PatchTheCVEcloudboot vulnerabilities and fixes
Recent CVEs affecting cloudboot, with upgrade or downgrade steps. 1 tracked.
cloudboot has 1 tracked vulnerability, 1 critical. A fixed release or vendor patch exists for 1. Most recent: 2019-09-30. Highest priority: CVE-2019-16999 (score 63/100).
- CVE-2019-16999 CRITICAL 9.8 UPGRADE CloudBoot through 2019-03-08 allows SQL Injection via a crafted Status field in JSON data to the api/osinstall
FAQ
How do I fix cloudboot vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is cloudboot being exploited right now?
None of the tracked cloudboot CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which cloudboot CVE should I patch first?
CVE-2019-16999 currently ranks highest (63/100): CloudBoot through 2019-03-08 allows SQL Injection via a crafted Status field in JSON data to the api/osinstall.