netapp hci storage node firmware - vulnerabilities and exploits

(subscribe to this query)

8.1

CVSSv3

curl 7.75.0 up to and including 7.76.1 suffers from a use-after-free vulnerability resulting in already freed memory being used when a TLS 1.3 session ticket arrives over a connection. A malicious server can use this in rare unfortunate circumstances to potentially reach remote c...

Haxx Curl Oracle Mysql Server Oracle Essbase Oracle Communications Cloud Native Core Network Slice Selection Function 1.8.0 Oracle Communications Cloud Native Core Network Repository Function 1.15.0 Oracle Communications Cloud Native Core Network Function Cloud Native Environment 1.10.0 Oracle Communications Cloud Native Core Service Communication Proxy 1.15.0 Oracle Communications Cloud Native Core Network Repository Function 1.15.1 Oracle Communications Cloud Native Core Binding Support Function 1.11.0 Netapp Cloud Backup -Netapp Snapcenter -Netapp Oncommand Workflow Automation -Netapp Oncommand Insight -Netapp Solidfire \\& Hci Management Node -Netapp Active Iq Unified Manager -Netapp Solidfire Baseboard Management Controller Firmware -Netapp Solidfire\\, Enterprise Sds \\& Hci Storage Node -Netapp Hci Compute Node Firmware -Netapp H300e Firmware -Netapp H300s Firmware -Netapp H410s Firmware -Netapp H500e Firmware -

7.8

CVSSv3

The Linux kernel prior to 5.17.2 mishandles seccomp permissions. The PTRACE_SEIZE code path allows malicious users to bypass intended restrictions on setting the PT_SUSPEND_SECCOMP flag.

Linux Linux Kernel Debian Debian Linux 9.0 Debian Debian Linux 10.0 Netapp Solidfire \\& Hci Management Node -Netapp Hci Compute Node -Netapp Solidfire\\, Enterprise Sds \\& Hci Storage Node -Netapp 8300 Firmware -Netapp 8700 Firmware -Netapp A400 Firmware -Netapp H300s Firmware -Netapp H500s Firmware -Netapp H700s Firmware -Netapp H410s Firmware -Netapp H410c Firmware -

7.8

CVSSv3

Out of bounds read in the firmware for some Intel(R) Processors may allow an authenticated user to potentially enable escalation of privilege via local access.

Intel Bios -Netapp Cloud Backup -Netapp Aff Bios -Netapp E-series Bios -Netapp Fas Bios -Netapp Hci Compute Node Bios -Netapp Hci Storage Node Bios -Netapp Solidfire Bios -Siemens Simatic Ipc547g Firmware Siemens Simatic Cpu 1518-4 Firmware Siemens Simatic Cpu 1518f-4 Firmware

7.8

CVSSv3

Use of potentially dangerous function in Intel BIOS platform sample code for some Intel(R) Processors may allow an authenticated user to potentially enable escalation of privilege via local access.

Intel Bios -Netapp Aff Bios -Netapp Fas Bios -Netapp Hci Compute Node Bios -Netapp Hci Storage Node Bios -Netapp Solidfire Bios -

7.8

CVSSv3

An issue was found in Linux kernel prior to 5.5.4. The mwifiex_cmd_append_vsie_tlv() function in drivers/net/wireless/marvell/mwifiex/scan.c allows local users to gain privileges or cause a denial of service because of an incorrect memcpy and buffer overflow, aka CID-b70261a288ea...

7.5

CVSSv3

In the IPv6 implementation in the Linux kernel prior to 5.13.3, net/ipv6/output_core.c has an information leak because of certain use of a hash table which, although big, doesn't properly consider that IPv6-based attackers can typically choose among many IPv6 source addresse...

Linux Linux Kernel Netapp E-series Santricity Os Controller -Netapp Solidfire \\& Hci Management Node -Netapp Brocade Fabric Operating System Firmware -Netapp Solidfire\\, Enterprise Sds \\& Hci Storage Node -Oracle Communications Cloud Native Core Binding Support Function 22.1.3 Oracle Communications Cloud Native Core Policy 22.2.0 Oracle Communications Cloud Native Core Network Exposure Function 22.1.1 Netapp All Flash Fabric-attached Storage 8300 Firmware -Netapp Fabric-attached Storage 8300 Firmware -Netapp All Flash Fabric-attached Storage 8700 Firmware -Netapp Fabric-attached Storage 8700 Firmware -Netapp Aff A400 Firmware -Netapp Fabric-attached Storage A400 Firmware -Netapp Hci Compute Node Firmware -Netapp H300e Firmware -Netapp H300s Firmware -Netapp H410c Firmware -Netapp H410s Firmware -Netapp H500e Firmware -Netapp H500s Firmware -Netapp H610c Firmware -

7.5

CVSSv3

Two memory leaks in the v3d_submit_cl_ioctl() function in drivers/gpu/drm/v3d/v3d_gem.c in the Linux kernel prior to 5.3.11 allow malicious users to cause a denial of service (memory consumption) by triggering kcalloc() or v3d_job_init() failures, aka CID-29cd13cfd762.

Linux Linux Kernel Netapp Cloud Backup -Netapp Steelstore Cloud Integrated Storage -Netapp Aff Baseboard Management Controller -Netapp Data Availability Services -Netapp Solidfire \\& Hci Management Node -Netapp Active Iq Unified Manager -Netapp Solidfire\\, Enterprise Sds \\& Hci Storage Node -Broadcom Brocade Fabric Operating System Firmware -Netapp Fas\\/aff Baseboard Management Controller -Netapp E-series Santricity Os Controller 11.0 Netapp E-series Santricity Os Controller 11.0.0 Netapp E-series Santricity Os Controller 11.20 Netapp E-series Santricity Os Controller 11.25 Netapp E-series Santricity Os Controller 11.30 Netapp E-series Santricity Os Controller 11.30.5r3 Netapp E-series Santricity Os Controller 11.40 Netapp E-series Santricity Os Controller 11.40.3r2 Netapp E-series Santricity Os Controller 11.40.5 Netapp E-series Santricity Os Controller 11.50.1 Netapp E-series Santricity Os Controller 11.50.2 Netapp E-series Santricity Os Controller 11.60

7.5

CVSSv3

A memory leak in the gs_can_open() function in drivers/net/can/usb/gs_usb.c in the Linux kernel prior to 5.3.11 allows malicious users to cause a denial of service (memory consumption) by triggering usb_submit_urb() failures, aka CID-fb5be6a7b486.

7.5

CVSSv3

A memory leak in the rpmsg_eptdev_write_iter() function in drivers/rpmsg/rpmsg_char.c in the Linux kernel up to and including 5.3.11 allows malicious users to cause a denial of service (memory consumption) by triggering copy_from_iter_full() failures, aka CID-bbe692e349e2.

Linux Linux Kernel Canonical Ubuntu Linux 18.04 Canonical Ubuntu Linux 19.10 Netapp Cloud Backup -Netapp Steelstore Cloud Integrated Storage -Netapp Aff Baseboard Management Controller -Netapp Data Availability Services -Netapp Solidfire \\& Hci Management Node -Netapp Active Iq Unified Manager -Netapp Solidfire\\, Enterprise Sds \\& Hci Storage Node -Broadcom Brocade Fabric Operating System Firmware -Netapp Fas\\/aff Baseboard Management Controller -Netapp E-series Santricity Os Controller 11.0 Netapp E-series Santricity Os Controller 11.0.0 Netapp E-series Santricity Os Controller 11.20 Netapp E-series Santricity Os Controller 11.25 Netapp E-series Santricity Os Controller 11.30 Netapp E-series Santricity Os Controller 11.30.5r3 Netapp E-series Santricity Os Controller 11.40 Netapp E-series Santricity Os Controller 11.40.3r2 Netapp E-series Santricity Os Controller 11.40.5 Netapp E-series Santricity Os Controller 11.50.1

7.5

CVSSv3

A memory leak in the adis_update_scan_mode() function in drivers/iio/imu/adis_buffer.c in the Linux kernel prior to 5.3.9 allows malicious users to cause a denial of service (memory consumption), aka CID-ab612b1daf41.

Linux Linux Kernel Netapp Cloud Backup -Netapp Steelstore Cloud Integrated Storage -Netapp Aff Baseboard Management Controller -Netapp Data Availability Services -Netapp Solidfire \\& Hci Management Node -Netapp Active Iq Unified Manager -Netapp Solidfire\\, Enterprise Sds \\& Hci Storage Node -Broadcom Brocade Fabric Operating System Firmware -Netapp Fas\\/aff Baseboard Management Controller -Netapp E-series Santricity Os Controller 11.0 Netapp E-series Santricity Os Controller 11.0.0 Netapp E-series Santricity Os Controller 11.20 Netapp E-series Santricity Os Controller 11.25 Netapp E-series Santricity Os Controller 11.30 Netapp E-series Santricity Os Controller 11.30.5r3 Netapp E-series Santricity Os Controller 11.40 Netapp E-series Santricity Os Controller 11.40.3r2 Netapp E-series Santricity Os Controller 11.40.5 Netapp E-series Santricity Os Controller 11.50.1 Netapp E-series Santricity Os Controller 11.50.2 Netapp E-series Santricity Os Controller 11.60

Get Started

1 2 3 4 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook