Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

netapp hci baseboard management controller h610s vulnerabilities and exploits

(subscribe to this query)
6.8
CVSSv2
CVE-2021-46143
In doProlog in xmlparse.c in Expat (aka libexpat) prior to 2.4.3, an integer overflow exists for m_groupSize.
Libexpat Project LibexpatNetapp Oncommand Workflow Automation -Netapp Clustered Data Ontap -Netapp Solidfire \\& Hci Management Node -Netapp Active Iq Unified Manager -Netapp Hci Baseboard Management Controller H610cNetapp Hci Baseboard Management Controller H610sNetapp Hci Baseboard Management Controller H615cTenable NessusSiemens Sinema Remote Connect Server
9
CVSSv2
CVE-2021-45960
In Expat (aka libexpat) prior to 2.4.3, a left shift by 29 (or more) places in the storeAtts function in xmlparse.c can lead to realloc misbehavior (e.g., allocating too few bytes, or only freeing memory).
Libexpat Project LibexpatTenable NessusDebian Debian Linux 10.0Debian Debian Linux 11.0Siemens Sinema Remote Connect ServerNetapp Oncommand Workflow Automation -Netapp Solidfire \\& Hci Management Node -Netapp Active Iq Unified Manager -Netapp Hci Baseboard Management Controller H610cNetapp Hci Baseboard Management Controller H610sNetapp Hci Baseboard Management Controller H615c
7.2
CVSSv2
CVE-2020-12659
An issue exists in the Linux kernel prior to 5.6.7. xdp_umem_reg in net/xdp/xdp_umem.c has an out-of-bounds write (by a user with the CAP_NET_ADMIN capability) because of a lack of headroom validation.
Linux Linux KernelNetapp Cloud Backup -Netapp Steelstore Cloud Integrated Storage -Netapp Solidfire \\& Hci Management Node -Netapp Active Iq Unified Manager -Netapp Solidfire Baseboard Management Controller -Netapp Hci Baseboard Management Controller H300sNetapp Hci Baseboard Management Controller H500sNetapp Hci Baseboard Management Controller H700sNetapp Hci Baseboard Management Controller H410sNetapp Hci Baseboard Management Controller H410cNetapp Hci Baseboard Management Controller H610cNetapp Hci Baseboard Management Controller H610sNetapp Hci Baseboard Management Controller H615cNetapp Aff Baseboard Management Controller A700s
7.2
CVSSv2
CVE-2020-12465
An array overflow exists in mt76_add_fragment in drivers/net/wireless/mediatek/mt76/dma.c in the Linux kernel prior to 5.5.10, aka CID-b102f0c522cf. An oversized packet with too many rx fragments can corrupt memory of adjacent pages.
Linux Linux KernelNetapp Cloud Backup -Netapp Steelstore Cloud Integrated Storage -Netapp Solidfire \\& Hci Management Node -Netapp Active Iq Unified Manager -Netapp Hci Compute Node -Netapp Solidfire Baseboard Management Controller -Netapp Hci Baseboard Management Controller H300sNetapp Hci Baseboard Management Controller H500sNetapp Hci Baseboard Management Controller H700sNetapp Hci Baseboard Management Controller H410sNetapp Hci Baseboard Management Controller H410cNetapp Hci Baseboard Management Controller H610cNetapp Hci Baseboard Management Controller H610sNetapp Hci Baseboard Management Controller H615cNetapp Aff Baseboard Management Controller A700s
7.2
CVSSv2
CVE-2020-12464
usb_sg_cancel in drivers/usb/core/message.c in the Linux kernel prior to 5.6.8 has a use-after-free because a transfer occurs without a reference, aka CID-056ad39ee925.
Linux Linux KernelNetapp Cloud Backup -Netapp Steelstore Cloud Integrated Storage -Netapp Hci Storage Nodes -Netapp Aff A700s -Netapp Active Iq Unified Manager -Netapp Hci Compute Node -Netapp Solidfire \\& Hci Storage Node -Netapp Solidfire Baseboard Management Controller -Netapp Hci Baseboard Management Controller H300sNetapp Hci Baseboard Management Controller H500sNetapp Hci Baseboard Management Controller H700sNetapp Hci Baseboard Management Controller H410sNetapp Hci Baseboard Management Controller H410cNetapp Hci Baseboard Management Controller H610cNetapp Hci Baseboard Management Controller H610sNetapp Hci Baseboard Management Controller H615c
2.1
CVSSv2
CVE-2019-19966
In the Linux kernel prior to 5.1.6, there is a use-after-free in cpia2_exit() in drivers/media/usb/cpia2/cpia2_v4l.c that will cause denial of service, aka CID-dea37a972655.
Linux Linux KernelDebian Debian Linux 8.0Opensuse Leap 15.1Netapp Cloud Backup -Netapp Steelstore Cloud Integrated Storage -Netapp Data Availability Services -Netapp Solidfire \\& Hci Management Node -Netapp Active Iq Unified Manager -Netapp Solidfire Baseboard Management Controller -Netapp Fas\\/aff Baseboard Management Controller -Netapp E-series Santricity Os ControllerNetapp Hci Baseboard Management Controller H610sNetapp Aff Baseboard Management Controller A700s
2.1
CVSSv2
CVE-2019-19947
In the Linux kernel up to and including 5.4.6, there are information leaks of uninitialized memory to a USB device in the drivers/net/can/usb/kvaser_usb/kvaser_usb_leaf.c driver, aka CID-da2311a6385c.
Linux Linux KernelDebian Debian Linux 8.0Canonical Ubuntu Linux 18.04Canonical Ubuntu Linux 14.04Canonical Ubuntu Linux 19.10Canonical Ubuntu Linux 16.04Netapp Cloud Backup -Netapp Steelstore Cloud Integrated Storage -Netapp Data Availability Services -Netapp Solidfire \\& Hci Management Node -Netapp Active Iq Unified Manager -Netapp Solidfire Baseboard Management Controller -Netapp Fas\\/aff Baseboard Management Controller -Netapp E-series Santricity Os ControllerNetapp Hci Baseboard Management Controller H610sNetapp Aff Baseboard Management Controller A700s
2.1
CVSSv2
CVE-2019-19922
kernel/sched/fair.c in the Linux kernel prior to 5.3.9, when cpu.cfs_quota_us is used (e.g., with Kubernetes), allows malicious users to cause a denial of service against non-cpu-bound applications by generating a workload that triggers unwanted slice expiration, aka CID-de53fd7a...
Linux Linux KernelDebian Debian Linux 8.0Canonical Ubuntu Linux 18.04Canonical Ubuntu Linux 19.04Oracle Sd-wan Edge 8.2Netapp Cloud Backup -Netapp Steelstore Cloud Integrated Storage -Netapp Data Availability Services -Netapp Solidfire \\& Hci Management Node -Netapp Active Iq Unified Manager -Netapp Solidfire Baseboard Management Controller -Netapp Fas\\/aff Baseboard Management Controller -Netapp E-series Santricity Os ControllerNetapp Hci Baseboard Management Controller H610sNetapp Aff Baseboard Management Controller A700
6.8
CVSSv2
CVE-2019-19447
In the Linux kernel 5.0.21, mounting a crafted ext4 filesystem image, performing some operations, and unmounting can lead to a use-after-free in ext4_put_super in fs/ext4/super.c, related to dump_orphan_list in fs/ext4/super.c.
Linux Linux KernelNetapp Cloud Backup -Netapp Steelstore Cloud Integrated Storage -Netapp Data Availability Services -Netapp Active Iq Unified Manager -Netapp Solidfire Baseboard Management Controller -Netapp Hci Baseboard Management Controller H610s
7.8
CVSSv2
CVE-2019-19052
A memory leak in the gs_can_open() function in drivers/net/can/usb/gs_usb.c in the Linux kernel prior to 5.3.11 allows malicious users to cause a denial of service (memory consumption) by triggering usb_submit_urb() failures, aka CID-fb5be6a7b486.
Linux Linux KernelDebian Debian Linux 8.0Canonical Ubuntu Linux 18.04Canonical Ubuntu Linux 19.04Canonical Ubuntu Linux 14.04Opensuse Leap 15.1Canonical Ubuntu Linux 19.10Oracle Sd-wan Edge 8.2Canonical Ubuntu Linux 16.04Netapp Cloud Backup -Netapp Steelstore Cloud Integrated Storage -Netapp Aff Baseboard Management Controller -Netapp Data Availability Services -Netapp Solidfire \\& Hci Management Node -Netapp Active Iq Unified Manager -Netapp Solidfire\\, Enterprise Sds \\& Hci Storage Node -Broadcom Brocade Fabric Operating System Firmware -Netapp Fas\\/aff Baseboard Management Controller -Netapp E-series Santricity Os Controller 11.0Netapp E-series Santricity Os Controller 11.0.0Netapp E-series Santricity Os Controller 11.20Netapp E-series Santricity Os Controller 11.25
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
blind SQL injectionCVE-2006-4304CVE-2023-26603CVE-2024-28327CVE-2023-50363CVE-2024-21905template injectionCVE-2024-3400cross-site request forgery
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook