GET

Vulnerability Instance

Lookup for vulnerabilities affecting packages.

GET /api/vulnerabilities/91391?format=api
HTTP 200 OK
Allow: GET, HEAD, OPTIONS
Content-Type: application/json
Vary: Accept

{
    "url": "http://public2.vulnerablecode.io/api/vulnerabilities/91391?format=api",
    "vulnerability_id": "VCID-j7kn-5ch6-13du",
    "summary": "Multiple buffer overflows in the getterminaltype function in telnetd for Heimdal before 0.6.5 may allow remote attackers to execute arbitrary code, a different vulnerability than CVE-2005-0468 and CVE-2005-0469.",
    "aliases": [
        {
            "alias": "CVE-2005-2040"
        }
    ],
    "fixed_packages": [
        {
            "url": "http://public2.vulnerablecode.io/api/packages/924875?format=api",
            "purl": "pkg:deb/debian/heimdal@0.6.3-11?distro=trixie",
            "is_vulnerable": false,
            "affected_by_vulnerabilities": [],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/heimdal@0.6.3-11%3Fdistro=trixie"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/1036798?format=api",
            "purl": "pkg:deb/debian/heimdal@0.7.2.dfsg.1-10",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-21hz-xvek-73cd"
                },
                {
                    "vulnerability": "VCID-3du2-evy8-jfa1"
                },
                {
                    "vulnerability": "VCID-5tkj-88u2-83ha"
                },
                {
                    "vulnerability": "VCID-81xv-v927-8fdz"
                },
                {
                    "vulnerability": "VCID-bc1t-hzu5-bffd"
                },
                {
                    "vulnerability": "VCID-ezmy-qjh7-6ycj"
                },
                {
                    "vulnerability": "VCID-frnd-3wwy-93ek"
                },
                {
                    "vulnerability": "VCID-jfb1-3vg4-vbap"
                },
                {
                    "vulnerability": "VCID-jhcx-pb5e-8kev"
                },
                {
                    "vulnerability": "VCID-r49y-kqyv-pkbq"
                },
                {
                    "vulnerability": "VCID-rfpr-mdg9-3uaa"
                },
                {
                    "vulnerability": "VCID-s2ne-rcp3-nbgz"
                },
                {
                    "vulnerability": "VCID-tcbv-cguk-hfg2"
                },
                {
                    "vulnerability": "VCID-unvx-tsxw-abbw"
                },
                {
                    "vulnerability": "VCID-ws2g-8ye2-pkdk"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/heimdal@0.7.2.dfsg.1-10"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/924867?format=api",
            "purl": "pkg:deb/debian/heimdal@7.7.0%2Bdfsg-2%2Bdeb11u3?distro=trixie",
            "is_vulnerable": false,
            "affected_by_vulnerabilities": [],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/heimdal@7.7.0%252Bdfsg-2%252Bdeb11u3%3Fdistro=trixie"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/924865?format=api",
            "purl": "pkg:deb/debian/heimdal@7.8.git20221117.28daf24%2Bdfsg-2?distro=trixie",
            "is_vulnerable": false,
            "affected_by_vulnerabilities": [],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/heimdal@7.8.git20221117.28daf24%252Bdfsg-2%3Fdistro=trixie"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/924869?format=api",
            "purl": "pkg:deb/debian/heimdal@7.8.git20221117.28daf24%2Bdfsg-9?distro=trixie",
            "is_vulnerable": false,
            "affected_by_vulnerabilities": [],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/heimdal@7.8.git20221117.28daf24%252Bdfsg-9%3Fdistro=trixie"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/924868?format=api",
            "purl": "pkg:deb/debian/heimdal@7.8.git20221117.28daf24%2Bdfsg-11?distro=trixie",
            "is_vulnerable": false,
            "affected_by_vulnerabilities": [],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/heimdal@7.8.git20221117.28daf24%252Bdfsg-11%3Fdistro=trixie"
        }
    ],
    "affected_packages": [
        {
            "url": "http://public2.vulnerablecode.io/api/packages/1036797?format=api",
            "purl": "pkg:deb/debian/heimdal@0.6.3-10sarge2",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-21hz-xvek-73cd"
                },
                {
                    "vulnerability": "VCID-3du2-evy8-jfa1"
                },
                {
                    "vulnerability": "VCID-5tkj-88u2-83ha"
                },
                {
                    "vulnerability": "VCID-6pc6-jusr-tfgg"
                },
                {
                    "vulnerability": "VCID-81xv-v927-8fdz"
                },
                {
                    "vulnerability": "VCID-bc1t-hzu5-bffd"
                },
                {
                    "vulnerability": "VCID-ezmy-qjh7-6ycj"
                },
                {
                    "vulnerability": "VCID-frnd-3wwy-93ek"
                },
                {
                    "vulnerability": "VCID-j7kn-5ch6-13du"
                },
                {
                    "vulnerability": "VCID-jfb1-3vg4-vbap"
                },
                {
                    "vulnerability": "VCID-jhcx-pb5e-8kev"
                },
                {
                    "vulnerability": "VCID-r49y-kqyv-pkbq"
                },
                {
                    "vulnerability": "VCID-rfpr-mdg9-3uaa"
                },
                {
                    "vulnerability": "VCID-s2ne-rcp3-nbgz"
                },
                {
                    "vulnerability": "VCID-tcbv-cguk-hfg2"
                },
                {
                    "vulnerability": "VCID-unvx-tsxw-abbw"
                },
                {
                    "vulnerability": "VCID-wgdd-6dt5-37ge"
                },
                {
                    "vulnerability": "VCID-ws2g-8ye2-pkdk"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/heimdal@0.6.3-10sarge2"
        }
    ],
    "references": [
        {
            "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2005-2040",
            "reference_id": "",
            "reference_type": "",
            "scores": [
                {
                    "value": "0.02015",
                    "scoring_system": "epss",
                    "scoring_elements": "0.83915",
                    "published_at": "2026-05-14T12:55:00Z"
                },
                {
                    "value": "0.02015",
                    "scoring_system": "epss",
                    "scoring_elements": "0.83664",
                    "published_at": "2026-04-01T12:55:00Z"
                },
                {
                    "value": "0.02015",
                    "scoring_system": "epss",
                    "scoring_elements": "0.83677",
                    "published_at": "2026-04-02T12:55:00Z"
                },
                {
                    "value": "0.02015",
                    "scoring_system": "epss",
                    "scoring_elements": "0.83691",
                    "published_at": "2026-04-04T12:55:00Z"
                },
                {
                    "value": "0.02015",
                    "scoring_system": "epss",
                    "scoring_elements": "0.83694",
                    "published_at": "2026-04-07T12:55:00Z"
                },
                {
                    "value": "0.02015",
                    "scoring_system": "epss",
                    "scoring_elements": "0.83717",
                    "published_at": "2026-04-08T12:55:00Z"
                },
                {
                    "value": "0.02015",
                    "scoring_system": "epss",
                    "scoring_elements": "0.83724",
                    "published_at": "2026-04-09T12:55:00Z"
                },
                {
                    "value": "0.02015",
                    "scoring_system": "epss",
                    "scoring_elements": "0.8374",
                    "published_at": "2026-04-11T12:55:00Z"
                },
                {
                    "value": "0.02015",
                    "scoring_system": "epss",
                    "scoring_elements": "0.83734",
                    "published_at": "2026-04-12T12:55:00Z"
                },
                {
                    "value": "0.02015",
                    "scoring_system": "epss",
                    "scoring_elements": "0.83729",
                    "published_at": "2026-04-13T12:55:00Z"
                },
                {
                    "value": "0.02015",
                    "scoring_system": "epss",
                    "scoring_elements": "0.83763",
                    "published_at": "2026-04-16T12:55:00Z"
                },
                {
                    "value": "0.02015",
                    "scoring_system": "epss",
                    "scoring_elements": "0.83764",
                    "published_at": "2026-04-21T12:55:00Z"
                },
                {
                    "value": "0.02015",
                    "scoring_system": "epss",
                    "scoring_elements": "0.83788",
                    "published_at": "2026-04-24T12:55:00Z"
                },
                {
                    "value": "0.02015",
                    "scoring_system": "epss",
                    "scoring_elements": "0.83797",
                    "published_at": "2026-04-26T12:55:00Z"
                },
                {
                    "value": "0.02015",
                    "scoring_system": "epss",
                    "scoring_elements": "0.83804",
                    "published_at": "2026-04-29T12:55:00Z"
                },
                {
                    "value": "0.02015",
                    "scoring_system": "epss",
                    "scoring_elements": "0.83828",
                    "published_at": "2026-05-05T12:55:00Z"
                },
                {
                    "value": "0.02015",
                    "scoring_system": "epss",
                    "scoring_elements": "0.83849",
                    "published_at": "2026-05-07T12:55:00Z"
                },
                {
                    "value": "0.02015",
                    "scoring_system": "epss",
                    "scoring_elements": "0.83866",
                    "published_at": "2026-05-09T12:55:00Z"
                },
                {
                    "value": "0.02015",
                    "scoring_system": "epss",
                    "scoring_elements": "0.83865",
                    "published_at": "2026-05-11T12:55:00Z"
                },
                {
                    "value": "0.02015",
                    "scoring_system": "epss",
                    "scoring_elements": "0.83881",
                    "published_at": "2026-05-12T12:55:00Z"
                }
            ],
            "url": "https://api.first.org/data/v1/epss?cve=CVE-2005-2040"
        },
        {
            "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2040",
            "reference_id": "",
            "reference_type": "",
            "scores": [],
            "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2040"
        },
        {
            "reference_url": "http://secunia.com/advisories/15718",
            "reference_id": "",
            "reference_type": "",
            "scores": [],
            "url": "http://secunia.com/advisories/15718"
        },
        {
            "reference_url": "http://www.debian.org/security/2005/dsa-758",
            "reference_id": "",
            "reference_type": "",
            "scores": [],
            "url": "http://www.debian.org/security/2005/dsa-758"
        },
        {
            "reference_url": "http://www.gentoo.org/security/en/glsa/glsa-200506-24.xml",
            "reference_id": "",
            "reference_type": "",
            "scores": [],
            "url": "http://www.gentoo.org/security/en/glsa/glsa-200506-24.xml"
        },
        {
            "reference_url": "http://www.novell.com/linux/security/advisories/2005_40_heimdal.html",
            "reference_id": "",
            "reference_type": "",
            "scores": [],
            "url": "http://www.novell.com/linux/security/advisories/2005_40_heimdal.html"
        },
        {
            "reference_url": "http://www.pdc.kth.se/heimdal/advisory/2005-06-20/",
            "reference_id": "",
            "reference_type": "",
            "scores": [],
            "url": "http://www.pdc.kth.se/heimdal/advisory/2005-06-20/"
        },
        {
            "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=315065",
            "reference_id": "315065",
            "reference_type": "",
            "scores": [],
            "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=315065"
        },
        {
            "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:telnetd:telnetd:0.3f:*:*:*:*:*:*:*",
            "reference_id": "cpe:2.3:a:telnetd:telnetd:0.3f:*:*:*:*:*:*:*",
            "reference_type": "",
            "scores": [],
            "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:telnetd:telnetd:0.3f:*:*:*:*:*:*:*"
        },
        {
            "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:telnetd:telnetd:0.4a:*:*:*:*:*:*:*",
            "reference_id": "cpe:2.3:a:telnetd:telnetd:0.4a:*:*:*:*:*:*:*",
            "reference_type": "",
            "scores": [],
            "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:telnetd:telnetd:0.4a:*:*:*:*:*:*:*"
        },
        {
            "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:telnetd:telnetd:0.4b:*:*:*:*:*:*:*",
            "reference_id": "cpe:2.3:a:telnetd:telnetd:0.4b:*:*:*:*:*:*:*",
            "reference_type": "",
            "scores": [],
            "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:telnetd:telnetd:0.4b:*:*:*:*:*:*:*"
        },
        {
            "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:telnetd:telnetd:0.4c:*:*:*:*:*:*:*",
            "reference_id": "cpe:2.3:a:telnetd:telnetd:0.4c:*:*:*:*:*:*:*",
            "reference_type": "",
            "scores": [],
            "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:telnetd:telnetd:0.4c:*:*:*:*:*:*:*"
        },
        {
            "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:telnetd:telnetd:0.4d:*:*:*:*:*:*:*",
            "reference_id": "cpe:2.3:a:telnetd:telnetd:0.4d:*:*:*:*:*:*:*",
            "reference_type": "",
            "scores": [],
            "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:telnetd:telnetd:0.4d:*:*:*:*:*:*:*"
        },
        {
            "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:telnetd:telnetd:0.4e:*:*:*:*:*:*:*",
            "reference_id": "cpe:2.3:a:telnetd:telnetd:0.4e:*:*:*:*:*:*:*",
            "reference_type": "",
            "scores": [],
            "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:telnetd:telnetd:0.4e:*:*:*:*:*:*:*"
        },
        {
            "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:telnetd:telnetd:0.5.0:*:*:*:*:*:*:*",
            "reference_id": "cpe:2.3:a:telnetd:telnetd:0.5.0:*:*:*:*:*:*:*",
            "reference_type": "",
            "scores": [],
            "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:telnetd:telnetd:0.5.0:*:*:*:*:*:*:*"
        },
        {
            "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:telnetd:telnetd:0.5.1:*:*:*:*:*:*:*",
            "reference_id": "cpe:2.3:a:telnetd:telnetd:0.5.1:*:*:*:*:*:*:*",
            "reference_type": "",
            "scores": [],
            "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:telnetd:telnetd:0.5.1:*:*:*:*:*:*:*"
        },
        {
            "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:telnetd:telnetd:0.5.2:*:*:*:*:*:*:*",
            "reference_id": "cpe:2.3:a:telnetd:telnetd:0.5.2:*:*:*:*:*:*:*",
            "reference_type": "",
            "scores": [],
            "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:telnetd:telnetd:0.5.2:*:*:*:*:*:*:*"
        },
        {
            "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:telnetd:telnetd:0.5.3:*:*:*:*:*:*:*",
            "reference_id": "cpe:2.3:a:telnetd:telnetd:0.5.3:*:*:*:*:*:*:*",
            "reference_type": "",
            "scores": [],
            "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:telnetd:telnetd:0.5.3:*:*:*:*:*:*:*"
        },
        {
            "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:telnetd:telnetd:0.6:*:*:*:*:*:*:*",
            "reference_id": "cpe:2.3:a:telnetd:telnetd:0.6:*:*:*:*:*:*:*",
            "reference_type": "",
            "scores": [],
            "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:telnetd:telnetd:0.6:*:*:*:*:*:*:*"
        },
        {
            "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:telnetd:telnetd:0.6.1:*:*:*:*:*:*:*",
            "reference_id": "cpe:2.3:a:telnetd:telnetd:0.6.1:*:*:*:*:*:*:*",
            "reference_type": "",
            "scores": [],
            "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:telnetd:telnetd:0.6.1:*:*:*:*:*:*:*"
        },
        {
            "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:telnetd:telnetd:0.6.2:*:*:*:*:*:*:*",
            "reference_id": "cpe:2.3:a:telnetd:telnetd:0.6.2:*:*:*:*:*:*:*",
            "reference_type": "",
            "scores": [],
            "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:telnetd:telnetd:0.6.2:*:*:*:*:*:*:*"
        },
        {
            "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2005-2040",
            "reference_id": "CVE-2005-2040",
            "reference_type": "",
            "scores": [
                {
                    "value": "5.0",
                    "scoring_system": "cvssv2",
                    "scoring_elements": "AV:N/AC:L/Au:N/C:N/I:P/A:N"
                }
            ],
            "url": "https://nvd.nist.gov/vuln/detail/CVE-2005-2040"
        }
    ],
    "weaknesses": [],
    "exploits": [],
    "severity_range_score": "5.0 - 5.0",
    "exploitability": "0.5",
    "weighted_severity": "4.5",
    "risk_score": 2.2,
    "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-j7kn-5ch6-13du"
}