HB
Product
Hci Bootstrap OS
27
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 12Medium 12Low 2
Watch
Add Hci Bootstrap OS to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-4209 | 6.5 | Aug 24 | A NULL pointer dereference flaw was found in GnuTLS Affected: All versions, or not specified |
| CVE-2022-27776 | 6.5 | Jun 1 | A insufficiently protected credentials vulnerability in fixed in curl 7.83.0 might leak authentication or cookie header data on HTTP redirects to the same host but another port… Affected: All versions, or not specified |
| CVE-2021-38199 | 6.5 | Aug 8 | fs/nfs/nfs4client.c in the Linux kernel before 5.13.4 has incorrect connection-setup ordering, which allows operators of remote NFSv4 servers to cause a denial of service (hanging… Affected: All versions, or not specified |
| CVE-2024-33600 | 5.9 | May 6 | nscd: Null pointer crashes after notfound response Affected: All versions, or not specified |
| CVE-2019-0201 | 5.9 | May 23 | An issue is present in Apache ZooKeeper 1.0.0 to 3.4.13 and 3.5.0-alpha to 3.5.4-beta Affected: All versions, or not specified |
| CVE-2022-27774 | 5.7 | Jun 1 | An insufficiently protected credentials vulnerability exists in curl 4.9 to and include curl 7.82.0 are affected that could allow an attacker to extract credentials when follows… Affected: All versions, or not specified |
| CVE-2022-36879 | 5.5 | Jul 27 | An issue was discovered in the Linux kernel through 5.18.14 Affected: All versions, or not specified |
| CVE-2021-38203 | 5.5 | Aug 8 | btrfs in the Linux kernel before 5.13.4 allows attackers to cause a denial of service (deadlock) via processes that trigger allocation of new system chunks during times when there… Affected: All versions, or not specified |
| CVE-2020-12771 | 5.5 | May 9 | An issue was discovered in the Linux kernel through 5.6.11 Affected: All versions, or not specified |
| CVE-2022-27779 | 5.3 | Jun 1 | libcurl wrongly allows cookies to be set for Top Level Domains (TLDs) if thehost name is provided with a trailing dot.curl can be told to receive and send cookies Affected: All versions, or not specified |
| CVE-2023-29153 | 4.9 | Feb 14 | Uncontrolled resource consumption for some Intel(R) SPS firmware before version SPS_E5_06.01.04.002.0 may allow a privileged user to potentially enable denial of service via… Affected: All versions, or not specified |
| CVE-2022-30115 | 4.3 | Jun 1 | Using its HSTS support, curl can be instructed to use HTTPS directly insteadof using an insecure clear-text HTTP step even when HTTP is provided in theURL Affected: All versions, or not specified |
Showing 12
