Netapp Element Software Management vulnerabilities

• sudo project sudo, canonical ubuntu linux, debian linux +12 more +14 more In Sudo before 1.8.28, an attacker with access to a Runas ALL sudoer account can bypass certain... CVE-2019-14287 Public exploitFix available EPSS 63.8% 8.8 HighOctober 14, 2019
• linux kernel, netapp element software management node +1 more The hidma_chan_stats function in drivers/dma/qcom/hidma_dbg.c in the Linux kernel 4.14.90 allows... CVE-2018-20449 Fix available 5.5 MediumApril 4, 2019
• gnu binutils, netapp element software management +1 more An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed... CVE-2019-9076 5.5 MediumFebruary 24, 2019
• gnu binutils, canonical ubuntu linux, f5 traffix signaling delivery controller +1 more +3 more An issue was discovered in GNU libiberty, as distributed in GNU Binutils 2.32. It is a heap-based... CVE-2019-9070 Fix available 7.8 HighFebruary 24, 2019
• debian linux, linux kernel, canonical ubuntu linux +15 more +17 more The KVM implementation in the Linux kernel through 4.20.5 has an Information Leak. CVE-2019-7222 Fix available 5.5 MediumFebruary 20, 2019
• debian linux, linux kernel, canonical ubuntu linux +12 more +14 more The KVM implementation in the Linux kernel through 4.20.5 has a Use-after-Free. CVE-2019-7221 Fix available 7.8 HighFebruary 20, 2019
• linux kernel, netapp active iq performance analytics services, element software management node +2 more The mincore() implementation in mm/mincore.c in the Linux kernel through 4.19.13 allowed local... CVE-2019-5489 Public exploitFix available 5.5 MediumJanuary 7, 2019
• debian linux, linux kernel, netapp active iq performance analytics services +1 more +3 more The function hso_get_config_data in drivers/net/usb/hso.c in the Linux kernel through 4.19.8... CVE-2018-19985 Fix available 4.6 MediumDecember 24, 2018
• intel converged security management engine firmware, intel corporation converged security management engine (intel csme), netapp element software management node +2 more Logic bug in Intel Converged Security Management Engine 11.x may allow an attacker to execute... CVE-2018-3627 8.2 HighJuly 10, 2018
• eclipse jetty, the eclipse foundation eclipse jetty, debian linux +15 more +17 more Eclipse Jetty XmlParser allows arbitrary DOCTYPE declarations CVE-2017-7657 Fix available EPSS 14.4% 9.8 CriticalJune 26, 2018
• gnu glibc, canonical ubuntu linux, netapp data ontap edge +7 more +9 more An AVX-512-optimized implementation of the mempcpy function in the GNU C Library (aka glibc or... CVE-2018-11237 Fix available 7.8 HighMay 18, 2018
• gnu glibc, netapp data ontap edge, element software management +6 more +8 more stdlib/canonicalize.c in the GNU C Library (aka glibc or libc6) 2.27 and earlier, when processing... CVE-2018-11236 Fix available 9.8 CriticalMay 18, 2018
• gnu glibc, netapp cloud backup, data ontap edge +12 more +14 more An integer overflow in the implementation of the posix_memalign in memalign functions in the GNU... CVE-2018-6485 Fix available 9.8 CriticalFebruary 1, 2018
• isc bind, bind 9, debian linux +8 more +10 more Combination of DNS64 and RPZ Can Lead to Crash CVE-2017-3135 Fix available EPSS 17.1% 7.5 HighFebruary 9, 2017