Starwindsoftware vulnerabilities

Products

• Starwind Virtual San 23
• Starwind San \& Nas 5
• Command Center 4
• Iscsi San 2
• Nas 2
• San 2

Newest

• starwindsoftware starwind san \& nas StarWind SAN and NAS v0.2 build 1914 allow remote code execution. CVE-2022-32268 8.8 HighJune 3, 2022
• starwindsoftware iscsi san StarWind iSCSI SAN before 3.5 build 2007-08-09 allows socket exhaustion. CVE-2007-20001 7.5 HighFebruary 6, 2022
• starwindsoftware iscsi san StarWind iSCSI SAN before 6.0 build 2013-03-20 allows a memory leak. CVE-2013-20004 9.8 CriticalFebruary 6, 2022
• starwindsoftware nas, san +1 more StarWind SAN and NAS before 0.2 build 1685 allows users to reset other users' passwords. CVE-2022-24551 8.8 HighFebruary 6, 2022
• starwindsoftware nas, san +1 more StarWind SAN and NAS before 0.2 build 1685 allows remote code execution via a virtual disk... CVE-2022-24552 9.8 CriticalFebruary 6, 2022
• polkit project polkit, canonical ubuntu linux, oracle http server +27 more +29 more A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec... CVE-2021-4034 In KEVPublic exploitFix available EPSS 94.9% 7.8 HighJanuary 25, 2022
• starwindsoftware command center In StarWind Command Center before V2 build 6021, an authenticated read-only user can elevate... CVE-2022-23858 8.8 HighJanuary 24, 2022
• mozilla nss, nss esr, netapp cloud backup +7 more +9 more NSS (Network Security Services) versions prior to 3.73 or 3.68.1 ESR are vulnerable to a heap... CVE-2021-43527 Fix available EPSS 17.6% 9.8 CriticalDecember 1, 2021
• unicode, fedoraproject fedora, starwindsoftware starwind virtual san +2 more Moderate: gcc-toolset-10-gcc security update CVE-2021-42574 Public exploitFix availableDisputed EPSS 12.9% 8.3 HighNovember 1, 2021
• debian linux, linux kernel, fedoraproject fedora +5 more +7 more The firewire subsystem in the Linux kernel through 5.14.13 has a buffer overflow related to... CVE-2021-42739 Fix available 6.7 MediumOctober 20, 2021
• openbsd openssh, fedoraproject fedora, netapp active iq unified manager +12 more +14 more sshd in OpenSSH 6.2 through 8.x before 8.8, when certain non-default configurations are used,... CVE-2021-41617 Public exploitFix available 7.0 HighSeptember 26, 2021
• mit kerberos 5, debian linux, fedoraproject fedora +5 more +7 more The Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) before 1.18.5 and 1.19.x before 1... CVE-2021-37750 Fix available 6.5 MediumAugust 23, 2021
• linux kernel, netapp h300e firmware, h300s firmware +8 more +10 more An issue was discovered in the Linux kernel before 5.10. drivers/infiniband/core/ucma.c has a use... CVE-2020-36385 Fix available 7.8 HighJune 7, 2021
• debian linux, linux kernel, starwindsoftware starwind virtual san +2 more An issue was discovered in the FUSE filesystem implementation in the Linux kernel before 5.10.6,... CVE-2020-36322 Fix available 5.5 MediumApril 14, 2021
• red hat, inc. rpm, fedoraproject fedora, redhat enterprise linux +1 more +3 more A flaw was found in RPM's signature check functionality when reading a package file. This flaw... CVE-2021-20271 Fix available 7.0 HighMarch 26, 2021
• libsdl simple directmedia layer, debian linux, fedoraproject fedora +1 more +3 more SDL (Simple DirectMedia Layer) through 2.0.12 has an Integer Overflow (and resultant SDL_memcpy... CVE-2020-14409 Fix available 7.8 HighJanuary 19, 2021
• debian linux, linux kernel, starwindsoftware command center +3 more +5 more A flaw memory leak in the Linux kernel performance monitoring subsystem was found in the way if... CVE-2020-25704 Fix available 5.5 MediumNovember 14, 2020
• debian linux, linux kernel, redhat enterprise linux +1 more +3 more A flaw was found in the Linux kernel. A use-after-free was found in the way the console subsystem... CVE-2020-25656 Fix available 4.1 MediumNovember 10, 2020
• debian linux, linux kernel, netapp h410c firmware +3 more +5 more A flaw was found in the HDLC_PPP module of the Linux kernel in versions before 5.9-rc7. Memory... CVE-2020-25643 Fix available 7.2 HighOctober 6, 2020
• google android, debian linux, opensuse leap +1 more +3 more In create_pinctrl of core.c, there is a possible out of bounds read due to a use after free. This... CVE-2020-0427 Fix available 5.5 MediumSeptember 17, 2020
• debian linux, linux kernel, canonical ubuntu linux +1 more +3 more A memory out-of-bounds read flaw was found in the Linux kernel before 5.9-rc2 with the ext3/ext4... CVE-2020-14314 Fix available 5.5 MediumAugust 30, 2020
• linux kernel, canonical ubuntu linux, opensuse leap +2 more +4 more In the Linux kernel before 5.7.8, fs/nfsd/vfs.c (in the NFS server) can set incorrect permissions... CVE-2020-24394 Fix available 7.1 HighAugust 19, 2020
• vim, apple mac os x, canonical ubuntu linux +4 more +6 more In Vim before 8.1.0881, users can circumvent the rvim restricted mode and execute arbitrary OS... CVE-2019-20807 Fix available 5.3 MediumMay 28, 2020
• kyzer libmspack, canonical ubuntu linux, debian linux +5 more +7 more chmd_read_headers in mspack/chmd.c in libmspack before 0.8alpha accepts a filename that has '\0'... CVE-2018-18585 Fix available 4.3 MediumOctober 22, 2018
• cabextract project cabextract, libmspack project libmspack, canonical ubuntu linux +4 more +6 more In mspack/cab.h in libmspack before 0.8alpha and cabextract before 1.8, the CAB block input... CVE-2018-18584 Fix available 6.5 MediumOctober 22, 2018
• tinc-vpn tinc, debian linux, starwindsoftware starwind virtual san +2 more Missing message authentication in the meta-protocol in Tinc VPN version 1.0.34 and earlier allows... CVE-2018-16758 Fix available 5.9 MediumOctober 8, 2018
• tinc-vpn tinc, debian linux, starwindsoftware starwind virtual san +2 more tinc 1.0.30 through 1.0.34 has a broken authentication protocol, although there is a partial... CVE-2018-16738 Fix available 3.7 LowOctober 8, 2018
• tinc-vpn tinc, starwindsoftware starwind virtual san +1 more tinc before 1.0.30 has a broken authentication protocol, without even a partial mitigation. CVE-2018-16737 Fix available 5.3 MediumOctober 8, 2018
• cisco systems, inc. simple directmedia, debian linux, libsdl sdl image +1 more +3 more An exploitable code execution vulnerability exists in the XCF image rendering functionality of... CVE-2018-3839 Fix available 7.5 HighApril 6, 2018
• cisco systems, inc. simple direct media, debian linux, libsdl sdl image +1 more +3 more An exploitable information disclosure vulnerability exists in the PCX image rendering... CVE-2018-3837 Fix available 5.3 MediumApril 6, 2018