Vulnerability Instance
Lookup for vulnerabilities affecting packages.
GET /api/vulnerabilities/93351?format=api
{ "url": "http://public2.vulnerablecode.io/api/vulnerabilities/93351?format=api", "vulnerability_id": "VCID-d7md-3ueu-puhr", "summary": "In libytnef in ytnef through 1.9.2, there is a heap-based buffer over-read due to incorrect boundary checking in the SIZECHECK macro in lib/ytnef.c.", "aliases": [ { "alias": "CVE-2017-9058" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/373008?format=api", "purl": "pkg:alpm/archlinux/libytnef@1.9.2-2", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:alpm/archlinux/libytnef@1.9.2-2" }, { "url": "http://public2.vulnerablecode.io/api/packages/929388?format=api", "purl": "pkg:deb/debian/libytnef@1.9.2-2?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/libytnef@1.9.2-2%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1049949?format=api", "purl": "pkg:deb/debian/libytnef@1.9.2-2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-21bd-whcr-ekgv" }, { "vulnerability": "VCID-2zd4-eyeq-27dd" }, { "vulnerability": "VCID-4vcd-yfbf-2bew" }, { "vulnerability": "VCID-4w5v-t22x-5khp" }, { "vulnerability": "VCID-8esx-t2u5-e3hq" }, { "vulnerability": "VCID-efxj-4v6j-fbaa" }, { "vulnerability": "VCID-nrgn-8ky2-pyec" }, { "vulnerability": "VCID-qkuz-r9a9-vqbx" }, { "vulnerability": "VCID-sag4-mswc-hbg5" }, { "vulnerability": "VCID-uar8-sxnf-efhs" }, { "vulnerability": "VCID-ujwn-5uux-gygu" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/libytnef@1.9.2-2" }, { "url": "http://public2.vulnerablecode.io/api/packages/929383?format=api", "purl": "pkg:deb/debian/libytnef@1.9.3-3?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/libytnef@1.9.3-3%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/929381?format=api", "purl": "pkg:deb/debian/libytnef@2.0-1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/libytnef@2.0-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/929384?format=api", "purl": "pkg:deb/debian/libytnef@2.1.2-1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/libytnef@2.1.2-1%3Fdistro=trixie" } ], "affected_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/373007?format=api", "purl": "pkg:alpm/archlinux/libytnef@1.9.2-1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-d7md-3ueu-puhr" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:alpm/archlinux/libytnef@1.9.2-1" }, { "url": "http://public2.vulnerablecode.io/api/packages/1035500?format=api", "purl": "pkg:deb/debian/libytnef@1.5-1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-21bd-whcr-ekgv" }, { "vulnerability": "VCID-2zd4-eyeq-27dd" }, { "vulnerability": "VCID-4vcd-yfbf-2bew" }, { "vulnerability": "VCID-4w5v-t22x-5khp" }, { "vulnerability": "VCID-6bb4-nr6n-wufy" }, { "vulnerability": "VCID-8esx-t2u5-e3hq" }, { "vulnerability": "VCID-c3hk-hm71-eqdf" }, { "vulnerability": "VCID-cx2k-skx9-j3c6" }, { "vulnerability": "VCID-d529-bgrd-6ya7" }, { "vulnerability": "VCID-d7md-3ueu-puhr" }, { "vulnerability": "VCID-dnnp-fjbz-u7b6" }, { "vulnerability": "VCID-efxj-4v6j-fbaa" }, { "vulnerability": "VCID-j1fz-gkzw-qbc9" }, { "vulnerability": "VCID-jhtz-myes-dua9" }, { "vulnerability": "VCID-mhyf-fp38-u3de" }, { "vulnerability": "VCID-nrgn-8ky2-pyec" }, { "vulnerability": "VCID-qjgm-8c1m-qbfg" }, { "vulnerability": "VCID-qkuz-r9a9-vqbx" }, { "vulnerability": "VCID-sag4-mswc-hbg5" }, { "vulnerability": "VCID-uar8-sxnf-efhs" }, { "vulnerability": "VCID-ujwn-5uux-gygu" }, { "vulnerability": "VCID-vbsd-6wyd-qfgp" }, { "vulnerability": "VCID-vsdy-7eh2-8yc9" }, { "vulnerability": "VCID-z8rr-5xpx-eqbb" }, { "vulnerability": "VCID-zaqk-yw24-t7h1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/libytnef@1.5-1" }, { "url": "http://public2.vulnerablecode.io/api/packages/1035501?format=api", "purl": "pkg:deb/debian/libytnef@1.5-2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-21bd-whcr-ekgv" }, { "vulnerability": "VCID-2zd4-eyeq-27dd" }, { "vulnerability": "VCID-4vcd-yfbf-2bew" }, { "vulnerability": "VCID-4w5v-t22x-5khp" }, { "vulnerability": "VCID-6bb4-nr6n-wufy" }, { "vulnerability": "VCID-8esx-t2u5-e3hq" }, { "vulnerability": "VCID-c3hk-hm71-eqdf" }, { "vulnerability": "VCID-cx2k-skx9-j3c6" }, { "vulnerability": "VCID-d529-bgrd-6ya7" }, { "vulnerability": "VCID-d7md-3ueu-puhr" }, { "vulnerability": "VCID-dnnp-fjbz-u7b6" }, { "vulnerability": "VCID-efxj-4v6j-fbaa" }, { "vulnerability": "VCID-j1fz-gkzw-qbc9" }, { "vulnerability": "VCID-jhtz-myes-dua9" }, { "vulnerability": "VCID-mhyf-fp38-u3de" }, { "vulnerability": "VCID-nrgn-8ky2-pyec" }, { "vulnerability": "VCID-qjgm-8c1m-qbfg" }, { "vulnerability": "VCID-qkuz-r9a9-vqbx" }, { "vulnerability": "VCID-sag4-mswc-hbg5" }, { "vulnerability": "VCID-uar8-sxnf-efhs" }, { "vulnerability": "VCID-ujwn-5uux-gygu" }, { "vulnerability": "VCID-vbsd-6wyd-qfgp" }, { "vulnerability": "VCID-vsdy-7eh2-8yc9" }, { "vulnerability": "VCID-z8rr-5xpx-eqbb" }, { "vulnerability": "VCID-zaqk-yw24-t7h1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/libytnef@1.5-2" }, { "url": "http://public2.vulnerablecode.io/api/packages/1035502?format=api", "purl": "pkg:deb/debian/libytnef@1.5-4", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-21bd-whcr-ekgv" }, { "vulnerability": "VCID-2zd4-eyeq-27dd" }, { "vulnerability": "VCID-4vcd-yfbf-2bew" }, { "vulnerability": "VCID-4w5v-t22x-5khp" }, { "vulnerability": "VCID-6bb4-nr6n-wufy" }, { "vulnerability": "VCID-8esx-t2u5-e3hq" }, { "vulnerability": "VCID-c3hk-hm71-eqdf" }, { "vulnerability": "VCID-cx2k-skx9-j3c6" }, { "vulnerability": "VCID-d529-bgrd-6ya7" }, { "vulnerability": "VCID-d7md-3ueu-puhr" }, { "vulnerability": "VCID-dnnp-fjbz-u7b6" }, { "vulnerability": "VCID-efxj-4v6j-fbaa" }, { "vulnerability": "VCID-j1fz-gkzw-qbc9" }, { "vulnerability": "VCID-jhtz-myes-dua9" }, { "vulnerability": "VCID-mhyf-fp38-u3de" }, { "vulnerability": "VCID-nrgn-8ky2-pyec" }, { "vulnerability": "VCID-qjgm-8c1m-qbfg" }, { "vulnerability": "VCID-qkuz-r9a9-vqbx" }, { "vulnerability": "VCID-sag4-mswc-hbg5" }, { "vulnerability": "VCID-uar8-sxnf-efhs" }, { "vulnerability": "VCID-ujwn-5uux-gygu" }, { "vulnerability": "VCID-vbsd-6wyd-qfgp" }, { "vulnerability": "VCID-vsdy-7eh2-8yc9" }, { "vulnerability": "VCID-z8rr-5xpx-eqbb" }, { "vulnerability": "VCID-zaqk-yw24-t7h1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/libytnef@1.5-4" }, { "url": "http://public2.vulnerablecode.io/api/packages/1035503?format=api", "purl": "pkg:deb/debian/libytnef@1.5-6", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-21bd-whcr-ekgv" }, { "vulnerability": "VCID-2zd4-eyeq-27dd" }, { "vulnerability": "VCID-4vcd-yfbf-2bew" }, { "vulnerability": "VCID-4w5v-t22x-5khp" }, { "vulnerability": "VCID-6bb4-nr6n-wufy" }, { "vulnerability": "VCID-8esx-t2u5-e3hq" }, { "vulnerability": "VCID-c3hk-hm71-eqdf" }, { "vulnerability": "VCID-cx2k-skx9-j3c6" }, { "vulnerability": "VCID-d529-bgrd-6ya7" }, { "vulnerability": "VCID-d7md-3ueu-puhr" }, { "vulnerability": "VCID-dnnp-fjbz-u7b6" }, { "vulnerability": "VCID-efxj-4v6j-fbaa" }, { "vulnerability": "VCID-j1fz-gkzw-qbc9" }, { "vulnerability": "VCID-jhtz-myes-dua9" }, { "vulnerability": "VCID-mhyf-fp38-u3de" }, { "vulnerability": "VCID-nrgn-8ky2-pyec" }, { "vulnerability": "VCID-qjgm-8c1m-qbfg" }, { "vulnerability": "VCID-qkuz-r9a9-vqbx" }, { "vulnerability": "VCID-sag4-mswc-hbg5" }, { "vulnerability": "VCID-uar8-sxnf-efhs" }, { "vulnerability": "VCID-ujwn-5uux-gygu" }, { "vulnerability": "VCID-vbsd-6wyd-qfgp" }, { "vulnerability": "VCID-vsdy-7eh2-8yc9" }, { "vulnerability": "VCID-z8rr-5xpx-eqbb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/libytnef@1.5-6" }, { "url": "http://public2.vulnerablecode.io/api/packages/1035504?format=api", "purl": "pkg:deb/debian/libytnef@1.5-6%2Bdeb8u1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-21bd-whcr-ekgv" }, { "vulnerability": "VCID-2zd4-eyeq-27dd" }, { "vulnerability": "VCID-4vcd-yfbf-2bew" }, { "vulnerability": "VCID-4w5v-t22x-5khp" }, { "vulnerability": "VCID-6bb4-nr6n-wufy" }, { "vulnerability": "VCID-8esx-t2u5-e3hq" }, { "vulnerability": "VCID-c3hk-hm71-eqdf" }, { "vulnerability": "VCID-cx2k-skx9-j3c6" }, { "vulnerability": "VCID-d529-bgrd-6ya7" }, { "vulnerability": "VCID-d7md-3ueu-puhr" }, { "vulnerability": "VCID-dnnp-fjbz-u7b6" }, { "vulnerability": "VCID-efxj-4v6j-fbaa" }, { "vulnerability": "VCID-j1fz-gkzw-qbc9" }, { "vulnerability": "VCID-jhtz-myes-dua9" }, { "vulnerability": "VCID-mhyf-fp38-u3de" }, { "vulnerability": "VCID-nrgn-8ky2-pyec" }, { "vulnerability": "VCID-qjgm-8c1m-qbfg" }, { "vulnerability": "VCID-qkuz-r9a9-vqbx" }, { "vulnerability": "VCID-sag4-mswc-hbg5" }, { "vulnerability": "VCID-uar8-sxnf-efhs" }, { "vulnerability": "VCID-ujwn-5uux-gygu" }, { "vulnerability": "VCID-vbsd-6wyd-qfgp" }, { "vulnerability": "VCID-vsdy-7eh2-8yc9" }, { "vulnerability": "VCID-z8rr-5xpx-eqbb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/libytnef@1.5-6%252Bdeb8u1" } ], "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2017-9058", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00389", "scoring_system": "epss", "scoring_elements": "0.60099", "published_at": "2026-05-14T12:55:00Z" }, { "value": "0.00389", "scoring_system": "epss", "scoring_elements": "0.59854", "published_at": "2026-04-01T12:55:00Z" }, { "value": "0.00389", "scoring_system": "epss", "scoring_elements": "0.5993", "published_at": "2026-04-02T12:55:00Z" }, { "value": "0.00389", "scoring_system": "epss", "scoring_elements": "0.59956", "published_at": "2026-04-04T12:55:00Z" }, { "value": "0.00389", "scoring_system": "epss", "scoring_elements": "0.59926", "published_at": "2026-04-07T12:55:00Z" }, { "value": "0.00389", "scoring_system": "epss", "scoring_elements": "0.59976", "published_at": "2026-04-08T12:55:00Z" }, { "value": "0.00389", "scoring_system": "epss", "scoring_elements": "0.59989", "published_at": "2026-04-09T12:55:00Z" }, { "value": "0.00389", "scoring_system": "epss", "scoring_elements": "0.6001", "published_at": "2026-04-11T12:55:00Z" }, { "value": "0.00389", "scoring_system": "epss", "scoring_elements": "0.59995", "published_at": "2026-04-12T12:55:00Z" }, { "value": "0.00389", "scoring_system": "epss", "scoring_elements": "0.59977", "published_at": "2026-04-13T12:55:00Z" }, { "value": "0.00389", "scoring_system": "epss", "scoring_elements": "0.60016", "published_at": "2026-04-16T12:55:00Z" }, { "value": "0.00389", "scoring_system": "epss", "scoring_elements": "0.60024", "published_at": "2026-04-18T12:55:00Z" }, { "value": "0.00389", "scoring_system": "epss", "scoring_elements": "0.60009", "published_at": "2026-05-11T12:55:00Z" }, { "value": "0.00389", "scoring_system": "epss", "scoring_elements": "0.5998", "published_at": "2026-04-24T12:55:00Z" }, { "value": "0.00389", "scoring_system": "epss", "scoring_elements": "0.59998", "published_at": "2026-04-26T12:55:00Z" }, { "value": "0.00389", "scoring_system": "epss", "scoring_elements": "0.59985", "published_at": "2026-04-29T12:55:00Z" }, { "value": "0.00389", "scoring_system": "epss", "scoring_elements": "0.59946", "published_at": "2026-05-05T12:55:00Z" }, { "value": "0.00389", "scoring_system": "epss", "scoring_elements": "0.59993", "published_at": "2026-05-07T12:55:00Z" }, { "value": "0.00389", "scoring_system": "epss", "scoring_elements": "0.6005", "published_at": "2026-05-09T12:55:00Z" }, { "value": "0.00389", "scoring_system": "epss", "scoring_elements": "0.60036", "published_at": "2026-05-12T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2017-9058" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9058", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9058" }, { "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=862556", "reference_id": "862556", "reference_type": "", "scores": [], "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=862556" }, { "reference_url": "https://security.archlinux.org/ASA-201708-10", "reference_id": "ASA-201708-10", "reference_type": "", "scores": [], "url": "https://security.archlinux.org/ASA-201708-10" }, { "reference_url": "https://security.archlinux.org/AVG-275", "reference_id": "AVG-275", "reference_type": "", "scores": [ { "value": "High", "scoring_system": "archlinux", "scoring_elements": "" } ], "url": "https://security.archlinux.org/AVG-275" }, { "reference_url": "https://usn.ubuntu.com/3667-1/", "reference_id": "USN-3667-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/3667-1/" } ], "weaknesses": [], "exploits": [], "severity_range_score": "7.0 - 8.9", "exploitability": "0.5", "weighted_severity": "8.0", "risk_score": 4.0, "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-d7md-3ueu-puhr" }