BO
Product
Bookkeeper
7
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 4Medium 2Low 0
Watch
Add Bookkeeper to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2019-17571 | 9.8 | Dec 20 | Included in Log4j 1.2 is a SocketServer class that is vulnerable to deserialization of untrusted data which can be exploited to remotely execute arbitrary code when combined with… Affected: before 4.14.3 |
| CVE-2017-6891 | 8.8 | May 22 | Two errors in the "asn1_find_node()" function (lib/parser_aux.c) within GnuTLS libtasn1 version 4.10 can be exploited to cause a stacked-based buffer overflow by tricking a user… Affected: 4.12.1 |
| CVE-2020-36230 | 7.5 | Jan 25 | A flaw was discovered in OpenLDAP before 2.4.57 leading in an assertion failure in slapd in the X.509 DN parsing in decode.c ber_next_element, resulting in denial of service Affected: 4.12.1 |
| CVE-2019-19906 | 7.5 | Dec 19 | cyrus-sasl (aka Cyrus SASL) 2.1.27 has an out-of-bounds write leading to unauthenticated remote denial-of-service in OpenLDAP via a malformed LDAP packet Affected: 4.12.1 |
| CVE-2020-23922 | 7.1 | Apr 21 | An issue was discovered in giflib through 5.1.4 Affected: 4.12.1 |
| CVE-2022-32531 | 5.9 | Dec 15 | The Apache Bookkeeper Java Client (before 4.14.6 and also 4.15.0) does not close the connection to the bookkeeper server when TLS hostname verification fails Affected: before 4.14.6; 4.15.0; 4.15.0 |
| CVE-2019-19924 | 5.3 | Dec 24 | SQLite 3.30.1 mishandles certain parser-tree rewriting, related to expr.c, vdbeaux.c, and window.c Affected: 4.12.1 |
Showing 7