VulnerableCode Package Details - pkg:deb/debian/pound@2.6-2%2Bdeb7u1

Search for packages

Package details: pkg:deb/debian/pound@2.6-2%2Bdeb7u1

Essentials
History (12)

purl	pkg:deb/debian/pound@2.6-2%2Bdeb7u1

Next non-vulnerable version	3.0-2
Latest non-vulnerable version	3.0-2
Risk	10.0

Vulnerabilities affecting this package (5)

Vulnerability	Summary	Fixed by
VCID-9wxv-prk9-53he Aliases: CVE-2012-4929		2.6-6 Affected by 5 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} 2.6-6+deb8u1 Affected by 3 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }}
VCID-e8c2-gjkh-g3dq Aliases: CVE-2018-21245	Pound before 2.8 allows HTTP request smuggling, a related issue to CVE-2016-10711.	3.0-2 Affected by 0 other vulnerabilities.
VCID-jgh7-7mm8-mbgj Aliases: CVE-2009-3555 GHSA-f7w7-6pjc-wwm6 VU#120541		2.6-6+deb8u1 Affected by 3 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} 2.7-1.3+deb9u1 Affected by 2 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }}
VCID-m67w-mzaf-duch Aliases: CVE-2014-3566		2.6-6 Affected by 5 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} 2.6-6+deb8u1 Affected by 3 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }}
VCID-zxsj-vczj-zkb2 Aliases: CVE-2016-10711	Apsis Pound before 2.8a allows request smuggling via crafted headers, a different vulnerability than CVE-2005-3751.	3.0-2 Affected by 0 other vulnerabilities.

Vulnerabilities fixed by this package (4)

Vulnerability	Summary	Aliases
VCID-9wxv-prk9-53he		CVE-2012-4929
VCID-jgh7-7mm8-mbgj		CVE-2009-3555 GHSA-f7w7-6pjc-wwm6 VU#120541
VCID-ksnr-v863-xuf1		CVE-2011-3389
VCID-m67w-mzaf-duch		CVE-2014-3566

Date	Actor	Action	Vulnerability	Source	VulnerableCode Version
2025-08-01T18:32:37.113939+00:00	Debian Oval Importer	Affected by	VCID-m67w-mzaf-duch	https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2	37.0.0
2025-08-01T17:49:57.442652+00:00	Debian Oval Importer	Fixing	VCID-ksnr-v863-xuf1	https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2	37.0.0
2025-08-01T17:40:00.376719+00:00	Debian Oval Importer	Affected by	VCID-9wxv-prk9-53he	https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2	37.0.0
2025-08-01T16:24:55.220690+00:00	Debian Oval Importer	Affected by	VCID-zxsj-vczj-zkb2	https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2	37.0.0
2025-08-01T16:16:25.385118+00:00	Debian Oval Importer	Affected by	VCID-jgh7-7mm8-mbgj	https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2	37.0.0
2025-08-01T13:45:45.034038+00:00	Debian Oval Importer	Affected by	VCID-e8c2-gjkh-g3dq	https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2	37.0.0
2025-08-01T10:21:55.577027+00:00	Debian Oval Importer	Affected by	VCID-9wxv-prk9-53he	https://www.debian.org/security/oval/oval-definitions-jessie.xml.bz2	37.0.0
2025-08-01T10:13:01.526408+00:00	Debian Oval Importer	Affected by	VCID-m67w-mzaf-duch	https://www.debian.org/security/oval/oval-definitions-jessie.xml.bz2	37.0.0
2025-08-01T09:56:22.655321+00:00	Debian Oval Importer	Affected by	VCID-jgh7-7mm8-mbgj	https://www.debian.org/security/oval/oval-definitions-jessie.xml.bz2	37.0.0
2025-08-01T09:40:03.066455+00:00	Debian Oval Importer	Fixing	VCID-jgh7-7mm8-mbgj	https://www.debian.org/security/oval/oval-definitions-wheezy.xml.bz2	37.0.0
2025-08-01T09:35:47.444613+00:00	Debian Oval Importer	Fixing	VCID-m67w-mzaf-duch	https://www.debian.org/security/oval/oval-definitions-wheezy.xml.bz2	37.0.0
2025-08-01T09:27:15.205566+00:00	Debian Oval Importer	Fixing	VCID-9wxv-prk9-53he	https://www.debian.org/security/oval/oval-definitions-wheezy.xml.bz2	37.0.0