Netapp Solidfire \& Hci Storage Node vulnerabilities

• curl, haxx libcurl, netapp hci baseboard management controller +24 more +26 more gzip integer overflow CVE-2025-0725 Fix available 7.3 HighFebruary 5, 2025
• curl, netapp bootstrap os, element software +32 more +34 more netrc and default credential leak CVE-2025-0167 Fix available 3.4 LowFebruary 5, 2025
• debian linux, netapp 500f firmware, 8300 firmware +27 more +29 more Timing side-channel in ECDSA signature computation CVE-2024-13176 Public exploitFix available 4.6 MediumJanuary 20, 2025
• libexpat project libexpat, debian linux, netapp active iq unified manager +26 more +28 more An issue was discovered in libexpat before 2.6.4. There is a crash within the XML_ResumeParser... CVE-2024-50602 Public exploitFix available 5.9 MediumOctober 27, 2024
• gnome libxml2, netapp h300s firmware, h410c firmware +6 more +8 more In libxml2 2.11 before 2.11.9, 2.12 before 2.12.9, and 2.13 before 2.13.3, the SAX parser can... CVE-2024-40896 Fix available 9.1 CriticalAugust 2, 2024
• linux, linux kernel, netapp converged systems advisor agent +8 more +10 more NFSD: Fix nfsd4_encode_fattr4() crasher CVE-2024-36958 Fix available 9.8 CriticalMay 30, 2024
• gnu glibc, debian linux, netapp element software +11 more +13 more nscd: netgroup cache assumes NSS callback uses in-buffer strings CVE-2024-33602 Fix available 7.4 HighApril 26, 2024
• linux kernel, netapp active iq unified manager, solidfire \& hci management node +21 more +23 more Kernel: use after free in nvmet_tcp_free_crypto in nvme CVE-2023-5178 Public exploitFix available 8.8 HighOctober 18, 2023
• certifi, certifi python-certifi, fedoraproject fedora +6 more +8 more Certifi's removal of e-Tugra root certificate CVE-2023-37920 Fix available 7.5 HighJuly 25, 2023
• linux kernel, fedora, netapp h300s +8 more +10 more Session race condition remote code execution vulnerability CVE-2023-32257 Fix available 8.1 HighJuly 24, 2023
• linux kernel, netapp h300s, h410s +4 more +6 more An issue was discovered in the Linux kernel before 6.3.10. fs/smb/server/smb2misc.c in ksmbd does... CVE-2023-38432 Fix available 9.1 CriticalJuly 17, 2023
• linux kernel, netapp h300s, h410s +4 more +6 more An issue was discovered in the Linux kernel before 6.3.4. fs/ksmbd/smb2pdu.c in ksmbd does not... CVE-2023-38428 Fix available 9.1 CriticalJuly 17, 2023
• linux kernel, netapp h300s, h410s +4 more +6 more An issue was discovered in the Linux kernel before 6.3.4. ksmbd has an out-of-bounds read in... CVE-2023-38426 Fix available 9.1 CriticalJuly 17, 2023
• debian linux, linux kernel, netapp active iq unified manager +6 more +8 more nfqnl_mangle in net/netfilter/nfnetlink_queue.c in the Linux kernel through 5.18.14 allows remote... CVE-2022-36946 Public exploitFix available 7.5 HighJuly 27, 2022
• eclipse jetty, the eclipse foundation eclipse jetty, debian linux +5 more +7 more Jetty invalid URI parsing may produce invalid HttpURI.authority CVE-2022-2047 Fix available 2.7 LowJuly 7, 2022
• eclipse jetty, the eclipse foundation eclipse jetty, debian linux +6 more +8 more Eclipse Jetty XmlParser allows arbitrary DOCTYPE declarations CVE-2022-2048 Fix available 7.5 HighJuly 7, 2022
• haxx curl, netapp clustered data ontap, h300s firmware +12 more +14 more The curl URL parser wrongly accepts percent-encoded URL separators like '/'when decoding the host... CVE-2022-27780 Fix available 7.5 HighMay 11, 2022
• haxx curl, broadcom fabric operating system, debian linux +13 more +15 more A insufficiently protected credentials vulnerability in fixed in curl 7.83.0 might leak... CVE-2022-27776 Fix available 6.5 MediumApril 27, 2022
• haxx curl, broadcom fabric operating system, debian linux +12 more +14 more An information disclosure vulnerability exists in curl 7.65.0 to 7.82.0 are vulnerable that by... CVE-2022-27775 Fix available 7.5 HighApril 27, 2022
• haxx curl, broadcom fabric operating system, debian linux +12 more +14 more An insufficiently protected credentials vulnerability exists in curl 4.9 to and include curl 7.82... CVE-2022-27774 Fix available 5.7 MediumApril 27, 2022
• haxx curl, broadcom fabric operating system, debian linux +12 more +14 more An improper authentication vulnerability exists in curl 7.33.0 to and including 7.82.0 which... CVE-2022-22576 Fix available 8.1 HighApril 27, 2022
• apache log4j, log4j2, apple xcode +141 more +143 more Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints CVE-2021-44228 In KEVPublic exploitFix available EPSS 100.0% 10.0 CriticalDecember 10, 2021
• debian linux, linux kernel, netapp e-series santricity os controller +15 more +17 more A flaw was found in the Linux SCTP stack. A blind attacker may be able to kill an existing SCTP... CVE-2021-3772 Fix available 6.5 MediumSeptember 9, 2021
• debian linux, linux kernel, xen +3 more +5 more An issue was discovered in the Linux kernel through 5.10.1, as used with Xen through 4.14.x. The... CVE-2020-29569 Fix available 8.8 HighDecember 15, 2020
• debian linux, linux kernel, netapp 500f firmware +5 more +7 more An issue was discovered in the Linux kernel before 5.7.3, related to mm/gup.c and mm/huge_memory... CVE-2020-29374 Fix available 3.6 LowNovember 28, 2020
• debian linux, linux kernel, canonical ubuntu linux +4 more +6 more A flaw was found in the Linux kernel in versions before 5.9-rc7. Traffic between two Geneve... CVE-2020-25645 Fix available 7.5 HighOctober 13, 2020
• linux kernel, netapp active iq unified manager, aff a700s +7 more +9 more usb_sg_cancel in drivers/usb/core/message.c in the Linux kernel before 5.6.8 has a use-after-free... CVE-2020-12464 Fix available 6.7 MediumApril 29, 2020
• debian linux, linux kernel, canonical ubuntu linux +10 more +12 more An issue was discovered in the Linux kernel before 4.20. There is a race condition in... CVE-2018-20836 Fix available 8.1 HighMay 7, 2019