netapp fas a400 - vulnerabilities and exploits

(subscribe to this query)

In addition to the c_rehash shell command injection identified in CVE-2022-1292, further circumstances where the c_rehash script does not properly sanitise shell metacharacters to prevent command injection were found by code review. When the CVE-2022-1292 was fixed it was not dis...

1 Github repository1 Article

The c_rehash script does not properly sanitise shell metacharacters to prevent command injection. This script is distributed by some operating systems in a manner where it is automatically executed. On such operating systems, an attacker could execute arbitrary commands with the ...

7 Github repositories1 Article

A heap out-of-bounds write affecting Linux since v2.6.19-rc1 exists in net/netfilter/x_tables.c. This allows an malicious user to gain privileges or cause a DoS (via heap memory corruption) through user name space

Linux Linux Kernel Brocade Fabric Operating System -Netapp Fas 8300 Firmware -Netapp Fas 8700 Firmware -Netapp Aff A400 Firmware -Netapp Aff A250 Firmware -Netapp Aff 500f Firmware -Netapp H610c Firmware -Netapp H610s Firmware -Netapp H615c Firmware -Netapp Solidfire -Netapp Hci Management Node -

18 Github repositories

NetApp FAS 8300/8700 and AFF A400 Baseboard Management Controller (BMC) firmware versions 13.x before 13.1P1 were shipped with a default account enabled that could allow unauthorized arbitrary command execution via local access.

Netapp Fabric-attached Storage 8700 Firmware Netapp Fabric-attached Storage 8300 Firmware Netapp All Flash Fabric-attached Storage A400 Firmware

In the Linux kernel 5.0.21 and 5.3.11, mounting a crafted btrfs filesystem image, performing some operations, and then making a syncfs system call can lead to a use-after-free in try_merge_free_space in fs/btrfs/free-space-cache.c because the pointer to a left data structure can ...

The OPENSSL_LH_flush() function, which empties a hash table, contains a bug that breaks reuse of the memory occuppied by the removed hash table entries. This function is used when decoding certificates or keys. If a long lived process periodically decodes certificates or keys its...

Memory leak in icmp6 implementation in Linux Kernel 5.13+ allows a remote malicious user to DoS a host by making it go out-of-memory via icmp6 packets of type 130 or 131. We recommend upgrading past commit 2d3916f3189172d5c69d33065c3c21119fe539fc.

Linux Linux Kernel 5.17 Linux Linux Kernel Netapp A400 Firmware -Netapp Aff 8300 Firmware -Netapp Aff 8700 Firmware -Netapp Fas 8300 Firmware -Netapp Fas 8700 Firmware -Netapp H300e Firmware -Netapp H300s Firmware -Netapp H410c Firmware -Netapp H410s Firmware -Netapp H500e Firmware -Netapp H500s Firmware -Netapp H700e Firmware -Netapp H700s Firmware -

1 2 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook