Skip to content

Netapp Solidfire\, Enterprise Sds \& Hci Storage Node vulnerabilities

debian linux, linux kernel, netapp 8300 firmware +10 more +12 moreThe Linux kernel before 5.17.2 mishandles seccomp permissions. The PTRACE_SEIZE code path allows...CVE-2022-30594Public exploitFix available7.8 HighMay 12, 2022
haxx curl, netapp clustered data ontap, h300s firmware +10 more +12 moreUsing its HSTS support, curl can be instructed to use HTTPS directly insteadof using an insecure...CVE-2022-30115Fix available4.3 MediumMay 11, 2022
haxx curl, netapp clustered data ontap, h300s firmware +11 more +13 morelibcurl wrongly allows cookies to be set for Top Level Domains (TLDs) if thehost name is provided...CVE-2022-27779Fix available5.3 MediumMay 11, 2022
haxx curl, debian linux, netapp clustered data ontap +12 more +14 morelibcurl provides the `CURLOPT_CERTINFO` option to allow applications torequest details to be...CVE-2022-27781Fix available7.5 HighMay 11, 2022
haxx curl, netapp clustered data ontap, h300s firmware +12 more +14 moreThe curl URL parser wrongly accepts percent-encoded URL separators like '/'when decoding the host...CVE-2022-27780Fix available7.5 HighMay 11, 2022
openssl, netapp a250 firmware, a700s firmware +28 more +30 moreResource leakage when decoding certificates and keysCVE-2022-1473Fix available7.5 HighMay 3, 2022
openssl, netapp a250 firmware, a700s firmware +27 more +29 moreIncorrect MAC key used in the RC4-MD5 ciphersuiteCVE-2022-1434Fix available5.9 MediumMay 3, 2022
openssl, netapp a250 firmware, a700s firmware +28 more +30 moreOCSP_basic_verify may incorrectly verify the response signing certificateCVE-2022-1343Fix available5.3 MediumMay 3, 2022
openssl, debian linux, fedoraproject fedora +37 more +39 moreThe c_rehash script allows command injectionCVE-2022-1292Public exploitFix availableEPSS 82.6%7.3 HighMay 3, 2022
oracle graalvm, azul zulu, debian linux +14 more +16 moreVulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE ...CVE-2022-21449Public exploitFix availableEPSS 77.2%7.5 HighApril 19, 2022
oracle graalvm, azul zulu, debian linux +15 more +17 moreVulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE ...CVE-2022-21434Fix available5.3 MediumApril 19, 2022
oracle graalvm, azul zulu, debian linux +15 more +17 moreVulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE ...CVE-2022-21426Fix available5.3 MediumApril 19, 2022
debian linux, linux kernel, netapp h300e firmware +10 more +12 moreThe SUNRPC subsystem in the Linux kernel through 5.17.2 can call xs_xprt_free before ensuring...CVE-2022-28893Fix available7.8 HighApril 11, 2022
linux kernel, fedoraproject fedora, netapp active iq unified manager +12 more +14 morejbd2_journal_wait_updates in fs/jbd2/transaction.c in the Linux kernel before 5.17.1 has a use...CVE-2022-28796Fix available7.0 HighApril 8, 2022
linux kernel, netapp bootstrap os, cloud volumes ontap mediator +14 more +16 moreAn issue was discovered in the Linux kernel through 5.16.11. The mixed IPID assignment method...CVE-2020-36516Fix available5.9 MediumFebruary 26, 2022
xmlsoft libxml2, apple ipados, iphone os +36 more +38 morevalid.c in libxml2 before 2.9.13 has a use-after-free of ID and IDREF attributes.CVE-2022-23308Fix available7.5 HighFebruary 26, 2022
python, fedoraproject fedora, netapp active iq unified manager +10 more +12 moreA flaw was found in Python, specifically within the urllib.parse module. This module helps break...CVE-2022-0391Fix available7.5 HighFebruary 9, 2022
debian linux, linux kernel, canonical ubuntu linux +24 more +26 moreImportant: kernel security, bug fix, and enhancement updateCVE-2022-0492In KEVPublic exploitFix available7.8 HighFebruary 8, 2022
linux kernel, netapp aff a400 firmware, all flash fabric-attached storage 8300 firmware +23 more +25 moreIn the IPv6 implementation in the Linux kernel before 5.13.3, net/ipv6/output_core.c has an...CVE-2021-45485Public exploitFix available7.5 HighDecember 25, 2021
debian linux, linux kernel, fedoraproject fedora +18 more +20 moreA flaw in the processing of received ICMP errors (ICMP fragment needed and ICMP redirect) in the...CVE-2021-20322Fix available7.4 HighOctober 19, 2021
fedoraproject extra packages for enterprise linux, fedora, netapp hci compute node firmware +20 more +22 moreThere's a flaw in urllib's AbstractBasicAuthHandler class. An attacker who controls a malicious...CVE-2021-3733Fix available6.5 MediumSeptember 2, 2021
haxx curl, netapp cloud backup, h300e firmware +22 more +24 morecurl 7.61.0 through 7.76.1 suffers from exposure of data element to wrong session due to a...CVE-2021-22897Fix available5.3 MediumMay 26, 2021
haxx curl, netapp active iq unified manager, cloud backup +26 more +28 morecurl 7.75.0 through 7.76.1 suffers from a use-after-free vulnerability resulting in already freed...CVE-2021-22901Fix availableEPSS 63.5%8.1 HighMay 26, 2021
debian linux, linux kernel, fedoraproject fedora +5 more +7 moreAn issue was discovered in the Linux kernel 3.2 through 5.10.16, as used by Xen. Grant mapping...CVE-2021-26932Fix available5.5 MediumFebruary 17, 2021
gnu binutils, broadcom brocade fabric operating system, netapp cloud backup +5 more +7 moreThere's a flaw in bfd_pef_parse_function_stubs of bfd/pef.c in binutils which could allow an...CVE-2020-35507Fix available5.5 MediumJanuary 4, 2021
gnu binutils, broadcom brocade fabric operating system firmware, fedoraproject fedora +5 more +7 moreThere's a flaw in bfd_pef_scan_start_address() of bfd/pef.c in binutils which could allow an...CVE-2020-35496Fix available5.5 MediumJanuary 4, 2021
gnu binutils, broadcom brocade fabric operating system firmware, fedoraproject fedora +5 more +7 moreThere's a flaw in binutils /bfd/pef.c. An attacker who is able to submit a crafted input file to...CVE-2020-35495Fix available5.5 MediumJanuary 4, 2021
gnu binutils, broadcom brocade fabric operating system firmware, fedoraproject fedora +5 more +7 moreThere's a flaw in binutils /opcodes/tic4x-dis.c. An attacker who is able to submit a crafted...CVE-2020-35494Fix available6.1 MediumJanuary 4, 2021
gnu binutils, broadcom brocade fabric operating system firmware, fedoraproject fedora +5 more +7 moreA flaw exists in binutils in bfd/pef.c. An attacker who is able to submit a crafted PEF file to...CVE-2020-35493Fix available5.5 MediumJanuary 4, 2021
linux kernel, netapp cloud backup, h410c firmware +4 more +6 moreAn issue was discovered in kmem_cache_alloc_bulk in mm/slub.c in the Linux kernel before 5.5.11....CVE-2020-29370Public exploitFix available7.0 HighNovember 28, 2020
linux kernel, netapp cloud backup, hci compute node +3 more +5 moreget_gate_page in mm/gup.c in the Linux kernel 5.7.x and 5.8.x before 5.8.7 allows privilege...CVE-2020-25221Fix available7.8 HighSeptember 10, 2020
sqlite, apple icloud, ipados +19 more +21 moreext/fts3/fts3.c in SQLite before 3.32.0 has a use-after-free in fts3EvalNextRow, related to the...CVE-2020-13630Fix available7.0 HighMay 27, 2020
sqlite, apple icloud, ipados +18 more +20 moreSQLite before 3.32.0 allows a virtual table to be renamed to the name of one of its shadow tables...CVE-2020-13631Fix available5.5 MediumMay 27, 2020
sqlite, broadcom fabric operating system, canonical ubuntu linux +12 more +14 moreext/fts3/fts3_snippet.c in SQLite before 3.32.0 has a NULL pointer dereference via a crafted...CVE-2020-13632Fix available5.5 MediumMay 27, 2020
e2fsprogs project e2fsprogs, canonical ubuntu linux, debian linux +7 more +9 moreA code execution vulnerability exists in the directory rehashing functionality of E2fsprogs...CVE-2019-5188Fix available7.5 HighJanuary 8, 2020
linux kernel, broadcom brocade fabric operating system firmware, canonical ubuntu linux +15 more +17 moreTwo memory leaks in the rtl_usb_probe() function in drivers/net/wireless/realtek/rtlwifi/usb.c in...CVE-2019-19063Fix available4.6 MediumNovember 18, 2019
linux kernel, broadcom brocade fabric operating system firmware, canonical ubuntu linux +12 more +14 moreA memory leak in the adis_update_scan_mode_burst() function in drivers/iio/imu/adis_buffer.c in...CVE-2019-19061Fix available7.5 HighNovember 18, 2019
linux kernel, broadcom brocade fabric operating system firmware, canonical ubuntu linux +13 more +15 moreA memory leak in the adis_update_scan_mode() function in drivers/iio/imu/adis_buffer.c in the...CVE-2019-19060Fix available7.5 HighNovember 18, 2019
debian linux, linux kernel, broadcom brocade fabric operating system firmware +15 more +17 moreTwo memory leaks in the mwifiex_pcie_init_evt_ring() function in drivers/net/wireless/marvell...CVE-2019-19057Fix available3.3 LowNovember 18, 2019
linux kernel, broadcom brocade fabric operating system firmware, canonical ubuntu linux +14 more +16 moreA memory leak in the cx23888_ir_probe() function in drivers/media/pci/cx23885/cx23888-ir.c in the...CVE-2019-19054Fix available4.7 MediumNovember 18, 2019
linux kernel, broadcom brocade fabric operating system firmware, canonical ubuntu linux +12 more +14 moreA memory leak in the rpmsg_eptdev_write_iter() function in drivers/rpmsg/rpmsg_char.c in the...CVE-2019-19053Fix available7.5 HighNovember 18, 2019
debian linux, linux kernel, broadcom brocade fabric operating system firmware +15 more +17 moreA memory leak in the gs_can_open() function in drivers/net/can/usb/gs_usb.c in the Linux kernel...CVE-2019-19052Fix available7.5 HighNovember 18, 2019
linux kernel, broadcom brocade fabric operating system firmware, canonical ubuntu linux +12 more +14 moreTwo memory leaks in the v3d_submit_cl_ioctl() function in drivers/gpu/drm/v3d/v3d_gem.c in the...CVE-2019-19044Fix available7.5 HighNovember 18, 2019