Hci Bootstrap OS vulnerabilities

7 known vulnerabilities in Hci Bootstrap OS from NetApp. 7 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.4 High severity

  glibc: Return of Pointer Value Outside of Expected Range

  CVE-2024-33602May 6, 2024The GNU C Library

  nscd: netgroup cache assumes NSS callback uses in-buffer strings The Name Service Cache Daemon's (nscd) netgroup cache can corrupt memory when the NSS callback does not store all strings in the provided buffer. The flaw was introduced in glibc 2.15 when the ca

• 7.3 High severity

  glibc: Reachable Assertion

  CVE-2024-33601May 6, 2024The GNU C LibraryEPSS 1.07%

  nscd: netgroup cache may terminate daemon on memory allocation failure The Name Service Cache Daemon's (nscd) netgroup cache uses xmalloc or xrealloc and these functions may terminate the process due to a memory allocation failure resulting in a denial of serv

• 8.1 High severity

  glibc: Stack-based Buffer Overflow

  CVE-2024-33599May 6, 2024The GNU C LibraryEPSS 1.31%

  nscd: Stack-based buffer overflow in netgroup cache If the Name Service Cache Daemon's (nscd) fixed size cache is exhausted by client requests then a subsequent client request for netgroup data may result in a stack-based buffer overflow. This flaw was introdu

• 9.8 Critical severity

  SIMATIC S7-1500 CPU 1518-4 PN/DP MFP…: Improper Access Control

  CVE-2023-28531Mar 17, 2023SiemensEPSS 2.99%

  ssh-add in OpenSSH before 9.3 adds smartcard keys to ssh-agent without the intended per-hop destination constraints. The earliest affected version is 8.9.

• 7.5 High severity

  https://github.com/curl/curl: Loop with Unreachable Exit Condition

  CVE-2022-27781Jun 2, 2022Https://github.com/curl/curlEPSS 2.9%

  libcurl provides the `CURLOPT_CERTINFO` option to allow applications torequest details to be returned about a server's certificate chain.Due to an erroneous function, a malicious server could make libcurl built withNSS get stuck in a never-ending busy-loop whe

• 7.5 High severity

  https://github.com/curl/curl: Server-Side Request Forgery

  CVE-2022-27780Jun 2, 2022Https://github.com/curl/curlEPSS 2.52%

  The curl URL parser wrongly accepts percent-encoded URL separators like '/'when decoding the host name part of a URL, making it a *different* URL usingthe wrong host name when it is later retrieved.For example, a URL like `http://example.com%2F127.0.0.1/`, wou

• 7.5 High severity

  https://github.com/curl/curl: Exposure of Sensitive Information to an Unauthorized Actor

  CVE-2022-27775Jun 2, 2022Https://github.com/curl/curlEPSS 3.34%

  An information disclosure vulnerability exists in curl 7.65.0 to 7.82.0 are vulnerable that by using an IPv6 address that was in the connection pool but with a different zone id it could reuse a connection instead.