Netapp Hci vulnerabilities

• vim, netapp hci compute node +1 more Improper Input Validation in Vim CVE-2025-27423 Fix available EPSS 22.5% 7.1 HighMarch 3, 2025
• vim, netapp hci compute node +1 more heap-use-after-free in function str_to_reg in vim/vim CVE-2025-26603 Fix available 4.2 MediumFebruary 18, 2025
• gnome libxml2, netapp active iq unified manager, h300s firmware +8 more +10 more libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a stack-based buffer overflow in... CVE-2025-24928 Fix available 7.8 HighFebruary 18, 2025
• gnome libxml2, netapp active iq unified manager, h300s firmware +8 more +10 more libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a use-after-free in... CVE-2024-56171 Fix available 7.8 HighFebruary 18, 2025
• curl, haxx libcurl, netapp hci baseboard management controller +24 more +26 more gzip integer overflow CVE-2025-0725 Fix available 7.3 HighFebruary 5, 2025
• curl, netapp bootstrap os, element software +32 more +34 more netrc and default credential leak CVE-2025-0167 Fix available 3.4 LowFebruary 5, 2025
• sparkle project sparkle, netapp hci compute node, oncommand workflow automation +2 more Signing Checks Bypass CVE-2025-0509 Fix available 7.3 HighFebruary 4, 2025
• vim, netapp hci compute node firmware +1 more segmentation fault in win_line() in Vim < 9.1.1043 CVE-2025-24014 Fix available 4.2 MediumJanuary 20, 2025
• es iperf3, netapp hci compute node, ontap 9 +2 more iperf v3.17.1 was discovered to contain a segmentation violation via the... CVE-2024-53580 Fix available 7.5 HighDecember 18, 2024
• libexpat project libexpat, debian linux, netapp active iq unified manager +26 more +28 more An issue was discovered in libexpat before 2.6.4. There is a crash within the XML_ResumeParser... CVE-2024-50602 Public exploitFix available 5.9 MediumOctober 27, 2024
• netapp 500f firmware, a250 firmware, active iq unified manager +22 more +24 more Possible denial of service in X.509 name checks CVE-2024-6119 Fix available EPSS 66.6% 7.5 HighSeptember 3, 2024
• gnome libxml2, netapp h300s firmware, h410c firmware +6 more +8 more In libxml2 2.11 before 2.11.9, 2.12 before 2.12.9, and 2.13 before 2.13.3, the SAX parser can... CVE-2024-40896 Fix available 9.1 CriticalAugust 2, 2024
• vim, neovim, netapp hci compute node +2 more Vim < v9.1.0648 has a double-free in dialog_changed() CVE-2024-41965 Fix available 4.2 MediumAugust 1, 2024
• certifi, certifi python-certifi, netapp management services for element software and netapp hci +2 more +4 more Certifi removes GLOBALTRUST root certificate CVE-2024-39689 Public exploitFix available 7.5 HighJuly 5, 2024
• linux, linux kernel, netapp converged systems advisor agent +8 more +10 more NFSD: Fix nfsd4_encode_fattr4() crasher CVE-2024-36958 Fix available 9.8 CriticalMay 30, 2024
• intel tdx module, trust domain extensions module, netapp hci compute node bios +2 more Improper input validation in some Intel(R) TDX module software before version 1.5.05.46.698 may... CVE-2023-47855 Fix available 6.0 MediumMay 16, 2024
• intel tdx module, tdx module software, netapp hci compute node bios +2 more Improper input validation in some Intel(R) TDX module software before version 1.5.05.46.698 may... CVE-2023-45745 Fix available 7.9 HighMay 16, 2024
• gnu glibc, debian linux, netapp element software +11 more +13 more nscd: netgroup cache assumes NSS callback uses in-buffer strings CVE-2024-33602 Fix available 7.4 HighApril 26, 2024
• gnu glibc, debian linux, netapp h300s firmware +11 more +13 more nscd: netgroup cache may terminate daemon on memory allocation failure CVE-2024-33601 Fix available 7.3 HighApril 26, 2024
• gnu glibc, debian linux, netapp active iq unified manager +12 more +14 more nscd: Null pointer crashes after notfound response CVE-2024-33600 Fix available 5.9 MediumApril 26, 2024
• gnu glibc, debian linux, netapp h300s firmware +8 more +10 more nscd: Stack-based buffer overflow in netgroup cache CVE-2024-33599 Fix available 8.1 HighApril 26, 2024
• qemu, netapp hci compute node, red hat enterprise linux 6 +15 more +17 more Qemu: sdhci: heap buffer overflow in sdhci_write_dataport() CVE-2024-3447 Fix available 6.0 MediumApril 23, 2024
• debian linux, gnu glibc, netapp active iq unified manager +13 more +15 more The iconv() function in the GNU C Library versions 2.39 and older may overflow the output buffer... CVE-2024-2961 Public exploitFix available EPSS 88.3% 7.3 HighApril 17, 2024
• greenwoodsoftware less, debian linux, netapp bootstrap os +2 more +4 more less through 653 allows OS command execution via a newline character in the name of a file,... CVE-2024-32487 Fix available 8.6 HighApril 13, 2024
• mit kerberos 5, netapp active iq unified manager, cloud volumes ontap mediator +5 more +7 more Kerberos 5 (aka krb5) 1.21.2 contains a memory leak vulnerability in /krb5/src/kdc/ndr.c. CVE-2024-26462 Fix available 5.5 MediumFebruary 26, 2024
• mit kerberos 5, netapp active iq unified manager, cloud volumes ontap mediator +6 more +8 more Kerberos 5 (aka krb5) 1.21.2 contains a memory leak vulnerability in /krb5/src/lib/gssapi/krb5... CVE-2024-26461 Fix available 7.5 HighFebruary 26, 2024
• mit kerberos 5, netapp active iq unified manager, cloud volumes ontap mediator +6 more +8 more Kerberos 5 (aka krb5) 1.21.2 contains a memory leak in /krb5/src/lib/rpc/pmap_rmt.c. CVE-2024-26458 Fix available 5.3 MediumFebruary 26, 2024
• intel server platform services, netapp hci bootstrap os, hci compute node bios +2 more Uncontrolled resource consumption for some Intel(R) SPS firmware before version SPS_E5_06.01.04... CVE-2023-29153 4.9 MediumFebruary 14, 2024
• debian linux, fedoraproject fedora, isc bind +5 more +7 more The Closest Encloser Proof aspect of the DNS protocol (in RFC 5155 when RFC 9276 guidance is... CVE-2023-50868 Public exploitFix available EPSS 74.3% 7.5 HighFebruary 13, 2024
• vim, fedoraproject fedora, neovim +1 more +3 more Vim has heap-use-after-free at /src/charset.c:1770:12 in skipwhite CVE-2023-48706 Fix available 3.6 LowNovember 22, 2023
• linux kernel, netapp active iq unified manager, solidfire \& hci management node +21 more +23 more Kernel: use after free in nvmet_tcp_free_crypto in nvme CVE-2023-5178 Public exploitFix available 8.8 HighOctober 18, 2023
• mit kerberos 5, debian linux, netapp active iq unified manager +4 more +6 more lib/kadm5/kadm_rpc_xdr.c in MIT Kerberos 5 (aka krb5) before 1.20.2 and 1.21.x before 1.21.1... CVE-2023-36054 Fix available 6.5 MediumAugust 7, 2023
• certifi, certifi python-certifi, fedoraproject fedora +6 more +8 more Certifi's removal of e-Tugra root certificate CVE-2023-37920 Fix available 7.5 HighJuly 25, 2023
• linux kernel, fedora, netapp h300s +8 more +10 more Session race condition remote code execution vulnerability CVE-2023-32257 Fix available 8.1 HighJuly 24, 2023
• linux kernel, netapp h300s, h410s +4 more +6 more An issue was discovered in the Linux kernel before 6.3.10. fs/smb/server/smb2misc.c in ksmbd does... CVE-2023-38432 Fix available 9.1 CriticalJuly 17, 2023
• linux kernel, netapp h300s, h410s +3 more +5 more An issue was discovered in the Linux kernel before 6.3.8. fs/smb/server/connection.c in ksmbd... CVE-2023-38431 Fix available 9.1 CriticalJuly 17, 2023
• linux kernel, netapp h300s, h410s +3 more +5 more An issue was discovered in the Linux kernel before 6.3.9. ksmbd does not validate the SMB request... CVE-2023-38430 Fix available 9.1 CriticalJuly 17, 2023
• linux kernel, netapp h300s, h410s +4 more +6 more An issue was discovered in the Linux kernel before 6.3.4. fs/ksmbd/smb2pdu.c in ksmbd does not... CVE-2023-38428 Fix available 9.1 CriticalJuly 17, 2023
• linux kernel, netapp h300s, h410s +4 more +6 more An issue was discovered in the Linux kernel before 6.3.4. ksmbd has an out-of-bounds read in... CVE-2023-38426 Fix available 9.1 CriticalJuly 17, 2023
• openssl, netapp management services for element software and netapp hci, ontap select deploy administration utility +2 more AES-SIV implementation ignores empty associated data entries CVE-2023-2975 Fix available 5.3 MediumJuly 14, 2023
• debian linux, linux kernel, netapp hci baseboard management controller +1 more +3 more A use-after-free flaw was found in r592_remove in drivers/memstick/host/r592.c in media access in... CVE-2023-3141 Fix available 7.1 HighJune 9, 2023
• linux kernel, netapp hci baseboard management controller +1 more A flaw was found in the fixed buffer registration code for io_uring (io_sqe_buffer_register in... CVE-2023-2598 Public exploitFix available 7.8 HighJune 1, 2023
• linux kernel, fedora, netapp h300s +8 more +10 more Tree connection race condition remote code execution vulnerability CVE-2023-32254 Fix available 9.8 CriticalMay 23, 2023
• linux kernel, fedora, netapp h300s +9 more +11 more Session race condition remote code execution vulnerability CVE-2023-32250 Fix available 9.0 CriticalMay 22, 2023
• linux kernel, netapp hci baseboard management controller, redhat enterprise linux +1 more +3 more In the Linux kernel through 6.3.1, a use-after-free in Netfilter nf_tables when processing batch... CVE-2023-32233 Public exploitFix available EPSS 13.4% 7.8 HighMay 8, 2023
• linux kernel, netapp hci baseboard management controller +1 more Use-after-free in Linux kernel's Performance Events subsystem CVE-2023-2236 Fix available 7.8 HighMay 1, 2023
• linux kernel, debian linux, netapp h300s firmware +5 more +7 more The specific flaw exists within the DPT I2O Controller driver. The issue results from the lack of... CVE-2023-2007 Fix available 7.8 HighApril 24, 2023
• linux kernel, netapp hci baseboard management controller +1 more A race condition was found in the Linux kernel's RxRPC network protocol, within the processing of... CVE-2023-2006 Fix available 7.0 HighApril 24, 2023
• debian linux, linux kernel, netapp h300s +12 more +14 more Kernel: use after free bug in btsdio_remove due to race condition CVE-2023-1989 Fix available 7.0 HighApril 11, 2023
• openbsd openssh, netapp brocade fabric operating system, hci bootstrap os +4 more +6 more ssh-add in OpenSSH before 9.3 adds smartcard keys to ssh-agent without the intended per-hop... CVE-2023-28531 Fix available 9.8 CriticalMarch 17, 2023
• Show olderLoading…