Netapp H610c vulnerabilities

• curl, haxx libcurl, netapp hci baseboard management controller +24 more +26 more gzip integer overflow CVE-2025-0725 Fix available 7.3 HighFebruary 5, 2025
• curl, netapp bootstrap os, element software +32 more +34 more netrc and default credential leak CVE-2025-0167 Fix available 3.4 LowFebruary 5, 2025
• curl, netapp bootstrap os, h300s firmware +29 more +31 more netrc and redirect credential leak CVE-2024-11053 Fix available 3.4 LowDecember 11, 2024
• openssl, netapp bootstrap os, brocade fabric operating system +9 more +11 more RFC7250 handshakes with unauthenticated servers don't abort as expected CVE-2024-12797 Fix available 7.4 HighSeptember 3, 2024
• netapp 500f firmware, a250 firmware, active iq unified manager +22 more +24 more Possible denial of service in X.509 name checks CVE-2024-6119 Fix available EPSS 66.6% 7.5 HighSeptember 3, 2024
• gnu glibc, debian linux, netapp h300s firmware +11 more +13 more nscd: netgroup cache may terminate daemon on memory allocation failure CVE-2024-33601 Fix available 7.3 HighApril 26, 2024
• gnu glibc, debian linux, netapp active iq unified manager +12 more +14 more nscd: Null pointer crashes after notfound response CVE-2024-33600 Fix available 5.9 MediumApril 26, 2024
• debian linux, gnu glibc, netapp active iq unified manager +13 more +15 more The iconv() function in the GNU C Library versions 2.39 and older may overflow the output buffer... CVE-2024-2961 Public exploitFix available EPSS 88.3% 7.3 HighApril 17, 2024
• debian linux, linux kernel, netapp 8300 firmware +7 more +9 more ipv6: sr: fix possible use-after-free and null-ptr-deref CVE-2024-26735 Fix available 5.5 MediumApril 3, 2024
• debian linux, linux kernel, netapp 8200 firmware +26 more +28 more arp: Prevent overflow in arp_req_get(). CVE-2024-26733 Fix available 5.5 MediumApril 3, 2024
• curl, apple macos, netapp active iq unified manager +14 more +16 more QUIC certificate check bypass with wolfSSL CVE-2024-2379 Fix available 6.3 MediumMarch 27, 2024
• curl, apple macos, fedoraproject fedora +16 more +18 more HTTP/2 push headers memory-leak CVE-2024-2398 Fix available EPSS 36.1% 8.6 HighMarch 27, 2024
• debian linux, linux kernel, netapp 9500 firmware +17 more +19 more ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim() CVE-2024-26633 Fix available 5.5 MediumMarch 18, 2024
• libexpat project libexpat, fedoraproject fedora, netapp active iq unified manager +15 more +17 more libexpat through 2.6.1 allows an XML Entity Expansion attack when there is isolated use of... CVE-2024-28757 Public exploitFix available 7.5 HighMarch 10, 2024
• debian linux, linux kernel, netapp h610c firmware +2 more +4 more drm/amdgpu: Fix possible NULL dereference in amdgpu_ras_query_error_status_helper() CVE-2023-52585 Fix available 5.5 MediumMarch 6, 2024
• mit kerberos 5, netapp active iq unified manager, cloud volumes ontap mediator +5 more +7 more Kerberos 5 (aka krb5) 1.21.2 contains a memory leak vulnerability in /krb5/src/kdc/ndr.c. CVE-2024-26462 Fix available 5.5 MediumFebruary 26, 2024
• mit kerberos 5, netapp active iq unified manager, cloud volumes ontap mediator +6 more +8 more Kerberos 5 (aka krb5) 1.21.2 contains a memory leak vulnerability in /krb5/src/lib/gssapi/krb5... CVE-2024-26461 Fix available 7.5 HighFebruary 26, 2024
• mit kerberos 5, netapp active iq unified manager, cloud volumes ontap mediator +6 more +8 more Kerberos 5 (aka krb5) 1.21.2 contains a memory leak in /krb5/src/lib/rpc/pmap_rmt.c. CVE-2024-26458 Fix available 5.3 MediumFebruary 26, 2024
• debian linux, linux kernel, netapp a700s firmware +22 more +24 more An issue was discovered in the Linux kernel through 5.18.14. xfrm_expand_policies in net/xfrm... CVE-2022-36879 Fix available 5.5 MediumJuly 27, 2022
• openssl, broadcom sannav, debian linux +29 more +31 more The c_rehash script allows command injection CVE-2022-2068 Fix available EPSS 96.4% 7.3 HighJune 21, 2022
• linux kernel, fedoraproject fedora, netapp h300e firmware +10 more +12 more An out-of-bounds (OOB) memory write flaw was found in the Linux kernel’s watch_queue event... CVE-2022-0995 In KEVPublic exploitFix available 7.8 HighMarch 25, 2022
• linux kernel, netapp bootstrap os, cloud volumes ontap mediator +14 more +16 more An issue was discovered in the Linux kernel through 5.16.11. The mixed IPID assignment method... CVE-2020-36516 Fix available 5.9 MediumFebruary 26, 2022
• linux kernel, netapp aff a400 firmware, all flash fabric-attached storage 8300 firmware +23 more +25 more In the IPv6 implementation in the Linux kernel before 5.13.3, net/ipv6/output_core.c has an... CVE-2021-45485 Public exploitFix available 7.5 HighDecember 25, 2021
• debian linux, linux kernel, netapp e-series santricity os controller +15 more +17 more A flaw was found in the Linux SCTP stack. A blind attacker may be able to kill an existing SCTP... CVE-2021-3772 Fix available 6.5 MediumSeptember 9, 2021
• debian linux, linux kernel, fedoraproject fedora +14 more +16 more A race condition was discovered in ext4_write_inline_data_end in fs/ext4/inline.c in the ext4... CVE-2021-40490 Fix available 7.0 HighSeptember 3, 2021
• broadcom fabric operating system, linux kernel, netapp aff 500f firmware +18 more +20 more Heap Out-Of-Bounds Write in Netfilter IP6T_SO_SET_REPLACE CVE-2021-22555 In KEVPublic exploitFix available EPSS 78.7% 8.3 HighJuly 7, 2021
• debian linux, selinux project selinux, fedoraproject fedora +19 more +21 more The CIL compiler in SELinux 3.2 has a use-after-free in cil_reset_classpermission (called from... CVE-2021-36086 Fix available 3.3 LowJuly 1, 2021
• linux kernel, netapp h300e firmware, h300s firmware +29 more +31 more .A flaw was found in the CAN BCM networking protocol in the Linux kernel, where a local attacker... CVE-2021-3609 Fix available 7.0 HighJune 21, 2021
• linux kernel, netapp aff 8300 firmware, aff 8700 firmware +19 more +21 more An issue was discovered in the Linux kernel before 5.0.19. The XFRM subsystem has a use-after... CVE-2019-25045 Fix available 7.8 HighJune 7, 2021
• linux kernel, netapp a700s firmware, aff a400 firmware +15 more +17 more A flaw possibility of race condition and incorrect initialization of the process id was found in... CVE-2020-35508 Fix available 4.5 MediumDecember 31, 2020
• linux kernel, broadcom brocade fabric operating system firmware, netapp a250 firmware +16 more +18 more Use-after-free vulnerability in fs/block_dev.c in the Linux kernel before 5.8 allows local users... CVE-2020-15436 Public exploitFix available 6.7 MediumNovember 23, 2020
• netapp hci h610s firmware, hci baseboard management controller (bmc) hci h610c, netapp hci baseboard management controller (bmc) hci h615c, netapp hci baseboard management controller (bmc) hci h610s +1 more The NetApp HCI H610S Baseboard Management Controller (BMC) is shipped with a documented default... CVE-2020-8573 6.5 MediumJune 29, 2020
• debian linux, linux kernel, canonical ubuntu linux +21 more +23 more gadget_dev_desc_UDC_store in drivers/usb/gadget/configfs.c in the Linux kernel through 5.6.13... CVE-2020-13143 Fix available 6.5 MediumMay 18, 2020
• debian linux, linux kernel, canonical ubuntu linux +22 more +24 more The VFIO PCI driver in the Linux kernel through 5.6.13 mishandles attempts to access disabled... CVE-2020-12888 Fix available 5.3 MediumMay 15, 2020
• debian linux, linux kernel, canonical ubuntu linux +20 more +22 more An issue was discovered in the Linux kernel before 5.4.17. drivers/spi/spi-dw.c allows attackers... CVE-2020-12769 Fix available 5.5 MediumMay 9, 2020
• debian linux, linux kernel, canonical ubuntu linux +20 more +22 more An issue was discovered in the Linux kernel through 5.6.11. sg_write lacks an sg_remove_request... CVE-2020-12770 Fix available 6.7 MediumMay 9, 2020
• debian linux, linux kernel, canonical ubuntu linux +21 more +23 more An issue was discovered in the Linux kernel through 5.6.11. btree_gc_coalesce in drivers/md... CVE-2020-12771 Fix available 5.5 MediumMay 9, 2020
• linux kernel, canonical ubuntu linux, debian linux +19 more +21 more There is a use-after-free in kernel versions before 5.5 due to a race condition between the... CVE-2020-10690 Fix available 6.5 MediumMay 8, 2020
• debian linux, linux kernel, netapp a700s firmware +19 more +21 more An issue was found in Linux kernel before 5.5.4. The mwifiex_cmd_append_vsie_tlv() function in... CVE-2020-12653 Fix available 7.8 HighMay 5, 2020
• debian linux, linux kernel, canonical ubuntu linux +20 more +22 more In the Linux kernel through 5.6.7 on the s390 platform, code execution may occur because of a... CVE-2020-11884 Fix available 7.0 HighApril 28, 2020
• linux kernel, netapp cloud backup, fas 8300 +15 more +17 more In the Linux kernel before 5.4.12, drivers/input/input.c has out-of-bounds writes via a crafted... CVE-2019-20636 Fix available 6.7 MediumApril 8, 2020
• linux kernel, canonical ubuntu linux, fedoraproject fedora +24 more +26 more Linux kernel bpf verifier vulnerability CVE-2020-8835 Public exploitFix available 7.8 HighMarch 30, 2020
• canonical ubuntu linux, netapp aff 8300 firmware, aff 8700 firmware +30 more +32 more Ubuntu 18.04 Linux kernel i915 incomplete fix for CVE-2019-14615 CVE-2020-8832 Fix available 5.5 MediumMarch 5, 2020