CVE-2024-12289

MEDIUM Year: 2024
CVSS v3 Score
5.9
Medium
Weakness Type
CWE-460
View all →

Vulnerability Description

Boundary Community Edition and Boundary Enterprise (“Boundary”) incorrectly handle HTTP requests during the initialization of the Boundary controller, which may cause the Boundary server to terminate prematurely. Boundary is only vulnerable to this flaw during the initialization of the Boundary controller, which on average is measured in milliseconds during the Boundary startup process. This vulnerability, CVE-2024-12289, is fixed in Boundary Community Edition and Boundary Enterprise 0.16.4, 0.17.3, 0.18.2.

Related Vulnerabilities

CVE-2017-15127

MEDIUM
CVSS:5.5(Medium)

A flaw was found in the hugetlb_mcopy_atomic_pte function in mm/hugetlb.c in the Linux kernel before 4.13. A superfluous implicit page unlock for VM_SHARED hugetlbfs mapping could trigger a local deni...

CWE-4602017

CVE-2022-3707

MEDIUM
CVSS:5.5(Medium)

A double-free memory flaw was found in the Linux kernel. The Intel GVT-g graphics driver triggers VGA card system resource overload, causing a fail in the intel_gvt_dma_map_guest_page function. This i...

CWE-4602022

CVE-2017-9657

MEDIUM
CVSS:6.5(Medium)

Under specific 802.11 network conditions, a partial re-association of the Philips IntelliVue MX40 Version B.06.18 WLAN monitor to the central monitoring station is possible. In this state, the central...

CWE-4602017

CVE-2025-32439

MEDIUM
CVSS:6.5(Medium)

pleezer is a headless Deezer Connect player. Hook scripts in pleezer can be triggered by various events like track changes and playback state changes. In versions before 0.16.0, these scripts were spa...

CWE-4602025

CVE-2019-14891

MEDIUM
CVSS:5.0(Medium)

A flaw was found in cri-o, as a result of all pod-related processes being placed in the same memory cgroup. This can result in container management (conmon) processes being killed if a workload proces...

CWE-4602019

CVE-2024-20354

MEDIUM
CVSS:4.7(Medium)

A vulnerability in the handling of encrypted wireless frames of Cisco Aironet Access Point (AP) Software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition ...

CWE-4602024