Netapp H500s vulnerabilities

• ami megarac spx, megarac-spx, megarac sp-x +9 more +11 more Redfish Authentication Bypass CVE-2024-54085 In KEVPublic exploit EPSS 60.7% 10.0 CriticalMarch 11, 2025
• gnome libxml2, netapp active iq unified manager, h300s firmware +8 more +10 more libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a stack-based buffer overflow in... CVE-2025-24928 Fix available 7.8 HighFebruary 18, 2025
• gnome libxml2, netapp active iq unified manager, h300s firmware +8 more +10 more libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a use-after-free in... CVE-2024-56171 Fix available 7.8 HighFebruary 18, 2025
• curl, netapp bootstrap os, h300s firmware +23 more +25 more eventfd double close CVE-2025-0665 Fix available 7.0 HighFebruary 5, 2025
• curl, netapp bootstrap os, element software +32 more +34 more netrc and default credential leak CVE-2025-0167 Fix available 3.4 LowFebruary 5, 2025
• curl, netapp bootstrap os, h300s firmware +29 more +31 more netrc and redirect credential leak CVE-2024-11053 Fix available 3.4 LowDecember 11, 2024
• libexpat project libexpat, debian linux, netapp active iq unified manager +26 more +28 more An issue was discovered in libexpat before 2.6.4. There is a crash within the XML_ResumeParser... CVE-2024-50602 Public exploitFix available 5.9 MediumOctober 27, 2024
• curl, debian linux, netapp active iq unified manager +26 more +28 more OCSP stapling bypass with GnuTLS CVE-2024-8096 Fix available 6.5 MediumSeptember 11, 2024
• openssl, netapp bootstrap os, brocade fabric operating system +9 more +11 more RFC7250 handshakes with unauthenticated servers don't abort as expected CVE-2024-12797 Fix available 7.4 HighSeptember 3, 2024
• netapp 500f firmware, a250 firmware, active iq unified manager +22 more +24 more Possible denial of service in X.509 name checks CVE-2024-6119 Fix available EPSS 66.6% 7.5 HighSeptember 3, 2024
• gnome libxml2, netapp h300s firmware, h410c firmware +6 more +8 more In libxml2 2.11 before 2.11.9, 2.12 before 2.12.9, and 2.13 before 2.13.3, the SAX parser can... CVE-2024-40896 Fix available 9.1 CriticalAugust 2, 2024
• linux, linux kernel, netapp converged systems advisor agent +8 more +10 more NFSD: Fix nfsd4_encode_fattr4() crasher CVE-2024-36958 Fix available 9.8 CriticalMay 30, 2024
• gnu glibc, debian linux, netapp element software +11 more +13 more nscd: netgroup cache assumes NSS callback uses in-buffer strings CVE-2024-33602 Fix available 7.4 HighApril 26, 2024
• gnu glibc, debian linux, netapp h300s firmware +11 more +13 more nscd: netgroup cache may terminate daemon on memory allocation failure CVE-2024-33601 Fix available 7.3 HighApril 26, 2024
• gnu glibc, debian linux, netapp active iq unified manager +12 more +14 more nscd: Null pointer crashes after notfound response CVE-2024-33600 Fix available 5.9 MediumApril 26, 2024
• gnu glibc, debian linux, netapp h300s firmware +8 more +10 more nscd: Stack-based buffer overflow in netgroup cache CVE-2024-33599 Fix available 8.1 HighApril 26, 2024
• debian linux, gnu glibc, netapp active iq unified manager +13 more +15 more The iconv() function in the GNU C Library versions 2.39 and older may overflow the output buffer... CVE-2024-2961 Public exploitFix available EPSS 88.3% 7.3 HighApril 17, 2024
• openssl, debian linux, netapp 500f firmware +79 more +81 more Unbounded memory growth with session handling in TLSv1.3 CVE-2024-2511 Fix available EPSS 59.3% 5.9 MediumApril 8, 2024
• curl, curl libcurl, apple macos +10 more +12 more TLS certificate check bypass with mbedTLS CVE-2024-2466 Fix available 6.5 MediumMarch 27, 2024
• curl, apple macos, netapp active iq unified manager +14 more +16 more QUIC certificate check bypass with wolfSSL CVE-2024-2379 Fix available 6.3 MediumMarch 27, 2024
• curl, apple macos, fedoraproject fedora +16 more +18 more HTTP/2 push headers memory-leak CVE-2024-2398 Fix available EPSS 36.1% 8.6 HighMarch 27, 2024
• curl, apple macos, fedoraproject fedora +12 more +14 more Usage of disabled protocol CVE-2024-2004 Fix available 3.5 LowMarch 27, 2024
• libexpat project libexpat, fedoraproject fedora, netapp active iq unified manager +15 more +17 more libexpat through 2.6.1 allows an XML Entity Expansion attack when there is isolated use of... CVE-2024-28757 Public exploitFix available 7.5 HighMarch 10, 2024
• debian linux, linux kernel, fedoraproject fedora +15 more +17 more Use-after-free in Linux kernel's netfilter: nf_tables component CVE-2024-1086 In KEVPublic exploitFix available EPSS 28.1% 7.8 HighJanuary 31, 2024
• openssl, debian linux, netapp h300s firmware +9 more +11 more Incorrect cipher key & IV length processing CVE-2023-5363 Fix available 7.5 HighOctober 24, 2023
• linux kernel, netapp h300s firmware, h410s firmware +2 more +4 more extract_user_to_sg in lib/scatterlist.c in the Linux kernel before 6.4.2 fails to unpin pages in... CVE-2023-40791 Fix available 6.3 MediumOctober 16, 2023
• gnu glibc, c library, canonical ubuntu linux +48 more +50 more Glibc: buffer overflow in ld.so leading to privilege escalation CVE-2023-4911 In KEVPublic exploitFix available EPSS 63.8% 7.8 HighOctober 3, 2023
• isc bind, bind 9, debian linux +6 more +8 more named may terminate unexpectedly under high DNS-over-TLS query load CVE-2023-4236 Fix available 7.5 HighSeptember 20, 2023
• gnu glibc, fedoraproject fedora, netapp h300s firmware +31 more +33 more Glibc: stack read overflow in getaddrinfo in no-aaaa mode CVE-2023-4527 Fix available 6.5 MediumSeptember 18, 2023
• gnu glibc, fedoraproject fedora, netapp active iq unified manager +22 more +24 more Glibc: potential use-after-free in gaih_inet() CVE-2023-4813 Public exploitFix available 5.9 MediumSeptember 12, 2023
• debian linux, linux kernel, fedoraproject fedora +10 more +12 more Kernel: exfat: stack overflow in exfat_get_uniname_from_ext_entry CVE-2023-4273 Fix available 6.0 MediumAugust 9, 2023
• debian linux, linux kernel, fedoraproject fedora +19 more +21 more Kernel: netfilter: use-after-free due to improper element removal in nft_pipapo_remove() CVE-2023-4004 Fix available 7.8 HighJuly 31, 2023
• linux kernel, fedora, netapp h300s +8 more +10 more Tree connection null pointer dereference denial-of-service vulnerability CVE-2023-32248 Fix available 7.5 HighJuly 24, 2023
• linux kernel, fedora, netapp h300s +7 more +9 more Session race condition remote code execution vulnerability CVE-2023-32258 Fix available 8.1 HighJuly 24, 2023
• linux kernel, fedora, netapp h300s +8 more +10 more Session race condition remote code execution vulnerability CVE-2023-32257 Fix available 8.1 HighJuly 24, 2023
• linux kernel, fedora, netapp h300s firmware +8 more +10 more Session null pointer dereference denial-of-service vulnerability CVE-2023-32252 Fix available 7.5 HighJuly 24, 2023
• linux kernel, fedora, netapp h300s +7 more +9 more Session setup memory exhaustion denial-of-service vulnerability CVE-2023-32247 Fix available 7.5 HighJuly 24, 2023
• linux kernel, netapp h300s, h410s +4 more +6 more An issue was discovered in the Linux kernel before 6.3.10. fs/smb/server/smb2misc.c in ksmbd does... CVE-2023-38432 Fix available 9.1 CriticalJuly 17, 2023
• linux kernel, netapp h300s, h410s +3 more +5 more An issue was discovered in the Linux kernel before 6.3.8. fs/smb/server/connection.c in ksmbd... CVE-2023-38431 Fix available 9.1 CriticalJuly 17, 2023
• linux kernel, netapp h300s, h410s +3 more +5 more An issue was discovered in the Linux kernel before 6.3.9. ksmbd does not validate the SMB request... CVE-2023-38430 Fix available 9.1 CriticalJuly 17, 2023
• linux kernel, netapp h300s, h410s +4 more +6 more An issue was discovered in the Linux kernel before 6.3.4. fs/ksmbd/smb2pdu.c in ksmbd does not... CVE-2023-38428 Fix available 9.1 CriticalJuly 17, 2023
• linux kernel, netapp h300s, h410s +2 more +4 more An issue was discovered in the Linux kernel before 6.3.8. fs/smb/server/smb2pdu.c in ksmbd has an... CVE-2023-38427 Fix available 9.8 CriticalJuly 17, 2023
• linux kernel, netapp h300s, h410s +4 more +6 more An issue was discovered in the Linux kernel before 6.3.4. ksmbd has an out-of-bounds read in... CVE-2023-38426 Fix available 9.1 CriticalJuly 17, 2023
• debian linux, linux kernel, fedoraproject fedora +9 more +11 more Linux Kernel nftables Out-Of-Bounds Read/Write Vulnerability CVE-2023-35001 Public exploitFix available 7.8 HighJuly 5, 2023
• linux kernel, netapp h300s, h410c +3 more +5 more Use-after-free in Linux kernel's netfilter subsystem CVE-2023-3390 Public exploitFix available 7.8 HighJune 28, 2023
• linux kernel, netapp h300s, h410c +3 more +5 more Privilege escalation with IO_RING_OP_CLOSE in the Linux Kernel CVE-2023-1295 Fix available 7.8 HighJune 28, 2023
• isc bind, bind 9, netapp active iq unified manager +5 more +7 more Malformed NSEC records can cause named to terminate unexpectedly when synth-from-dnssec is enabled CVE-2023-2829 Fix available 7.5 HighJune 21, 2023
• isc bind, bind 9, debian linux +7 more +9 more Exceeding the recursive-clients quota may cause named to terminate unexpectedly when stale-answer-client-timeout is set to 0 CVE-2023-2911 Fix available 7.5 HighJune 21, 2023
• isc bind, bind 9, debian linux +7 more +9 more named's configured cache size limit can be significantly exceeded CVE-2023-2828 Fix available 7.5 HighJune 21, 2023
• debian linux, linux kernel, fedoraproject fedora +9 more +11 more A NULL pointer dereference issue was found in the gfs2 file system in the Linux kernel. It occurs... CVE-2023-3212 Fix available 4.4 MediumJune 19, 2023
• Show olderLoading…