Search for packages
Package details: pkg:deb/debian/pound@2.7-1.3%2Bdeb9u1
purl pkg:deb/debian/pound@2.7-1.3%2Bdeb9u1
Next non-vulnerable version 3.0-2
Latest non-vulnerable version 3.0-2
Risk 4.4
Vulnerabilities affecting this package (2)
Vulnerability Summary Fixed by
VCID-e8c2-gjkh-g3dq
Aliases:
CVE-2018-21245
Pound before 2.8 allows HTTP request smuggling, a related issue to CVE-2016-10711.
3.0-2
Affected by 0 other vulnerabilities.
VCID-zxsj-vczj-zkb2
Aliases:
CVE-2016-10711
Apsis Pound before 2.8a allows request smuggling via crafted headers, a different vulnerability than CVE-2005-3751.
3.0-2
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (1)
Vulnerability Summary Aliases
VCID-jgh7-7mm8-mbgj CVE-2009-3555
GHSA-f7w7-6pjc-wwm6
VU#120541

Date Actor Action Vulnerability Source VulnerableCode Version
2025-08-01T16:24:55.235464+00:00 Debian Oval Importer Affected by VCID-zxsj-vczj-zkb2 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 37.0.0
2025-08-01T16:16:25.398815+00:00 Debian Oval Importer Fixing VCID-jgh7-7mm8-mbgj https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 37.0.0
2025-08-01T13:45:45.051107+00:00 Debian Oval Importer Affected by VCID-e8c2-gjkh-g3dq https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 37.0.0