Netapp A400 Firmware vulnerabilities

• openbsd openssh, almalinux, amazon linux +71 more +73 more Openssh: regresshion - race condition in ssh allows rce/dos CVE-2024-6387 Public exploitFix available EPSS 99.5% 8.1 HighJuly 1, 2024
• debian linux, linux kernel, netapp 8300 firmware +7 more +9 more ipv6: sr: fix possible use-after-free and null-ptr-deref CVE-2024-26735 Fix available 5.5 MediumApril 3, 2024
• debian linux, linux kernel, netapp 8200 firmware +26 more +28 more arp: Prevent overflow in arp_req_get(). CVE-2024-26733 Fix available 5.5 MediumApril 3, 2024
• debian linux, linux kernel, netapp 8300 firmware +13 more +15 more In the Linux kernel, pick_next_rt_entity() may return a type confused entry, not detected by the... CVE-2023-1077 Fix available 7.0 HighMarch 27, 2023
• intel xeon gold 5315y firmware, xeon gold 5317 firmware, xeon gold 5318h firmware +69 more +71 more Out-of-bounds write in the BIOS firmware for some Intel(R) Processors may allow an authenticated... CVE-2021-33060 7.8 HighAugust 18, 2022
• debian linux, linux kernel, netapp a700s firmware +22 more +24 more An issue was discovered in the Linux kernel through 5.18.14. xfrm_expand_policies in net/xfrm... CVE-2022-36879 Fix available 5.5 MediumJuly 27, 2022
• openssl, broadcom sannav, debian linux +29 more +31 more The c_rehash script allows command injection CVE-2022-2068 Fix available EPSS 96.4% 7.3 HighJune 21, 2022
• debian linux, linux kernel, netapp 8300 firmware +10 more +12 more The Linux kernel before 5.17.2 mishandles seccomp permissions. The PTRACE_SEIZE code path allows... CVE-2022-30594 Public exploitFix available 7.8 HighMay 12, 2022
• openssl, netapp a250 firmware, a700s firmware +28 more +30 more Resource leakage when decoding certificates and keys CVE-2022-1473 Fix available 7.5 HighMay 3, 2022
• openssl, netapp a250 firmware, a700s firmware +27 more +29 more Incorrect MAC key used in the RC4-MD5 ciphersuite CVE-2022-1434 Fix available 5.9 MediumMay 3, 2022
• openssl, netapp a250 firmware, a700s firmware +28 more +30 more OCSP_basic_verify may incorrectly verify the response signing certificate CVE-2022-1343 Fix available 5.3 MediumMay 3, 2022
• openssl, debian linux, fedoraproject fedora +37 more +39 more The c_rehash script allows command injection CVE-2022-1292 Public exploitFix available EPSS 82.6% 7.3 HighMay 3, 2022
• linux kernel, netapp a400 firmware, aff 8300 firmware +11 more +13 more Memory leak in ICMP6 in Linux Kernel CVE-2022-0742 Fix available 9.1 CriticalMarch 14, 2022
• linux kernel, debian linux, netapp 8300 firmware +8 more +10 more Double Free in net/packet/af_packet.c leading to priviledge escalation CVE-2021-22600 In KEVPublic exploitFix available 6.6 MediumJanuary 26, 2022
• linux kernel, netapp aff a400 firmware, all flash fabric-attached storage 8300 firmware +23 more +25 more In the IPv6 implementation in the Linux kernel before 5.13.3, net/ipv6/output_core.c has an... CVE-2021-45485 Public exploitFix available 7.5 HighDecember 25, 2021
• broadcom fabric operating system, linux kernel, netapp aff 500f firmware +18 more +20 more Heap Out-Of-Bounds Write in Netfilter IP6T_SO_SET_REPLACE CVE-2021-22555 In KEVPublic exploitFix available EPSS 78.7% 8.3 HighJuly 7, 2021
• linux kernel, netapp aff 8300 firmware, aff 8700 firmware +19 more +21 more An issue was discovered in the Linux kernel before 5.0.19. The XFRM subsystem has a use-after... CVE-2019-25045 Fix available 7.8 HighJune 7, 2021
• linux kernel, netapp a700s firmware, aff a400 firmware +15 more +17 more A flaw possibility of race condition and incorrect initialization of the process id was found in... CVE-2020-35508 Fix available 4.5 MediumDecember 31, 2020
• debian linux, linux kernel, broadcom fabric operating system +8 more +10 more A locking inconsistency issue was discovered in the tty subsystem of the Linux kernel through 5.9... CVE-2020-29660 Fix available 4.4 MediumDecember 9, 2020
• debian linux, linux kernel, broadcom fabric operating system +9 more +11 more A locking issue was discovered in the tty subsystem of the Linux kernel through 5.9.13. drivers... CVE-2020-29661 Public exploitFix available 7.8 HighDecember 9, 2020
• linux kernel, broadcom brocade fabric operating system firmware, netapp a250 firmware +16 more +18 more Use-after-free vulnerability in fs/block_dev.c in the Linux kernel before 5.8 allows local users... CVE-2020-15436 Public exploitFix available 6.7 MediumNovember 23, 2020
• ntp, netapp 8300 firmware, 8700 firmware +13 more +15 more ntpd in ntp 4.2.8 before 4.2.8p15 and 4.3.x before 4.3.101 allows remote attackers to cause a... CVE-2020-15025 Fix available 4.4 MediumJune 24, 2020
• linux kernel, canonical ubuntu linux, netapp active iq unified manager +16 more +18 more A flaw was found in the Linux kernel's implementation of Userspace core dumps. This flaw allows... CVE-2020-10732 Fix available 3.3 LowJune 9, 2020
• ntp, debian linux, netapp all flash fabric-attached storage 8300 firmware +14 more +16 more ntpd in ntp before 4.2.8p14 and 4.3.x before 4.3.100 allows an off-path attacker to block... CVE-2020-11868 Fix available 5.9 MediumApril 17, 2020
• linux kernel, canonical ubuntu linux, fedoraproject fedora +24 more +26 more Linux kernel bpf verifier vulnerability CVE-2020-8835 Public exploitFix available 7.8 HighMarch 30, 2020
• canonical ubuntu linux, netapp aff 8300 firmware, aff 8700 firmware +30 more +32 more Ubuntu 18.04 Linux kernel i915 incomplete fix for CVE-2019-14615 CVE-2020-8832 Fix available 5.5 MediumMarch 5, 2020
• netapp fas 8300/8700 and aff a400 baseboard management controller, all flash fabric-attached storage a400 firmware, fabric-attached storage 8300 firmware +1 more +3 more NetApp FAS 8300/8700 and AFF A400 Baseboard Management Controller (BMC) firmware versions 13.x... CVE-2019-17274 7.8 HighFebruary 26, 2020
• debian linux, linux kernel, netapp 8300 firmware +11 more +13 more The flow_dissector feature in the Linux kernel 4.3 through 5.x before 5.3.10 has a device... CVE-2019-18282 Fix available 5.3 MediumJanuary 16, 2020
• linux kernel, netapp 8300 firmware, 8700 firmware +11 more +13 more mwifiex_tm_cmd in drivers/net/wireless/marvell/mwifiex/cfg80211.c in the Linux kernel before 5.1... CVE-2019-20095 Fix available 5.5 MediumDecember 30, 2019
• linux kernel, netapp 8300 firmware, 8700 firmware +10 more +12 more In the Linux kernel before 5.0.6, there is a NULL pointer dereference in drop_sysctl_table() in... CVE-2019-20054 Fix available 5.5 MediumDecember 28, 2019
• debian linux, linux kernel, canonical ubuntu linux +13 more +15 more In the Linux kernel through 5.4.6, there is a NULL pointer dereference in drivers/scsi/libsas... CVE-2019-19965 Fix available 4.7 MediumDecember 25, 2019
• debian linux, linux kernel, canonical ubuntu linux +13 more +15 more An exploitable denial-of-service vulnerability exists in the Linux kernel prior to mainline 5.3.... CVE-2019-5108 Fix available EPSS 10.1% 7.4 HighDecember 23, 2019
• debian linux, linux kernel, canonical ubuntu linux +10 more +12 more In the Linux kernel 5.0.21, mounting a crafted btrfs filesystem image and performing some... CVE-2019-19816 Fix available 7.8 HighDecember 17, 2019
• debian linux, linux kernel, canonical ubuntu linux +10 more +12 more In the Linux kernel 5.0.21, mounting a crafted btrfs filesystem image, performing some operations... CVE-2019-19813 Fix available 5.5 MediumDecember 17, 2019
• debian linux, linux kernel, canonical ubuntu linux +15 more +17 more In the Linux kernel 5.0.21 and 5.3.11, mounting a crafted btrfs filesystem image, performing some... CVE-2019-19448 Fix available 7.8 HighDecember 8, 2019
• debian linux, linux kernel, canonical ubuntu linux +11 more +13 more In the Linux kernel 5.3.11, mounting a crafted btrfs image twice can cause an... CVE-2019-19318 Fix available 4.4 MediumNovember 27, 2019
• linux kernel, broadcom fabric operating system, canonical ubuntu linux +13 more +15 more A memory leak in the fastrpc_dma_buf_attach() function in drivers/misc/fastrpc.c in the Linux... CVE-2019-19069 Fix available 7.5 HighNovember 18, 2019
• linux kernel, broadcom fabric operating system, canonical ubuntu linux +14 more +16 more A memory leak in the crypto_reportstat() function in crypto/crypto_user_stat.c in the Linux... CVE-2019-19050 Fix available 7.5 HighNovember 18, 2019
• linux kernel, broadcom fabric operating system, netapp active iq unified manager +14 more +16 more An issue was discovered in net/ipv4/sysctl_net_ipv4.c in the Linux kernel before 5.0.11. There is... CVE-2019-18805 Fix available 9.8 CriticalNovember 7, 2019
• debian linux, linux kernel, broadcom fabric operating system +15 more +17 more An issue was discovered in drivers/media/platform/vivid in the Linux kernel through 5.3.8. It is... CVE-2019-18683 Public exploitFix available 7.0 HighNovember 4, 2019