BO
Product
Bootstrap OS
On CISA KEVExploited in the wildRansomware-linked
57
CVEs
4
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 4High 21Medium 25Low 7
Watch
Add Bootstrap OS to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-1086 RansomwareIn wildKEV | 7.8 | Jan 31 | Use-after-free in Linux kernel's netfilter: nf_tables component Affected: All versions, or not specified |
| CVE-2023-4911 In wildKEV | 7.8 | Oct 3 | Glibc: buffer overflow in ld.so leading to privilege escalation Affected: All versions, or not specified |
| CVE-2022-0492 In wildKEV | 7.8 | Mar 3 | Linux Kernel Improper Authentication Vulnerability Affected: All versions, or not specified |
| CVE-2024-32487 | 8.6 | Apr 13 | less through 653 allows OS command execution via a newline character in the name of a file, because quoting is mishandled in filename.c Affected: All versions, or not specified |
| CVE-2024-2398 | 8.6 | Mar 27 | HTTP/2 push headers memory-leak Affected: All versions, or not specified |
| CVE-2024-6387 | 8.1 | Jul 1 | Openssh: regresshion - race condition in ssh allows rce/dos Affected: All versions, or not specified |
| CVE-2022-22576 | 8.1 | May 26 | An improper authentication vulnerability exists in curl 7.33.0 to and including 7.82.0 which might allow reuse OAUTH2-authenticated connections without properly making sure that… Affected: All versions, or not specified |
| CVE-2019-17498 | 8.1 | Oct 21 | In libssh2 v1.9.0 and earlier versions, the SSH_MSG_DISCONNECT logic in packet.c has an integer overflow in a bounds check, enabling an attacker to specify an arbitrary… Affected: All versions, or not specified |
| CVE-2025-1215 | 7.8 | Feb 12 | A vulnerability classified as problematic was found in vim up to 9.1.1096 Affected: All versions, or not specified |
| CVE-2024-9823 | 7.5 | Oct 14 | There exists a security vulnerability in Jetty's DosFilter which can be exploited by unauthorized users to cause remote denial-of-service (DoS) attack on the server using… Affected: All versions, or not specified |
| CVE-2024-6119 | 7.5 | Sep 3 | Possible denial of service in X.509 name checks Affected: All versions, or not specified |
| CVE-2023-50868 | 7.5 | Feb 14 | The Closest Encloser Proof aspect of the DNS protocol (in RFC 5155 when RFC 9276 guidance is skipped) allows remote attackers to cause a denial of service (CPU consumption for… Affected: All versions, or not specified |
| CVE-2022-45061 | 7.5 | Nov 9 | An issue was discovered in Python before 3.11.1 Affected: All versions, or not specified |
| CVE-2022-1678 | 7.5 | May 25 | An issue was discovered in the Linux Kernel from 4.18 to 4.19, an improper update of sock reference in TCP pacing can lead to memory/netns leak, which can be used by remote… Affected: All versions, or not specified |
| CVE-2022-21476 | 7.5 | Apr 19 | Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries) Affected: All versions, or not specified |
| CVE-2022-23308 | 7.5 | Feb 26 | valid.c in libxml2 before 2.9.13 has a use-after-free of ID and IDREF attributes Affected: All versions, or not specified |
| CVE-2024-21147 | 7.4 | Jul 16 | Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot) Affected: All versions, or not specified |
| CVE-2022-2068 | 7.3 | Jun 21 | The c_rehash script allows command injection Affected: All versions, or not specified |
| CVE-2025-0665 | 7.0 | Feb 5 | eventfd double close Affected: All versions, or not specified |
| CVE-2023-29483 | 7.0 | Apr 11 | eventlet before 0.35.2, as used in dnspython before 2.6.0, allows remote attackers to interfere with DNS name resolution by quickly sending an invalid packet from the expected IP… Affected: All versions, or not specified |
| CVE-2020-11884 | 7.0 | Apr 29 | In the Linux kernel 4.19 through 5.6.7 on the s390 platform, code execution may occur because of a race condition, as demonstrated by code in enable_sacf_uaccess in… Affected: All versions, or not specified |
Showing 21