Netapp Solidfire \& Hci Management Node vulnerabilities

• gnome libxml2, netapp active iq unified manager, h300s firmware +8 more +10 more libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a stack-based buffer overflow in... CVE-2025-24928 Fix available 7.8 HighFebruary 18, 2025
• gnome libxml2, netapp active iq unified manager, h300s firmware +8 more +10 more libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a use-after-free in... CVE-2024-56171 Fix available 7.8 HighFebruary 18, 2025
• curl, haxx libcurl, netapp hci baseboard management controller +24 more +26 more gzip integer overflow CVE-2025-0725 Fix available 7.3 HighFebruary 5, 2025
• curl, netapp bootstrap os, element software +32 more +34 more netrc and default credential leak CVE-2025-0167 Fix available 3.4 LowFebruary 5, 2025
• debian linux, netapp 500f firmware, 8300 firmware +27 more +29 more Timing side-channel in ECDSA signature computation CVE-2024-13176 Public exploitFix available 4.6 MediumJanuary 20, 2025
• libexpat project libexpat, debian linux, netapp active iq unified manager +26 more +28 more An issue was discovered in libexpat before 2.6.4. There is a crash within the XML_ResumeParser... CVE-2024-50602 Public exploitFix available 5.9 MediumOctober 27, 2024
• gnome libxml2, netapp h300s firmware, h410c firmware +6 more +8 more In libxml2 2.11 before 2.11.9, 2.12 before 2.12.9, and 2.13 before 2.13.3, the SAX parser can... CVE-2024-40896 Fix available 9.1 CriticalAugust 2, 2024
• linux, linux kernel, netapp converged systems advisor agent +8 more +10 more NFSD: Fix nfsd4_encode_fattr4() crasher CVE-2024-36958 Fix available 9.8 CriticalMay 30, 2024
• gnu glibc, debian linux, netapp element software +11 more +13 more nscd: netgroup cache assumes NSS callback uses in-buffer strings CVE-2024-33602 Fix available 7.4 HighApril 26, 2024
• linux kernel, netapp active iq unified manager, solidfire \& hci management node +21 more +23 more Kernel: use after free in nvmet_tcp_free_crypto in nvme CVE-2023-5178 Public exploitFix available 8.8 HighOctober 18, 2023
• linux kernel, netapp h300s, h410s +3 more +5 more An issue was discovered in the Linux kernel before 6.3.8. fs/smb/server/connection.c in ksmbd... CVE-2023-38431 Fix available 9.1 CriticalJuly 17, 2023
• linux kernel, netapp h300s, h410s +4 more +6 more An issue was discovered in the Linux kernel before 6.3.4. fs/ksmbd/smb2pdu.c in ksmbd does not... CVE-2023-38428 Fix available 9.1 CriticalJuly 17, 2023
• linux kernel, netapp h300s, h410s +4 more +6 more An issue was discovered in the Linux kernel before 6.3.4. ksmbd has an out-of-bounds read in... CVE-2023-38426 Fix available 9.1 CriticalJuly 17, 2023
• linux kernel, debian linux, netapp h300s firmware +5 more +7 more The specific flaw exists within the DPT I2O Controller driver. The issue results from the lack of... CVE-2023-2007 Fix available 7.8 HighApril 24, 2023
• libexpat project libexpat, debian linux, fedoraproject fedora +12 more +14 more In libexpat through 2.4.9, there is a use-after free caused by overeager destruction of a shared... CVE-2022-43680 Public exploitFix available 7.5 HighOctober 24, 2022
• debian linux, linux kernel, netapp active iq unified manager +6 more +8 more nfqnl_mangle in net/netfilter/nfnetlink_queue.c in the Linux kernel through 5.18.14 allows remote... CVE-2022-36946 Public exploitFix available 7.5 HighJuly 27, 2022
• debian linux, linux kernel, netapp 8300 firmware +10 more +12 more The Linux kernel before 5.17.2 mishandles seccomp permissions. The PTRACE_SEIZE code path allows... CVE-2022-30594 Public exploitFix available 7.8 HighMay 12, 2022
• haxx curl, netapp clustered data ontap, h300s firmware +10 more +12 more Using its HSTS support, curl can be instructed to use HTTPS directly insteadof using an insecure... CVE-2022-30115 Fix available 4.3 MediumMay 11, 2022
• haxx curl, netapp clustered data ontap, h300s firmware +11 more +13 more libcurl wrongly allows cookies to be set for Top Level Domains (TLDs) if thehost name is provided... CVE-2022-27779 Fix available 5.3 MediumMay 11, 2022
• haxx curl, netapp active iq unified manager, bh500s firmware +14 more +16 more A use of incorrectly resolved name vulnerability fixed in 7.83.1 might remove the wrong file when... CVE-2022-27778 Fix available 8.1 HighMay 11, 2022
• haxx curl, debian linux, netapp clustered data ontap +12 more +14 more libcurl provides the `CURLOPT_CERTINFO` option to allow applications torequest details to be... CVE-2022-27781 Fix available 7.5 HighMay 11, 2022
• haxx curl, netapp clustered data ontap, h300s firmware +12 more +14 more The curl URL parser wrongly accepts percent-encoded URL separators like '/'when decoding the host... CVE-2022-27780 Fix available 7.5 HighMay 11, 2022
• xmlsoft libxml2, libxslt, debian linux +19 more +21 more In libxml2 before 2.9.14, several buffer handling functions in buf.c (xmlBuf*) and tree.c ... CVE-2022-29824 Fix available 6.5 MediumMay 3, 2022
• openssl, netapp a250 firmware, a700s firmware +28 more +30 more Resource leakage when decoding certificates and keys CVE-2022-1473 Fix available 7.5 HighMay 3, 2022
• openssl, netapp a250 firmware, a700s firmware +27 more +29 more Incorrect MAC key used in the RC4-MD5 ciphersuite CVE-2022-1434 Fix available 5.9 MediumMay 3, 2022
• openssl, netapp a250 firmware, a700s firmware +28 more +30 more OCSP_basic_verify may incorrectly verify the response signing certificate CVE-2022-1343 Fix available 5.3 MediumMay 3, 2022
• openssl, debian linux, fedoraproject fedora +37 more +39 more The c_rehash script allows command injection CVE-2022-1292 Public exploitFix available EPSS 82.6% 7.3 HighMay 3, 2022
• linux kernel, fedoraproject fedora, netapp h300s firmware +5 more +7 more An issue was discovered in the Linux kernel through 5.17.5. io_rw_init_file in fs/io_uring.c... CVE-2022-29968 Public exploitFix available 7.8 HighMay 2, 2022
• haxx curl, broadcom fabric operating system, debian linux +13 more +15 more A insufficiently protected credentials vulnerability in fixed in curl 7.83.0 might leak... CVE-2022-27776 Fix available 6.5 MediumApril 27, 2022
• haxx curl, broadcom fabric operating system, debian linux +12 more +14 more An information disclosure vulnerability exists in curl 7.65.0 to 7.82.0 are vulnerable that by... CVE-2022-27775 Fix available 7.5 HighApril 27, 2022
• haxx curl, broadcom fabric operating system, debian linux +12 more +14 more An insufficiently protected credentials vulnerability exists in curl 4.9 to and include curl 7.82... CVE-2022-27774 Fix available 5.7 MediumApril 27, 2022
• haxx curl, broadcom fabric operating system, debian linux +12 more +14 more An improper authentication vulnerability exists in curl 7.33.0 to and including 7.82.0 which... CVE-2022-22576 Fix available 8.1 HighApril 27, 2022
• oracle graalvm, azul zulu, debian linux +14 more +16 more Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE ... CVE-2022-21449 Public exploitFix available EPSS 77.2% 7.5 HighApril 19, 2022
• oracle graalvm, azul zulu, debian linux +15 more +17 more Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE ... CVE-2022-21434 Fix available 5.3 MediumApril 19, 2022
• oracle graalvm, azul zulu, debian linux +15 more +17 more Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE ... CVE-2022-21426 Fix available 5.3 MediumApril 19, 2022
• debian linux, linux kernel, netapp h300e firmware +10 more +12 more The SUNRPC subsystem in the Linux kernel through 5.17.2 can call xs_xprt_free before ensuring... CVE-2022-28893 Fix available 7.8 HighApril 11, 2022
• linux kernel, fedoraproject fedora, netapp active iq unified manager +12 more +14 more jbd2_journal_wait_updates in fs/jbd2/transaction.c in the Linux kernel before 5.17.1 has a use... CVE-2022-28796 Fix available 7.0 HighApril 8, 2022
• linux kernel, netapp bootstrap os, cloud volumes ontap mediator +14 more +16 more An issue was discovered in the Linux kernel through 5.16.11. The mixed IPID assignment method... CVE-2020-36516 Fix available 5.9 MediumFebruary 26, 2022
• xmlsoft libxml2, apple ipados, iphone os +36 more +38 more valid.c in libxml2 before 2.9.13 has a use-after-free of ID and IDREF attributes. CVE-2022-23308 Fix available 7.5 HighFebruary 26, 2022
• gnu gnutls, netapp active iq unified manager, hci bootstrap os +5 more +7 more A NULL pointer dereference flaw was found in GnuTLS. As Nettle's hash update functions internally... CVE-2021-4209 Fix available 6.5 MediumFebruary 22, 2022
• debian linux, linux kernel, canonical ubuntu linux +24 more +26 more Important: kernel security, bug fix, and enhancement update CVE-2022-0492 In KEVPublic exploitFix available 7.8 HighFebruary 8, 2022
• libexpat project libexpat, netapp active iq unified manager, clustered data ontap +8 more +10 more In doProlog in xmlparse.c in Expat (aka libexpat) before 2.4.3, an integer overflow exists for... CVE-2021-46143 Public exploitFix available 8.1 HighJanuary 6, 2022
• libexpat project libexpat, debian linux, netapp active iq unified manager +8 more +10 more In Expat (aka libexpat) before 2.4.3, a left shift by 29 (or more) places in the storeAtts... CVE-2021-45960 Public exploitFix available 8.8 HighJanuary 1, 2022
• linux kernel, netapp aff a400 firmware, all flash fabric-attached storage 8300 firmware +23 more +25 more In the IPv6 implementation in the Linux kernel before 5.13.3, net/ipv6/output_core.c has an... CVE-2021-45485 Public exploitFix available 7.5 HighDecember 25, 2021
• debian linux, linux kernel, fedoraproject fedora +18 more +20 more A flaw in the processing of received ICMP errors (ICMP fragment needed and ICMP redirect) in the... CVE-2021-20322 Fix available 7.4 HighOctober 19, 2021
• debian linux, linux kernel, netapp e-series santricity os controller +15 more +17 more A flaw was found in the Linux SCTP stack. A blind attacker may be able to kill an existing SCTP... CVE-2021-3772 Fix available 6.5 MediumSeptember 9, 2021
• haxx libcurl, debian linux, fedoraproject fedora +33 more +35 more libcurl keeps previously used connections in a connection pool for subsequenttransfers to reuse,... CVE-2021-22924 Public exploitFix available 3.7 LowJuly 21, 2021
• linux kernel, netapp aff 8300 firmware, aff 8700 firmware +19 more +21 more An issue was discovered in the Linux kernel before 5.0.19. The XFRM subsystem has a use-after... CVE-2019-25045 Fix available 7.8 HighJune 7, 2021
• linux kernel, fedoraproject fedora, netapp cloud backup +9 more +11 more kernel/bpf/verifier.c in the Linux kernel through 5.12.7 enforces incorrect limits for pointer... CVE-2021-33200 Fix available 7.8 HighMay 27, 2021
• haxx curl, netapp cloud backup, h300e firmware +22 more +24 more curl 7.61.0 through 7.76.1 suffers from exposure of data element to wrong session due to a... CVE-2021-22897 Fix available 5.3 MediumMay 26, 2021
• Show olderLoading…