Netapp A250 Firmware vulnerabilities

• debian linux, netapp 500f firmware, a250 firmware +30 more +32 more Low-level invalid GF(2^m) parameters lead to OOB memory access CVE-2024-9143 Fix available 8.8 HighOctober 16, 2024
• netapp 500f firmware, a250 firmware, active iq unified manager +22 more +24 more Possible denial of service in X.509 name checks CVE-2024-6119 Fix available EPSS 66.6% 7.5 HighSeptember 3, 2024
• openbsd openssh, almalinux, amazon linux +71 more +73 more Openssh: regresshion - race condition in ssh allows rce/dos CVE-2024-6387 Public exploitFix available EPSS 99.5% 8.1 HighJuly 1, 2024
• openssl, netapp 500f firmware, 8300 firmware +19 more +21 more Excessive time spent checking DSA keys and parameters CVE-2024-4603 Fix available 5.3 MediumMay 16, 2024
• openssl, debian linux, netapp 500f firmware +79 more +81 more Unbounded memory growth with session handling in TLSv1.3 CVE-2024-2511 Fix available EPSS 59.3% 5.9 MediumApril 8, 2024
• debian linux, linux kernel, fedoraproject fedora +15 more +17 more Use-after-free in Linux kernel's netfilter: nf_tables component CVE-2024-1086 In KEVPublic exploitFix available EPSS 28.1% 7.8 HighJanuary 31, 2024
• openbsd openssh, fedoraproject fedora, netapp 500f firmware +6 more +8 more OpenSSH server (sshd) 9.1 introduced a double-free vulnerability during options.kex_algorithms... CVE-2023-25136 Public exploitFix available EPSS 89.8% 6.5 MediumFebruary 3, 2023
• intel xeon gold 5315y firmware, xeon gold 5317 firmware, xeon gold 5318h firmware +69 more +71 more Out-of-bounds write in the BIOS firmware for some Intel(R) Processors may allow an authenticated... CVE-2021-33060 7.8 HighAugust 18, 2022
• debian linux, linux kernel, netapp a700s firmware +22 more +24 more An issue was discovered in the Linux kernel through 5.18.14. xfrm_expand_policies in net/xfrm... CVE-2022-36879 Fix available 5.5 MediumJuly 27, 2022
• openssl, netapp a250 firmware, a700s firmware +28 more +30 more Resource leakage when decoding certificates and keys CVE-2022-1473 Fix available 7.5 HighMay 3, 2022
• openssl, netapp a250 firmware, a700s firmware +27 more +29 more Incorrect MAC key used in the RC4-MD5 ciphersuite CVE-2022-1434 Fix available 5.9 MediumMay 3, 2022
• openssl, netapp a250 firmware, a700s firmware +28 more +30 more OCSP_basic_verify may incorrectly verify the response signing certificate CVE-2022-1343 Fix available 5.3 MediumMay 3, 2022
• openssl, debian linux, fedoraproject fedora +37 more +39 more The c_rehash script allows command injection CVE-2022-1292 Public exploitFix available EPSS 82.6% 7.3 HighMay 3, 2022
• openssl, debian linux, fedoraproject fedora +470 more +472 more Infinite loop in BN_mod_sqrt() reachable when parsing certificates CVE-2022-0778 Public exploitFix available EPSS 73.2% 7.5 HighMarch 15, 2022
• openssl, netapp 500f firmware, a250 firmware +13 more +15 more Invalid handling of X509_verify_cert() internal errors in libssl CVE-2021-4044 Public exploitFix available EPSS 50.1% 7.5 HighDecember 14, 2021
• openbsd openssh, fedoraproject fedora, netapp active iq unified manager +12 more +14 more sshd in OpenSSH 6.2 through 8.x before 8.8, when certain non-default configurations are used,... CVE-2021-41617 Public exploitFix available 7.0 HighSeptember 26, 2021
• debian linux, linux kernel, fedoraproject fedora +14 more +16 more A race condition was discovered in ext4_write_inline_data_end in fs/ext4/inline.c in the ext4... CVE-2021-40490 Fix available 7.0 HighSeptember 3, 2021
• broadcom fabric operating system, linux kernel, netapp aff 500f firmware +18 more +20 more Heap Out-Of-Bounds Write in Netfilter IP6T_SO_SET_REPLACE CVE-2021-22555 In KEVPublic exploitFix available EPSS 78.7% 8.3 HighJuly 7, 2021
• gnu wget, broadcom brocade fabric operating system firmware, netapp 500f firmware +3 more +5 more GNU Wget through 1.21.1 does not omit the Authorization header upon a redirect to a different... CVE-2021-31879 Fix available 6.1 MediumApril 29, 2021
• isc bind, debian linux, isc bind9 +12 more +14 more A second vulnerability in BIND's GSSAPI security policy negotiation can be targeted by a buffer overflow attack CVE-2021-25216 Fix available EPSS 83.0% 8.1 HighApril 28, 2021
• isc bind, debian linux, fedoraproject fedora +14 more +16 more An assertion check can fail while answering queries for DNAME records that require the DNAME to be processed to resolve itself CVE-2021-25215 Fix available EPSS 11.7% 7.5 HighApril 28, 2021
• isc bind, debian linux, fedoraproject fedora +13 more +15 more A broken inbound incremental zone update (IXFR) can cause named to terminate unexpectedly CVE-2021-25214 Fix available 6.5 MediumApril 28, 2021
• debian linux, linux kernel, fedoraproject fedora +4 more +6 more In intel_pmu_drain_pebs_nhm in arch/x86/events/intel/ds.c in the Linux kernel through 5.11.8 on... CVE-2021-28971 Fix available 5.5 MediumMarch 22, 2021
• debian linux, linux kernel, fedoraproject fedora +4 more +6 more A race condition was discovered in get_old_root in fs/btrfs/ctree.c in the Linux kernel through 5... CVE-2021-28964 Fix available 4.7 MediumMarch 22, 2021
• linux kernel, fedoraproject fedora, netapp a250 firmware +4 more +6 more An issue was discovered in the Linux kernel through 5.11.8. The sound/soc/qcom/sdm845.c soundwire... CVE-2021-28952 Fix available 7.8 HighMarch 20, 2021
• linux kernel, fedoraproject fedora, netapp a250 firmware +4 more +6 more An issue was discovered in fs/io_uring.c in the Linux kernel through 5.11.8. It allows attackers... CVE-2021-28951 Fix available 5.5 MediumMarch 20, 2021
• gnu glibc, debian linux, netapp 500f firmware +14 more +16 more The iconv function in the GNU C Library (aka glibc or libc6) 2.32 and earlier, when processing... CVE-2020-27618 Fix available 5.5 MediumFebruary 26, 2021
• isc bind, debian linux, fedoraproject fedora +5 more +7 more A vulnerability in BIND's GSSAPI security policy negotiation can be targeted by a buffer overflow attack CVE-2020-8625 Fix available EPSS 64.2% 8.1 HighFebruary 17, 2021
• linux kernel, netapp aff baseboard management controller, baseboard management controller 500f firmware +6 more +8 more A local privilege escalation was discovered in the Linux kernel before 5.10.13. Multiple race... CVE-2021-26708 Public exploitFix available 7.0 HighFebruary 5, 2021
• gnu glibc, broadcom fabric operating system, debian linux +8 more +10 more The iconv feature in the GNU C Library (aka glibc or libc6) through 2.32, when processing invalid... CVE-2019-25013 Fix available 5.9 MediumJanuary 4, 2021
• openssl, debian linux, fedoraproject fedora +41 more +43 more EDIPARTYNAME NULL pointer dereference CVE-2020-1971 Public exploitFix available 5.9 MediumDecember 8, 2020
• debian linux, linux kernel, netapp aff a250 firmware +9 more +11 more CVE-2020-27815 affecting package kernel for versions less than 5.15.135.1-2 CVE-2020-27815 Public exploitFix available 7.8 HighNovember 30, 2020
• debian linux, linux kernel, netapp 500f firmware +5 more +7 more An issue was discovered in the Linux kernel before 5.7.3, related to mm/gup.c and mm/huge_memory... CVE-2020-29374 Fix available 3.6 LowNovember 28, 2020
• linux kernel, broadcom brocade fabric operating system firmware, netapp a250 firmware +16 more +18 more Use-after-free vulnerability in fs/block_dev.c in the Linux kernel before 5.8 allows local users... CVE-2020-15436 Public exploitFix available 6.7 MediumNovember 23, 2020
• debian linux, linux kernel, netapp 500f firmware +12 more +14 more CVE-2020-25668 does not affect BellSoft software CVE-2020-25668 Fix available 7.0 HighNovember 2, 2020
• linux kernel, netapp a250 firmware, aff 500f firmware +3 more +5 more An out-of-bounds memory write flaw was found in how the Linux kernel’s Voice Over IP H.323... CVE-2020-14305 Fix available 8.1 HighOctober 29, 2020