Netapp Solidfire Baseboard Management Controller Firmware vulnerabilities

• linux kernel, netapp cloud backup, h300e firmware +8 more +10 more An issue was discovered in aspeed_lpc_ctrl_mmap in drivers/soc/aspeed/aspeed-lpc-ctrl.c in the... CVE-2021-42252 Fix available 7.8 HighOctober 11, 2021
• debian linux, linux kernel, netapp h300e firmware +8 more +10 more The decode_data function in drivers/net/hamradio/6pack.c in the Linux kernel before 5.13.13 has a... CVE-2021-42008 Public exploitFix available 7.8 HighOctober 4, 2021
• debian linux, linux kernel, fedoraproject fedora +12 more +14 more prealloc_elems_and_freelist in kernel/bpf/stackmap.c in the Linux kernel through 5.14.9 allows... CVE-2021-41864 Fix available 7.8 HighOctober 1, 2021
• haxx curl, apple macos, debian linux +26 more +28 more When curl >= 7.20.0 and <= 7.78.0 connects to an IMAP or POP3 server to retrieve data using... CVE-2021-22947 Fix available 5.9 MediumSeptember 15, 2021
• haxx curl, apple macos, debian linux +29 more +31 more A user can tell curl >= 7.20.0 and <= 7.78.0 to require a successful upgrade to TLS when speaking... CVE-2021-22946 Fix available 7.5 HighSeptember 15, 2021
• haxx libcurl, apple macos, debian linux +17 more +19 more When sending data to an MQTT server, libcurl <= 7.73.0 and 7.78.0 could in some circumstances... CVE-2021-22945 Fix available 9.1 CriticalSeptember 15, 2021
• haxx libcurl, debian linux, fedoraproject fedora +33 more +35 more libcurl keeps previously used connections in a connection pool for subsequenttransfers to reuse,... CVE-2021-22924 Public exploitFix available 3.7 LowJuly 21, 2021
• debian linux, linux kernel, fedoraproject fedora +14 more +16 more An out-of-bounds memory write flaw was found in the Linux kernel's joystick devices subsystem in... CVE-2021-3612 Fix available 7.8 HighJuly 9, 2021
• linux kernel, netapp aff 8300 firmware, aff 8700 firmware +19 more +21 more An issue was discovered in the Linux kernel before 5.0.19. The XFRM subsystem has a use-after... CVE-2019-25045 Fix available 7.8 HighJune 7, 2021
• debian linux, fedoraproject fedora, linux kernel +10 more +12 more Improper memory handling in Linux KVM CVE-2021-22543 Fix available 8.7 HighMay 26, 2021
• haxx curl, netapp cloud backup, h300e firmware +22 more +24 more curl 7.61.0 through 7.76.1 suffers from exposure of data element to wrong session due to a... CVE-2021-22897 Fix available 5.3 MediumMay 26, 2021
• haxx curl, netapp active iq unified manager, cloud backup +26 more +28 more curl 7.75.0 through 7.76.1 suffers from a use-after-free vulnerability resulting in already freed... CVE-2021-22901 Fix available EPSS 63.5% 8.1 HighMay 26, 2021
• gnu glibc, debian linux, fedoraproject fedora +13 more +15 more The mq_notify function in the GNU C Library (aka glibc) through 2.33 has a use-after-free. It may... CVE-2021-33574 Fix available 9.8 CriticalMay 25, 2021
• linux kernel, netapp cloud backup, h300e firmware +7 more +9 more This vulnerability allows local attackers to escalate privileges on affected installations of... CVE-2021-31440 Public exploitFix available 8.8 HighMay 19, 2021
• linux kernel, netapp cloud backup, h300e firmware +9 more +11 more The block subsystem in the Linux kernel before 5.2 has a use-after-free that can lead to... CVE-2019-25044 7.8 HighMay 14, 2021
• debian linux, linux kernel, fedoraproject fedora +7 more +9 more Linux kernel llcp_sock_bind/connect use-after-free CVE-2021-23134 Fix available 7.8 HighMay 12, 2021
• debian linux, linux kernel, netapp cloud backup +8 more +10 more net/bluetooth/hci_request.c in the Linux kernel through 5.12.2 has a race condition for removal... CVE-2021-32399 Public exploitFix available 7.0 HighMay 10, 2021
• linux kernel, fedoraproject fedora, netapp cloud backup +16 more +18 more A flaw was found in the Linux kernel in versions before 5.12. The value of internal.ndata, in the... CVE-2021-3501 Fix available 7.1 HighMay 5, 2021
• debian linux, linux kernel, broadcom brocade fabric operating system +12 more +14 more Linux Kernel sctp_destroy_sock race condition CVE-2021-23133 Fix available 6.7 MediumApril 22, 2021
• debian linux, linux kernel, netapp cloud backup +9 more +11 more An out-of-bounds (OOB) memory access flaw was found in fs/f2fs/node.c in the f2fs module in the... CVE-2021-3506 Fix available 7.1 HighApril 19, 2021
• debian linux, linux kernel, fedoraproject fedora +4 more +6 more In intel_pmu_drain_pebs_nhm in arch/x86/events/intel/ds.c in the Linux kernel through 5.11.8 on... CVE-2021-28971 Fix available 5.5 MediumMarch 22, 2021
• linux kernel, fedoraproject fedora, netapp cloud backup +2 more +4 more In drivers/pci/hotplug/rpadlpar_sysfs.c in the Linux kernel through 5.11.8, the RPA PCI Hotplug... CVE-2021-28972 Fix available 6.7 MediumMarch 22, 2021
• debian linux, linux kernel, fedoraproject fedora +4 more +6 more A race condition was discovered in get_old_root in fs/btrfs/ctree.c in the Linux kernel through 5... CVE-2021-28964 Fix available 4.7 MediumMarch 22, 2021
• linux kernel, fedoraproject fedora, netapp a250 firmware +4 more +6 more An issue was discovered in the Linux kernel through 5.11.8. The sound/soc/qcom/sdm845.c soundwire... CVE-2021-28952 Fix available 7.8 HighMarch 20, 2021
• linux kernel, fedoraproject fedora, netapp a250 firmware +4 more +6 more An issue was discovered in fs/io_uring.c in the Linux kernel through 5.11.8. It allows attackers... CVE-2021-28951 Fix available 5.5 MediumMarch 20, 2021
• linux kernel, netapp cloud backup, h300e firmware +8 more +10 more An out-of-bounds (OOB) memory access flaw was found in x25_bind in net/x25/af_x25.c in the Linux... CVE-2020-35519 Fix available 7.8 HighMarch 18, 2021
• debian linux, linux kernel, fedoraproject fedora +9 more +11 more rtw_wx_set_scan in drivers/staging/rtl8188eu/os_dep/ioctl_linux.c in the Linux kernel through 5... CVE-2021-28660 Fix available 8.8 HighMarch 17, 2021
• linux kernel, fedoraproject fedora, netapp cloud backup +1 more +3 more An issue was discovered in the Linux kernel through 5.11.6. fastrpc_internal_invoke in drivers... CVE-2021-28375 Fix available 7.8 HighMarch 15, 2021
• debian linux, linux kernel, netapp cloud backup +2 more +4 more An issue was discovered in the Linux kernel through 5.11.3. Certain iSCSI data structures do not... CVE-2021-27365 Public exploitFix available 7.8 HighMarch 7, 2021
• debian linux, linux kernel, canonical ubuntu linux +3 more +5 more An issue was discovered in the Linux kernel through 5.11.3. drivers/scsi/scsi_transport_iscsi.c... CVE-2021-27364 Fix available 7.1 HighMarch 7, 2021
• debian linux, linux kernel, netapp cloud backup +1 more +3 more An issue was discovered in the Linux kernel through 5.11.3. A kernel pointer leak can be used to... CVE-2021-27363 Fix available 4.4 MediumMarch 7, 2021
• linux kernel, xen, netapp cloud backup +1 more +3 more An issue was discovered in the Linux kernel 5.9.x through 5.11.3, as used with Xen. In some less... CVE-2021-28039 Fix available 6.5 MediumMarch 5, 2021
• debian linux, linux kernel, netapp cloud backup +1 more +3 more An issue was discovered in the Linux kernel through 5.11.3, as used with Xen PV. A certain part... CVE-2021-28038 Fix available 6.5 MediumMarch 5, 2021
• debian linux, linux kernel, fedoraproject fedora +2 more +4 more mwifiex_cmd_802_11_ad_hoc_start in drivers/net/wireless/marvell/mwifiex/join.c in the Linux... CVE-2020-36158 Fix available 8.8 HighJanuary 5, 2021
• debian linux, linux kernel, netapp cloud backup +4 more +6 more A use-after-free flaw was found in kernel/trace/ring_buffer.c in Linux kernel (5.10-rc1). There... CVE-2020-27825 Fix available 5.7 MediumDecember 11, 2020
• debian linux, linux kernel, broadcom fabric operating system +8 more +10 more A locking inconsistency issue was discovered in the tty subsystem of the Linux kernel through 5.9... CVE-2020-29660 Fix available 4.4 MediumDecember 9, 2020
• debian linux, linux kernel, broadcom fabric operating system +9 more +11 more A locking issue was discovered in the tty subsystem of the Linux kernel through 5.9.13. drivers... CVE-2020-29661 Public exploitFix available 7.8 HighDecember 9, 2020
• canonical apt, debian advanced package tool, netapp solidfire baseboard management controller firmware +2 more apt integer wraparound CVE-2020-27350 Fix available 5.7 MediumDecember 9, 2020
• linux kernel, netapp cloud backup, h410c firmware +4 more +6 more An issue was discovered in kmem_cache_alloc_bulk in mm/slub.c in the Linux kernel before 5.5.11.... CVE-2020-29370 Public exploitFix available 7.0 HighNovember 28, 2020
• linux kernel, broadcom brocade fabric operating system firmware, netapp a250 firmware +16 more +18 more Use-after-free vulnerability in fs/block_dev.c in the Linux kernel before 5.8 allows local users... CVE-2020-15436 Public exploitFix available 6.7 MediumNovember 23, 2020
• linux kernel, fedoraproject fedora, netapp active iq unified manager +10 more +12 more A vulnerability was found in Linux kernel where non-blocking socket in llcp_sock_connect() leads... CVE-2020-25673 Fix available 5.5 MediumNovember 2, 2020
• debian linux, linux kernel, fedoraproject fedora +11 more +13 more A memory leak vulnerability was found in Linux kernel in llcp_sock_connect CVE-2020-25672 Fix available 7.5 HighNovember 2, 2020
• debian linux, linux kernel, fedoraproject fedora +11 more +13 more A vulnerability was found in Linux Kernel, where a refcount leak in llcp_sock_connect() causing... CVE-2020-25671 Fix available 7.8 HighNovember 2, 2020
• debian linux, linux kernel, fedoraproject fedora +11 more +13 more A vulnerability was found in Linux Kernel where refcount leak in llcp_sock_bind() causing use... CVE-2020-25670 Fix available 7.8 HighNovember 2, 2020
• debian linux, linux kernel, netapp 500f firmware +12 more +14 more CVE-2020-25668 does not affect BellSoft software CVE-2020-25668 Fix available 7.0 HighNovember 2, 2020
• openldap, netapp cloud backup, solidfire baseboard management controller firmware +4 more +6 more A NULL pointer dereference was found in OpenLDAP server and was fixed in openldap 2.4.55, during... CVE-2020-25692 Fix available 7.5 HighOctober 30, 2020
• linux kernel, netapp a250 firmware, aff 500f firmware +3 more +5 more An out-of-bounds memory write flaw was found in how the Linux kernel’s Voice Over IP H.323... CVE-2020-14305 Fix available 8.1 HighOctober 29, 2020
• debian linux, linux kernel, canonical ubuntu linux +7 more +9 more A flaw null pointer dereference in the Linux kernel cgroupv2 subsystem in versions before 5.7.10... CVE-2020-14356 Public exploitFix available 7.8 HighAugust 19, 2020
• debian linux, linux kernel, canonical ubuntu linux +21 more +23 more gadget_dev_desc_UDC_store in drivers/usb/gadget/configfs.c in the Linux kernel through 5.6.13... CVE-2020-13143 Fix available 6.5 MediumMay 18, 2020
• debian linux, linux kernel, canonical ubuntu linux +22 more +24 more The VFIO PCI driver in the Linux kernel through 5.6.13 mishandles attempts to access disabled... CVE-2020-12888 Fix available 5.3 MediumMay 15, 2020
• Show olderLoading…