Netapp H700s Firmware vulnerabilities

• ami megarac spx, megarac-spx, megarac sp-x +9 more +11 more Redfish Authentication Bypass CVE-2024-54085 In KEVPublic exploit EPSS 60.7% 10.0 CriticalMarch 11, 2025
• gnome libxml2, netapp active iq unified manager, h300s firmware +8 more +10 more libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a stack-based buffer overflow in... CVE-2025-24928 Fix available 7.8 HighFebruary 18, 2025
• gnome libxml2, netapp active iq unified manager, h300s firmware +8 more +10 more libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a use-after-free in... CVE-2024-56171 Fix available 7.8 HighFebruary 18, 2025
• curl, netapp bootstrap os, h300s firmware +23 more +25 more eventfd double close CVE-2025-0665 Fix available 7.0 HighFebruary 5, 2025
• curl, netapp bootstrap os, element software +32 more +34 more netrc and default credential leak CVE-2025-0167 Fix available 3.4 LowFebruary 5, 2025
• debian linux, netapp 500f firmware, 8300 firmware +27 more +29 more Timing side-channel in ECDSA signature computation CVE-2024-13176 Public exploitFix available 4.6 MediumJanuary 20, 2025
• curl, netapp bootstrap os, h300s firmware +29 more +31 more netrc and redirect credential leak CVE-2024-11053 Fix available 3.4 LowDecember 11, 2024
• libexpat project libexpat, debian linux, netapp active iq unified manager +26 more +28 more An issue was discovered in libexpat before 2.6.4. There is a crash within the XML_ResumeParser... CVE-2024-50602 Public exploitFix available 5.9 MediumOctober 27, 2024
• debian linux, netapp 500f firmware, a250 firmware +30 more +32 more Low-level invalid GF(2^m) parameters lead to OOB memory access CVE-2024-9143 Fix available EPSS 12.5% 8.8 HighOctober 16, 2024
• curl, debian linux, netapp active iq unified manager +26 more +28 more OCSP stapling bypass with GnuTLS CVE-2024-8096 Fix available 6.5 MediumSeptember 11, 2024
• openssl, netapp bootstrap os, brocade fabric operating system +9 more +11 more RFC7250 handshakes with unauthenticated servers don't abort as expected CVE-2024-12797 Fix available 7.4 HighSeptember 3, 2024
• netapp 500f firmware, a250 firmware, active iq unified manager +22 more +24 more Possible denial of service in X.509 name checks CVE-2024-6119 Fix available EPSS 66.6% 7.5 HighSeptember 3, 2024
• gnome libxml2, netapp h300s firmware, h410c firmware +6 more +8 more In libxml2 2.11 before 2.11.9, 2.12 before 2.12.9, and 2.13 before 2.13.3, the SAX parser can... CVE-2024-40896 Fix available 9.1 CriticalAugust 2, 2024
• openssl, debian linux, netapp 500f firmware +40 more +42 more SSL_select_next_proto buffer overread CVE-2024-5535 Public exploitFix available 9.1 CriticalJune 27, 2024
• linux, linux kernel, netapp converged systems advisor agent +8 more +10 more NFSD: Fix nfsd4_encode_fattr4() crasher CVE-2024-36958 Fix available 9.8 CriticalMay 30, 2024
• openssl, debian linux, netapp 500f firmware +32 more +34 more Use After Free with SSL_free_buffers CVE-2024-4741 Fix available 9.8 CriticalMay 28, 2024
• openssl, netapp 500f firmware, 8300 firmware +19 more +21 more Excessive time spent checking DSA keys and parameters CVE-2024-4603 Fix available 5.3 MediumMay 16, 2024
• gnu glibc, debian linux, netapp element software +11 more +13 more nscd: netgroup cache assumes NSS callback uses in-buffer strings CVE-2024-33602 Fix available 7.4 HighApril 26, 2024
• gnu glibc, debian linux, netapp h300s firmware +11 more +13 more nscd: netgroup cache may terminate daemon on memory allocation failure CVE-2024-33601 Fix available 7.3 HighApril 26, 2024
• gnu glibc, debian linux, netapp active iq unified manager +12 more +14 more nscd: Null pointer crashes after notfound response CVE-2024-33600 Fix available 5.9 MediumApril 26, 2024
• gnu glibc, debian linux, netapp h300s firmware +8 more +10 more nscd: Stack-based buffer overflow in netgroup cache CVE-2024-33599 Fix available 8.1 HighApril 26, 2024
• debian linux, gnu glibc, netapp active iq unified manager +13 more +15 more The iconv() function in the GNU C Library versions 2.39 and older may overflow the output buffer... CVE-2024-2961 Public exploitFix available EPSS 88.3% 7.3 HighApril 17, 2024
• openssl, debian linux, netapp 500f firmware +79 more +81 more Unbounded memory growth with session handling in TLSv1.3 CVE-2024-2511 Fix available EPSS 59.3% 5.9 MediumApril 8, 2024
• curl, curl libcurl, apple macos +10 more +12 more TLS certificate check bypass with mbedTLS CVE-2024-2466 Fix available 6.5 MediumMarch 27, 2024
• curl, apple macos, netapp active iq unified manager +14 more +16 more QUIC certificate check bypass with wolfSSL CVE-2024-2379 Fix available 6.3 MediumMarch 27, 2024
• curl, apple macos, fedoraproject fedora +16 more +18 more HTTP/2 push headers memory-leak CVE-2024-2398 Fix available EPSS 36.1% 8.6 HighMarch 27, 2024
• curl, apple macos, fedoraproject fedora +12 more +14 more Usage of disabled protocol CVE-2024-2004 Fix available 3.5 LowMarch 27, 2024
• libexpat project libexpat, fedoraproject fedora, netapp active iq unified manager +17 more +19 more libexpat through 2.6.1 allows an XML Entity Expansion attack when there is isolated use of... CVE-2024-28757 Public exploitFix available 7.5 HighMarch 10, 2024
• debian linux, linux kernel, fedoraproject fedora +15 more +17 more Use-after-free in Linux kernel's netfilter: nf_tables component CVE-2024-1086 In KEVPublic exploitFix available EPSS 28.1% 7.8 HighJanuary 31, 2024
• openssl, netapp 500f firmware, 8300 firmware +31 more +33 more Excessive time spent checking invalid RSA public keys CVE-2023-6237 Fix available 5.9 MediumJanuary 15, 2024
• openssl, debian linux, netapp h300s firmware +9 more +11 more Incorrect cipher key & IV length processing CVE-2023-5363 Fix available 7.5 HighOctober 24, 2023
• linux kernel, netapp h300s firmware, h410s firmware +2 more +4 more extract_user_to_sg in lib/scatterlist.c in the Linux kernel before 6.4.2 fails to unpin pages in... CVE-2023-40791 Fix available 6.3 MediumOctober 16, 2023
• gnu glibc, c library, canonical ubuntu linux +48 more +50 more Glibc: buffer overflow in ld.so leading to privilege escalation CVE-2023-4911 In KEVPublic exploitFix available EPSS 63.8% 7.8 HighOctober 3, 2023
• isc bind, bind 9, debian linux +6 more +8 more named may terminate unexpectedly under high DNS-over-TLS query load CVE-2023-4236 Fix available 7.5 HighSeptember 20, 2023
• gnu glibc, fedoraproject fedora, netapp h300s firmware +31 more +33 more Glibc: stack read overflow in getaddrinfo in no-aaaa mode CVE-2023-4527 Fix available 6.5 MediumSeptember 18, 2023
• gnu glibc, fedoraproject fedora, netapp active iq unified manager +22 more +24 more Glibc: potential use-after-free in gaih_inet() CVE-2023-4813 Public exploitFix available 5.9 MediumSeptember 12, 2023
• debian linux, linux kernel, fedoraproject fedora +10 more +12 more Kernel: exfat: stack overflow in exfat_get_uniname_from_ext_entry CVE-2023-4273 Fix available 6.0 MediumAugust 9, 2023
• linux kernel, fedora, netapp h300s firmware +8 more +10 more Session null pointer dereference denial-of-service vulnerability CVE-2023-32252 Fix available 7.5 HighJuly 24, 2023
• isc bind, bind 9, netapp active iq unified manager +5 more +7 more Malformed NSEC records can cause named to terminate unexpectedly when synth-from-dnssec is enabled CVE-2023-2829 Fix available 7.5 HighJune 21, 2023
• isc bind, bind 9, debian linux +7 more +9 more Exceeding the recursive-clients quota may cause named to terminate unexpectedly when stale-answer-client-timeout is set to 0 CVE-2023-2911 Fix available 7.5 HighJune 21, 2023
• isc bind, bind 9, debian linux +7 more +9 more named's configured cache size limit can be significantly exceeded CVE-2023-2828 Fix available 7.5 HighJune 21, 2023
• debian linux, linux kernel, fedoraproject fedora +9 more +11 more A NULL pointer dereference issue was found in the gfs2 file system in the Linux kernel. It occurs... CVE-2023-3212 Fix available 4.4 MediumJune 19, 2023
• debian linux, linux kernel, canonical ubuntu linux +5 more +7 more An issue was discovered in fl_set_geneve_opt in net/sched/cls_flower.c in the Linux kernel before... CVE-2023-35788 Public exploitFix available 7.8 HighJune 16, 2023
• debian linux, linux kernel, netapp h300s firmware +4 more +6 more A use after free vulnerability was found in prepare_to_relocate in fs/btrfs/relocation.c in btrfs... CVE-2023-3111 Fix available 7.8 HighJune 5, 2023
• openldap, apple macos, netapp active iq unified manager +11 more +13 more A vulnerability was found in openldap. This security flaw causes a null pointer dereference in... CVE-2023-2953 Fix available 7.5 HighMay 30, 2023
• debian linux, linux kernel, netapp h300s firmware +5 more +7 more There is a null-pointer-dereference flaw found in f2fs_write_end_io in fs/f2fs/data.c in the... CVE-2023-2898 Fix available 4.7 MediumMay 26, 2023
• linux kernel, netapp h300s firmware, h410s firmware +2 more +4 more The Linux kernel 6.3 has a use-after-free in iopt_unmap_iova_range in drivers/iommu/iommufd... CVE-2023-33250 Fix available 4.4 MediumMay 21, 2023
• haxx curl, apple macos, netapp clustered data ontap +5 more +7 more A denial of service vulnerability exists in curl <v8.1.0 in the way libcurl provides several... CVE-2023-28320 Fix available 5.9 MediumMay 17, 2023
• haxx curl, apple macos, fedoraproject fedora +6 more +8 more An information disclosure vulnerability exists in curl <v8.1.0 when doing HTTP(S) transfers,... CVE-2023-28322 Fix available 3.7 LowMay 17, 2023
• haxx curl, apple macos, debian linux +7 more +9 more An improper certificate validation vulnerability exists in curl <v8.1.0 in the way it supports... CVE-2023-28321 Fix available 5.9 MediumMay 17, 2023
• Show olderLoading…