Bootstrap Os (Netapp) - vulnerabilities (CVEs)

57 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2025-04-15. Vendor: Netapp.

CVEs of Bootstrap Os

CVE-2025-30691 - CVSS 4.8 (medium), 2025-04-15: Vulnerability in Oracle Java SE (component: Compiler). Supported versions that are affected are Oracle Java SE: 21.0.6, 24; Oracle GraalVM for JDK: 21.0.6 and…
CVE-2025-29768 - CVSS 4.4 (medium), 2025-03-13: Vim, a text editor, is vulnerable to potential data loss with zip.vim and special crafted zip files in versions prior to 9.1.1198. The impact is medium…
CVE-2025-24813 - CVSS 10 (critical), 2025-03-10: Path Equivalence: 'file.Name' (Internal Dot) leading to Remote Code Execution and/or Information disclosure and/or malicious content added to uploaded files…
CVE-2025-1215 - CVSS 7.8 (high), 2025-02-12: A vulnerability classified as problematic was found in vim up to 9.1.1096. This vulnerability affects unknown code of the file src/main.c. The manipulation of…
CVE-2025-0665 - CVSS 7 (high), 2025-02-05: libcurl would wrongly close the same eventfd file descriptor twice when taking down a connection channel after having completed a threaded name resolve.
CVE-2025-0167 - CVSS 3.4 (low), 2025-02-05: When asked to use a `.netrc` file for credentials **and** to follow HTTP redirects, curl could leak the password used for the first host to the followed-to…
CVE-2025-21502 - CVSS 4.8 (medium), 2025-01-21: Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot). Supported…
CVE-2025-22134 - CVSS 5.5 (medium), 2025-01-13: When switching to other buffers using the :all command and visual mode still being active, this may cause a heap-buffer overflow, because Vim does not…
CVE-2024-56337 - CVSS 9.8 (critical), 2024-12-20: Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability in Apache Tomcat. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.1, from…
CVE-2024-54677 - CVSS 5.3 (medium), 2024-12-17: Uncontrolled Resource Consumption vulnerability in the examples web application provided with Apache Tomcat leads to denial of service. This issue affects…
CVE-2024-50379 - CVSS 9.8 (critical), 2024-12-17: Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability during JSP compilation in Apache Tomcat permits an RCE on case insensitive file systems when…
CVE-2024-11053 - CVSS 3.4 (low), 2024-12-11: When asked to both use a `.netrc` file for credentials and to follow HTTP redirects, curl could leak the password used for the first host to the followed-to…
CVE-2024-21211 - CVSS 3.7 (low), 2024-10-15: Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Compiler). Supported…
CVE-2024-9823 - CVSS 7.5 (high), 2024-10-14: There exists a security vulnerability in Jetty's DosFilter which can be exploited by unauthorized users to cause remote denial-of-service (DoS) attack on the…
CVE-2024-47814 - CVSS 4.7 (medium), 2024-10-07: Vim is an open source, command line text editor. A use-after-free was found in Vim < 9.1.0764. When closing a buffer (visible in a window) a BufWinLeave auto…
CVE-2024-8096 - CVSS 6.5 (medium), 2024-09-11: When curl is told to use the Certificate Status Request TLS extension, often referred to as OCSP stapling, to verify that the server certificate is valid, it…
CVE-2024-6119 - CVSS 7.5 (high), 2024-09-03: Issue summary: Applications performing certificate name checks (e.g., TLS clients checking server certificates) may attempt to read an invalid memory address…
CVE-2024-43790 - CVSS 5.5 (medium), 2024-08-22: Vim is an open source command line text editor. When performing a search and displaying the search-count message is disabled (:set shm+=S), the search pattern…
CVE-2024-43398 - CVSS 5.9 (medium), 2024-08-22: REXML is an XML toolkit for Ruby. The REXML gem before 3.3.6 has a DoS vulnerability when it parses an XML that has many deep elements that have same local…
CVE-2024-43374 - CVSS 4.7 (medium), 2024-08-16: The UNIX editor Vim prior to version 9.1.0678 has a use-after-free error in argument list handling. When adding a new file to the argument list, this triggers…
CVE-2024-21147 - CVSS 7.4 (high), 2024-07-16: Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot). Supported…
CVE-2024-21140 - CVSS 4.8 (medium), 2024-07-16: Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot). Supported…
CVE-2024-39908 - CVSS 4.3 (medium), 2024-07-16: REXML is an XML toolkit for Ruby. The REXML gem before 3.3.1 has some DoS vulnerabilities when it parses an XML that has many specific characters such as `<`,…
CVE-2024-6387 - CVSS 8.1 (high), 2024-07-01: A security regression (CVE-2006-5051) was discovered in OpenSSH's server (sshd). There is a race condition which can lead sshd to handle some signals in an…
CVE-2024-26306 - CVSS 5.9 (medium), 2024-05-14: iPerf3 before 3.17, when used with OpenSSL before 3.2.0 as a server with RSA authentication, allows a timing side channel in RSA decryption operations. This…
CVE-2024-32487 - CVSS 8.6 (high), 2024-04-13: less through 653 allows OS command execution via a newline character in the name of a file, because quoting is mishandled in filename.c. Exploitation…
CVE-2023-29483 - CVSS 7 (high), 2024-04-11: eventlet before 0.35.2, as used in dnspython before 2.6.0, allows remote attackers to interfere with DNS name resolution by quickly sending an invalid packet…
CVE-2024-2312 - CVSS 6.7 (medium), 2024-04-05: GRUB2 does not call the module fini functions on exit, leading to Debian/Ubuntu's peimage GRUB2 module leaving UEFI system table hooks after exit. This lead…
CVE-2024-2004 - CVSS 3.5 (low), 2024-03-27: When a protocol selection parameter option disables all protocols without adding any then the default set of protocols would remain in the allowed set due to…
CVE-2024-2466 - CVSS 6.5 (medium), 2024-03-27: libcurl did not check the server certificate of TLS connections done to a host specified as an IP address, when built to use mbedTLS. libcurl would wrongly…
CVE-2024-2398 - CVSS 8.6 (high), 2024-03-27: When an application tells libcurl it wants to allow HTTP/2 server push, and the amount of received headers for the push surpasses the maximum allowed limit…
CVE-2024-2379 - CVSS 6.3 (medium), 2024-03-27: libcurl skips the certificate verification for a QUIC connection under certain conditions, when built to use wolfSSL. If told to use an unknown/bad cipher or…
CVE-2023-50868 - CVSS 7.5 (high), 2024-02-14: The Closest Encloser Proof aspect of the DNS protocol (in RFC 5155 when RFC 9276 guidance is skipped) allows remote attackers to cause a denial of service…
CVE-2024-1086 - CVSS 7.8 (high), 2024-01-31: A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local privilege escalation. The…
CVE-2023-4911 - CVSS 7.8 (high), 2023-10-03: A buffer overflow was discovered in the GNU C Library's dynamic loader ld.so while processing the GLIBC_TUNABLES environment variable. This issue could allow…
CVE-2022-45061 - CVSS 7.5 (high), 2022-11-09: An issue was discovered in Python before 3.11.1. An unnecessary quadratic algorithm exists in one path when processing some inputs to the IDNA (RFC 3490)…
CVE-2022-35252 - CVSS 3.7 (low), 2022-09-23: When curl is used to retrieve and parse cookies from a HTTP(S) server, itaccepts cookies using control codes that when later are sent back to a HTTPserver…
CVE-2022-32207 - CVSS 9.8 (critical), 2022-07-07: When curl < 7.84.0 saves cookies, alt-svc and hsts data to local files, it makes the operation atomic by finalizing the operation with a rename from a…
CVE-2022-32206 - CVSS 6.5 (medium), 2022-07-07: curl < 7.84.0 supports "chained" HTTP compression algorithms, meaning that a serverresponse can be compressed multiple times and potentially with different…
CVE-2022-32208 - CVSS 5.9 (medium), 2022-07-07: When curl < 7.84.0 does FTP transfers secured by krb5, it handles message verification failures wrongly. This flaw makes it possible for a Man-In-The-Middle…
CVE-2022-2068 - CVSS 9.8 (critical), 2022-06-21: In addition to the c_rehash shell command injection identified in CVE-2022-1292, further circumstances where the c_rehash script does not properly sanitise…
CVE-2022-22576 - CVSS 8.1 (high), 2022-05-26: An improper authentication vulnerability exists in curl 7.33.0 to and including 7.82.0 which might allow reuse OAUTH2-authenticated connections without…
CVE-2022-1678 - CVSS 7.5 (high), 2022-05-25: An issue was discovered in the Linux Kernel from 4.18 to 4.19, an improper update of sock reference in TCP pacing can lead to memory/netns leak, which can be…
CVE-2022-21496 - CVSS 5.3 (medium), 2022-04-19: Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JNDI). Supported versions that are affected are…
CVE-2022-21476 - CVSS 7.5 (high), 2022-04-19: Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries). Supported versions that are affected…
CVE-2022-21443 - CVSS 3.7 (low), 2022-04-19: Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries). Supported versions that are affected…
CVE-2021-4203 - CVSS 6.8 (medium), 2022-03-25: A use-after-free read flaw was found in sock_getsockopt() in net/core/sock.c due to SO_PEERCRED and SO_PEERGROUPS race with listen() (and connect()) in the…
CVE-2022-0492 - CVSS 7.8 (high), 2022-03-03: A vulnerability was found in the Linux kernel’s cgroup_release_agent_write in the kernel/cgroup/cgroup-v1.c function. This flaw, under certain circumstances,…
CVE-2022-23308 - CVSS 7.5 (high), 2022-02-26: valid.c in libxml2 before 2.9.13 has a use-after-free of ID and IDREF attributes.
CVE-2020-36516 - CVSS 5.9 (medium), 2022-02-26: An issue was discovered in the Linux kernel through 5.16.11. The mixed IPID assignment method with the hash-based IPID assignment policy allows an off-path…
CVE-2021-3753 - CVSS 4.7 (medium), 2022-02-16: A race problem was seen in the vt_k_ioctl in drivers/tty/vt/vt_ioctl.c in the Linux kernel, which may cause an out of bounds read in vt as the write access to…
CVE-2021-36086 - CVSS 3.3 (low), 2021-07-01: The CIL compiler in SELinux 3.2 has a use-after-free in cil_reset_classpermission (called from cil_reset_classperms_set and cil_reset_classperms_list).
CVE-2020-13143 - CVSS 6.5 (medium), 2020-05-18: gadget_dev_desc_UDC_store in drivers/usb/gadget/configfs.c in the Linux kernel 3.16 through 5.6.13 relies on kstrdup without considering the possibility of an…
CVE-2020-12888 - CVSS 5.3 (medium), 2020-05-15: The VFIO PCI driver in the Linux kernel through 5.6.13 mishandles attempts to access disabled memory space.
CVE-2020-12770 - CVSS 6.7 (medium), 2020-05-09: An issue was discovered in the Linux kernel through 5.6.11. sg_write lacks an sg_remove_request call in a certain failure case, aka CID-83c6f2390040.
CVE-2020-11884 - CVSS 7 (high), 2020-04-29: In the Linux kernel 4.19 through 5.6.7 on the s390 platform, code execution may occur because of a race condition, as demonstrated by code in…
CVE-2019-17498 - CVSS 8.1 (high), 2019-10-21: In libssh2 v1.9.0 and earlier versions, the SSH_MSG_DISCONNECT logic in packet.c has an integer overflow in a bounds check, enabling an attacker to specify an…