netapp solidfire - vulnerabilities and exploits

(subscribe to this query)

9.8

CVSSv3

A use-after-free vulnerability was found in drivers/nvme/target/tcp.c` in `nvmet_tcp_free_crypto` due to a logical bug in the NVMe/TCP subsystem in the Linux kernel. This issue may allow a malicious user to cause a use-after-free and double-free problem, which may permit remote c...

Linux Linux Kernel 6.6 Linux Linux Kernel Redhat Enterprise Linux 8.0 Redhat Enterprise Linux 9.0 Netapp Solidfire \\& Hci Management Node -Netapp Active Iq Unified Manager -Netapp Solidfire \\& Hci Storage Node -

1 Github repository

9.8

CVSSv3

ssh-add in OpenSSH prior to 9.3 adds smartcard keys to ssh-agent without the intended per-hop destination constraints. The earliest affected version is 8.9.

Openbsd Openssh Netapp Solidfire Element Os -Netapp Hci Bootstrap Os -Netapp Brocade Fabric Operating System -

3 Github repositories

9.8

CVSSv3

When curl < 7.84.0 saves cookies, alt-svc and hsts data to local files, it makes the operation atomic by finalizing the operation with a rename from a temporary name to the final target file name.In that rename operation, it might accidentally *widen* the permissions for the t...

Haxx Curl Fedoraproject Fedora 35 Debian Debian Linux 11.0 Netapp Element Software -Netapp Clustered Data Ontap -Netapp Solidfire -Netapp Hci Management Node -Netapp Bootstrap Os -Netapp H300s Firmware -Netapp H500s Firmware -Netapp H700s Firmware -Netapp H410s Firmware -Apple Macos Splunk Universal Forwarder 9.1.0 Splunk Universal Forwarder

9.8

CVSSv3

In addition to the c_rehash shell command injection identified in CVE-2022-1292, further circumstances where the c_rehash script does not properly sanitise shell metacharacters to prevent command injection were found by code review. When the CVE-2022-1292 was fixed it was not dis...

1 Github repository1 Article

9.8

CVSSv3

The c_rehash script does not properly sanitise shell metacharacters to prevent command injection. This script is distributed by some operating systems in a manner where it is automatically executed. On such operating systems, an attacker could execute arbitrary commands with the ...

7 Github repositories1 Article

9.8

CVSSv3

An attacker-controlled pointer free in Busybox's hush applet leads to denial of service and possible code execution when processing a crafted shell command, due to the shell mishandling the &&& string. This may be used for remote code execution under rare conditi...

Busybox Busybox 1.33.1 Busybox Busybox 1.33.0 Fedoraproject Fedora 33 Fedoraproject Fedora 34 Netapp Cloud Backup -Netapp Solidfire -Netapp Hci Management Node -Netapp H300s Firmware -Netapp H500s Firmware -Netapp H700s Firmware -Netapp H300e Firmware -Netapp H500e Firmware -Netapp H700e Firmware -Netapp H410s Firmware -

9.8

CVSSv3

In order to decrypt SM2 encrypted data an application is expected to call the API function EVP_PKEY_decrypt(). Typically an application will call this function twice. The first time, on entry, the "out" parameter can be NULL and, on exit, the "outlen" paramete...

1 Github repository1 Article

9.8

CVSSv3

The mq_notify function in the GNU C Library (aka glibc) versions 2.32 and 2.33 has a use-after-free. It may use the notification thread attributes object (passed through its struct sigevent parameter) after it has been freed by the caller, leading to a denial of service (applicat...

Gnu Glibc 2.33 Gnu Glibc 2.32 Fedoraproject Fedora 33 Fedoraproject Fedora 34 Netapp Cloud Backup -Netapp E-series Santricity Os Controller Netapp Solidfire Baseboard Management Controller Firmware -Netapp H300s Firmware -Netapp H500s Firmware -Netapp H700s Firmware -Netapp H300e Firmware -Netapp H500e Firmware -Netapp H700e Firmware -Netapp H410s Firmware -Debian Debian Linux 10.0

3 Github repositories

9.8

CVSSv3

Element Plug-in for vCenter Server incorporates SpringBoot Framework. SpringBoot Framework versions before 1.3.2 are susceptible to a vulnerability which when successfully exploited could lead to Remote Code Execution. All versions of Element Plug-in for vCenter Server, Managemen...

Vmware Spring Boot Netapp Element Plug-in For Vcenter Server Netapp Management Services For Element Software And Netapp Hci Netapp Solidfire \\& Hci Management Node

9.8

CVSSv3

Element OS versions before 1.8P1 and 12.2 are susceptible to a vulnerability that could allow an unauthenticated remote malicious user to perform arbitrary code execution.

Netapp Hci Management Node -Netapp Solidfire -Netapp Hci Storage Node -Netapp Element Os Netapp Element Os 1.8

Get Started

1 2 3 4 5 6 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook