/debian/grub2@2.12-9%2Bdeb13u1?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1tdk-6d8a-m7h8
1
vulnerability VCID-53x3-83by-gueq
2
vulnerability VCID-c2vg-36gb-bqas
3
vulnerability VCID-gaet-924c-57dv
4
vulnerability VCID-swtj-9pmu-4ugn
5
vulnerability VCID-ur99-cm1x-cfdm
6
vulnerability VCID-wy3p-p9zf-r7ef
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/grub2@2.12-9%252Bdeb13u1%3Fdistro=trixie
4
url pkg:deb/debian/grub2@2.14~git20250718.0e36779-2?distro=trixie
purl pkg:deb/debian/grub2@2.14~git20250718.0e36779-2?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1tdk-6d8a-m7h8
1
vulnerability VCID-53x3-83by-gueq
2
vulnerability VCID-c2vg-36gb-bqas
3
vulnerability VCID-gaet-924c-57dv
4
vulnerability VCID-ur99-cm1x-cfdm
5
vulnerability VCID-wy3p-p9zf-r7ef
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/grub2@2.14~git20250718.0e36779-2%3Fdistro=trixie
5
url pkg:deb/debian/grub2@2.14-2?distro=trixie
purl pkg:deb/debian/grub2@2.14-2?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/grub2@2.14-2%3Fdistro=trixie
Affected_packages
0
url pkg:deb/debian/grub2@2.06-3~deb11u6
purl pkg:deb/debian/grub2@2.06-3~deb11u6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1tdk-6d8a-m7h8
1
vulnerability VCID-1vtj-un1a-afax
2
vulnerability VCID-29d7-asmu-e7ev
3
vulnerability VCID-3vhv-ya75-cuhc
4
vulnerability VCID-53x3-83by-gueq
5
vulnerability VCID-5a7e-ctj7-dqab
6
vulnerability VCID-5m3u-p8q4-kfhx
7
vulnerability VCID-5m6c-h4j2-mqcg
8
vulnerability VCID-5vyx-ut4z-jucd
9
vulnerability VCID-6cpn-v8j3-7ub3
10
vulnerability VCID-6tg5-6gjc-nygy
11
vulnerability VCID-6vxc-35x2-3fek
12
vulnerability VCID-c2vg-36gb-bqas
13
vulnerability VCID-dn64-5ysd-yfer
14
vulnerability VCID-gaet-924c-57dv
15
vulnerability VCID-h2ca-d9yc-vbex
16
vulnerability VCID-hn4b-sdcq-j3bx
17
vulnerability VCID-nphq-62t2-b7bk
18
vulnerability VCID-pjq7-bxwk-uqec
19
vulnerability VCID-s86w-7czc-s3a9
20
vulnerability VCID-sub1-vd8w-dka7
21
vulnerability VCID-swtj-9pmu-4ugn
22
vulnerability VCID-tkur-tbms-zkcz
23
vulnerability VCID-ur99-cm1x-cfdm
24
vulnerability VCID-wy3p-p9zf-r7ef
25
vulnerability VCID-x57b-4ggt-5qdf
26
vulnerability VCID-xamt-2k26-p3ev
27
vulnerability VCID-xjtf-q3gz-7ug8
28
vulnerability VCID-ymw1-gk3r-kfhz
29
vulnerability VCID-yw2r-4rr8-pkfd
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/grub2@2.06-3~deb11u6
1
url pkg:deb/debian/grub2@2.06-3~deb11u6?distro=trixie
purl pkg:deb/debian/grub2@2.06-3~deb11u6?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1tdk-6d8a-m7h8
1
vulnerability VCID-1vtj-un1a-afax
2
vulnerability VCID-29d7-asmu-e7ev
3
vulnerability VCID-3vhv-ya75-cuhc
4
vulnerability VCID-53x3-83by-gueq
5
vulnerability VCID-5a7e-ctj7-dqab
6
vulnerability VCID-5m3u-p8q4-kfhx
7
vulnerability VCID-5m6c-h4j2-mqcg
8
vulnerability VCID-5vyx-ut4z-jucd
9
vulnerability VCID-6cpn-v8j3-7ub3
10
vulnerability VCID-6tg5-6gjc-nygy
11
vulnerability VCID-6vxc-35x2-3fek
12
vulnerability VCID-c2vg-36gb-bqas
13
vulnerability VCID-dn64-5ysd-yfer
14
vulnerability VCID-gaet-924c-57dv
15
vulnerability VCID-h2ca-d9yc-vbex
16
vulnerability VCID-hn4b-sdcq-j3bx
17
vulnerability VCID-nphq-62t2-b7bk
18
vulnerability VCID-pjq7-bxwk-uqec
19
vulnerability VCID-s86w-7czc-s3a9
20
vulnerability VCID-sub1-vd8w-dka7
21
vulnerability VCID-swtj-9pmu-4ugn
22
vulnerability VCID-tkur-tbms-zkcz
23
vulnerability VCID-ur99-cm1x-cfdm
24
vulnerability VCID-wy3p-p9zf-r7ef
25
vulnerability VCID-x57b-4ggt-5qdf
26
vulnerability VCID-xamt-2k26-p3ev
27
vulnerability VCID-xjtf-q3gz-7ug8
28
vulnerability VCID-ymw1-gk3r-kfhz
29
vulnerability VCID-yw2r-4rr8-pkfd
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/grub2@2.06-3~deb11u6%3Fdistro=trixie
2
url pkg:deb/debian/grub2@2.06-13%2Bdeb12u1
purl pkg:deb/debian/grub2@2.06-13%2Bdeb12u1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1tdk-6d8a-m7h8
1
vulnerability VCID-1vtj-un1a-afax
2
vulnerability VCID-3vhv-ya75-cuhc
3
vulnerability VCID-53x3-83by-gueq
4
vulnerability VCID-5a7e-ctj7-dqab
5
vulnerability VCID-5m3u-p8q4-kfhx
6
vulnerability VCID-5m6c-h4j2-mqcg
7
vulnerability VCID-5vyx-ut4z-jucd
8
vulnerability VCID-6cpn-v8j3-7ub3
9
vulnerability VCID-6tg5-6gjc-nygy
10
vulnerability VCID-6vxc-35x2-3fek
11
vulnerability VCID-c2vg-36gb-bqas
12
vulnerability VCID-dn64-5ysd-yfer
13
vulnerability VCID-gaet-924c-57dv
14
vulnerability VCID-h2ca-d9yc-vbex
15
vulnerability VCID-hn4b-sdcq-j3bx
16
vulnerability VCID-nphq-62t2-b7bk
17
vulnerability VCID-pjq7-bxwk-uqec
18
vulnerability VCID-s86w-7czc-s3a9
19
vulnerability VCID-sub1-vd8w-dka7
20
vulnerability VCID-swtj-9pmu-4ugn
21
vulnerability VCID-tkur-tbms-zkcz
22
vulnerability VCID-ur99-cm1x-cfdm
23
vulnerability VCID-wy3p-p9zf-r7ef
24
vulnerability VCID-x57b-4ggt-5qdf
25
vulnerability VCID-xamt-2k26-p3ev
26
vulnerability VCID-xjtf-q3gz-7ug8
27
vulnerability VCID-ymw1-gk3r-kfhz
28
vulnerability VCID-yw2r-4rr8-pkfd
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/grub2@2.06-13%252Bdeb12u1
3
url pkg:deb/debian/grub2@2.06-13%2Bdeb12u1?distro=trixie
purl pkg:deb/debian/grub2@2.06-13%2Bdeb12u1?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1tdk-6d8a-m7h8
1
vulnerability VCID-1vtj-un1a-afax
2
vulnerability VCID-3vhv-ya75-cuhc
3
vulnerability VCID-53x3-83by-gueq
4
vulnerability VCID-5a7e-ctj7-dqab
5
vulnerability VCID-5m3u-p8q4-kfhx
6
vulnerability VCID-5m6c-h4j2-mqcg
7
vulnerability VCID-5vyx-ut4z-jucd
8
vulnerability VCID-6cpn-v8j3-7ub3
9
vulnerability VCID-6tg5-6gjc-nygy
10
vulnerability VCID-6vxc-35x2-3fek
11
vulnerability VCID-c2vg-36gb-bqas
12
vulnerability VCID-dn64-5ysd-yfer
13
vulnerability VCID-gaet-924c-57dv
14
vulnerability VCID-h2ca-d9yc-vbex
15
vulnerability VCID-hn4b-sdcq-j3bx
16
vulnerability VCID-nphq-62t2-b7bk
17
vulnerability VCID-pjq7-bxwk-uqec
18
vulnerability VCID-s86w-7czc-s3a9
19
vulnerability VCID-sub1-vd8w-dka7
20
vulnerability VCID-swtj-9pmu-4ugn
21
vulnerability VCID-tkur-tbms-zkcz
22
vulnerability VCID-ur99-cm1x-cfdm
23
vulnerability VCID-wy3p-p9zf-r7ef
24
vulnerability VCID-x57b-4ggt-5qdf
25
vulnerability VCID-xamt-2k26-p3ev
26
vulnerability VCID-xjtf-q3gz-7ug8
27
vulnerability VCID-ymw1-gk3r-kfhz
28
vulnerability VCID-yw2r-4rr8-pkfd
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/grub2@2.06-13%252Bdeb12u1%3Fdistro=trixie
References
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2024-45778.json
reference_id
reference_type
scores
0
value 4.1
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2024-45778.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2024-45778
reference_id
reference_type
scores
0
value 0.00013
scoring_system epss
scoring_elements 0.02288
published_at 2026-04-21T12:55:00Z
1
value 0.00013
scoring_system epss
scoring_elements 0.0231
published_at 2026-04-29T12:55:00Z
2
value 0.00013
scoring_system epss
scoring_elements 0.02263
published_at 2026-04-26T12:55:00Z
3
value 0.00013
scoring_system epss
scoring_elements 0.02271
published_at 2026-04-24T12:55:00Z
4
value 0.00014
scoring_system epss
scoring_elements 0.02476
published_at 2026-05-07T12:55:00Z
5
value 0.00014
scoring_system epss
scoring_elements 0.0246
published_at 2026-05-05T12:55:00Z
6
value 0.00018
scoring_system epss
scoring_elements 0.04331
published_at 2026-04-02T12:55:00Z
7
value 0.00018
scoring_system epss
scoring_elements 0.04363
published_at 2026-04-07T12:55:00Z
8
value 0.00018
scoring_system epss
scoring_elements 0.04395
published_at 2026-04-08T12:55:00Z
9
value 0.00018
scoring_system epss
scoring_elements 0.04411
published_at 2026-04-09T12:55:00Z
10
value 0.00018
scoring_system epss
scoring_elements 0.04406
published_at 2026-04-11T12:55:00Z
11
value 0.00018
scoring_system epss
scoring_elements 0.04391
published_at 2026-04-12T12:55:00Z
12
value 0.00018
scoring_system epss
scoring_elements 0.04375
published_at 2026-04-13T12:55:00Z
13
value 0.00018
scoring_system epss
scoring_elements 0.04342
published_at 2026-04-16T12:55:00Z
14
value 0.00018
scoring_system epss
scoring_elements 0.04351
published_at 2026-04-18T12:55:00Z
15
value 0.00018
scoring_system epss
scoring_elements 0.04352
published_at 2026-04-04T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2024-45778
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-45778
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-45778
3
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 3.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:L
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
4
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1098319
reference_id 1098319
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1098319
5
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2345640
reference_id 2345640
reference_type
scores
0
value 4.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-03-04T16:17:31Z/
url https://bugzilla.redhat.com/show_bug.cgi?id=2345640
6
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/a:redhat:openshift:4
reference_id cpe:/a:redhat:openshift:4
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/a:redhat:openshift:4
7
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/o:redhat:enterprise_linux:10
reference_id cpe:/o:redhat:enterprise_linux:10
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/o:redhat:enterprise_linux:10
8
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/o:redhat:enterprise_linux:7
reference_id cpe:/o:redhat:enterprise_linux:7
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/o:redhat:enterprise_linux:7
9
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/o:redhat:enterprise_linux:8
reference_id cpe:/o:redhat:enterprise_linux:8
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/o:redhat:enterprise_linux:8
10
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/o:redhat:enterprise_linux:9
reference_id cpe:/o:redhat:enterprise_linux:9
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/o:redhat:enterprise_linux:9
11
reference_url https://access.redhat.com/security/cve/CVE-2024-45778
reference_id CVE-2024-45778
reference_type
scores
0
value 4.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-03-04T16:17:31Z/
url https://access.redhat.com/security/cve/CVE-2024-45778
12
reference_url https://lists.gnu.org/archive/html/grub-devel/2025-02/msg00024.html
reference_id msg00024.html
reference_type
scores
0
value 4.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-03-04T16:17:31Z/
url https://lists.gnu.org/archive/html/grub-devel/2025-02/msg00024.html
Weaknesses
0
cwe_id 190
name Integer Overflow or Wraparound
description The product performs a calculation that can produce an integer overflow or wraparound, when the logic assumes that the resulting value will always be larger than the original value. This can introduce other weaknesses when the calculation is used for resource management or execution control.
Exploits
Severity_range_score3.9 - 4.1
Exploitability0.5
Weighted_severity3.7
Risk_score1.9
Resource_urlhttp://public2.vulnerablecode.io/vulnerabilities/VCID-6vxc-35x2-3fek