Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

storage console node vulnerabilities and exploits

(subscribe to this query)
9.3
CVSSv2
CVE-2018-20836
An issue exists in the Linux kernel prior to 4.20. There is a race condition in smp_task_timedout() and smp_task_done() in drivers/scsi/libsas/sas_expander.c, leading to a use-after-free.
Linux Linux KernelCanonical Ubuntu Linux 16.04Debian Debian Linux 8.0Debian Debian Linux 9.0Debian Debian Linux 10.0F5 Traffix Signaling Delivery Controller 5.1.0F5 Traffix Signaling Delivery Controller 5.0.0Netapp Virtual Storage ConsoleNetapp Active Iq Unified ManagerNetapp Vasa Provider For Clustered Data OntapNetapp Solidfire \\& Hci Management Node -Netapp Snapprotect -Netapp Hci Compute Node -Netapp Solidfire \\& Hci Storage Node -Netapp Storage Replication Adapter For Clustered Data Ontap -Opensuse Leap 15.0Opensuse Leap 15.1
9.3
CVSSv2
CVE-2019-11815
An issue exists in rds_tcp_kill_sock in net/rds/tcp.c in the Linux kernel prior to 5.0.8. There is a race condition leading to a use-after-free, related to net namespace cleanup.
Linux Linux KernelLinux Linux Kernel 5.1Canonical Ubuntu Linux 14.04Canonical Ubuntu Linux 16.04Canonical Ubuntu Linux 18.04Canonical Ubuntu Linux 19.04Debian Debian Linux 8.0Debian Debian Linux 9.0Opensuse Leap 15.0Opensuse Leap 15.1Opensuse Leap 42.3Netapp Active Iq Unified ManagerNetapp Hci Management Node -Netapp Snapprotect -Netapp Solidfire -Netapp Storage Replication Adapter 7.2Netapp Vasa Provider For Clustered Data OntapNetapp Virtual Storage ConsoleNetapp Hci Compute Node -Netapp Hci Storage Node -Netapp Cn1610 Firmware -
6.9
CVSSv2
CVE-2019-11486
The Siemens R3964 line discipline driver in drivers/tty/n_r3964.c in the Linux kernel prior to 5.0.8 has multiple race conditions.
Linux Linux KernelDebian Debian Linux 9.0Opensuse Leap 42.3Opensuse Leap 15.1Netapp Active Iq -Netapp Solidfire -Netapp Hci Management Node -Netapp Snapprotect -Netapp Vasa Provider For Clustered Data Ontap 9.7Netapp Storage Replication Adapter For Clustered Data Ontap 9.7Netapp Virtual Storage Console 9.7
1.9
CVSSv2
CVE-2019-3901
A race condition in perf_event_open() allows local malicious users to leak sensitive data from setuid programs. As no relevant locks (in particular the cred_guard_mutex) are held during the ptrace_may_access() call, it is possible for the specified target task to perform an execv...
Linux Linux KernelDebian Debian Linux 8.0Netapp Vasa Provider For Clustered Data OntapNetapp Solidfire -Netapp Hci Management Node -Netapp Snapprotect -Netapp Active Iq Unified Manager For Vmware VsphereNetapp Virtual Storage Console For Vmware VsphereNetapp Storage Replication Adapter For Clustered Data Ontap For Vmware VsphereNetapp Cn1610 Firmware -
NA
CVE-2022-36946
nfqnl_mangle in net/netfilter/nfnetlink_queue.c in the Linux kernel up to and including 5.18.14 allows remote malicious users to cause a denial of service (panic) because, in the case of an nf_queue verdict with a one-byte nfta_payload attribute, an skb_pull can encounter a negat...
Linux Linux KernelDebian Debian Linux 10.0Debian Debian Linux 11.0Netapp Solidfire \\& Hci Management Node -Netapp Active Iq Unified Manager -Netapp Hci Compute Node -Netapp Solidfire \\& Hci Storage Node -Netapp Solidfire Enterprise Sds -
5
CVSSv2
CVE-2020-11868
ntpd in ntp prior to 4.2.8p14 and 4.3.x prior to 4.3.100 allows an off-path malicious user to block unauthenticated synchronization via a server mode packet with a spoofed source IP address, because transmissions are rescheduled even when a packet lacks a valid origin timestamp.
Ntp Ntp 4.2.8Ntp NtpRedhat Enterprise Linux 7.0Netapp Clustered Data Ontap -Netapp Virtual Storage ConsoleNetapp Data Ontap -Netapp Vasa Provider For Clustered Data OntapNetapp Solidfire -Netapp Hci Management Node -Netapp Hci Storage Node Firmware -Netapp Fabric-attached Storage 8300 Firmware -Netapp Fabric-attached Storage 8700 Firmware -Netapp Fabric-attached Storage A400 Firmware -Netapp All Flash Fabric-attached Storage 8300 Firmware -Netapp All Flash Fabric-attached Storage 8700 Firmware -Netapp All Flash Fabric-attached Storage A400 Firmware -Debian Debian Linux 8.0Opensuse Leap 15.1Opensuse Leap 15.2
6.8
CVSSv2
CVE-2019-3900
An infinite loop issue was found in the vhost_net kernel module in Linux Kernel up to and including v5.1-rc6, while handling incoming packets in handle_rx(). It could occur if one end sends packets faster than the other end can process them. A guest user, maybe remote one, could ...
Linux Linux Kernel 5.1Linux Linux KernelFedoraproject Fedora 29Fedoraproject Fedora 30Redhat Enterprise Linux 7.0Redhat Enterprise Linux 6.0Debian Debian Linux 8.0Debian Debian Linux 9.0Debian Debian Linux 10.0Canonical Ubuntu Linux 16.04Canonical Ubuntu Linux 18.04Canonical Ubuntu Linux 19.04Netapp Vasa Provider For Clustered Data OntapNetapp Solidfire -Netapp Hci Management Node -Netapp Snapprotect -Netapp Active Iq Unified Manager For Vmware VsphereNetapp Virtual Storage Console For Vmware VsphereNetapp Storage Replication Adapter For Clustered Data Ontap For Vmware VsphereNetapp Cn1610 Firmware -Oracle Sd-wan Edge 8.2
5
CVSSv2
CVE-2020-25645
A flaw was found in the Linux kernel in versions prior to 5.9-rc7. Traffic between two Geneve endpoints may be unencrypted when IPsec is configured to encrypt traffic for the specific UDP port used by the GENEVE tunnel allowing anyone between the two endpoints to read the traffic...
Linux Linux KernelLinux Linux Kernel 5.9.0Debian Debian Linux 9.0Debian Debian Linux 10.0Netapp Solidfire \\& Hci Management Node -Netapp Solidfire \\& Hci Storage Node -Opensuse Leap 15.1Opensuse Leap 15.2Netapp Hci Compute Node Bios -Canonical Ubuntu Linux 14.04Canonical Ubuntu Linux 16.04Canonical Ubuntu Linux 18.04Canonical Ubuntu Linux 20.04
4.9
CVSSv2
CVE-2019-3882
A flaw was found in the Linux kernel's vfio interface implementation that permits violation of the user's locked memory limit. If a device is bound to a vfio driver, such as vfio-pci, and the local attacker is administratively granted ownership of the device, it may cau...
Linux Linux Kernel 3.10Linux Linux Kernel 4.14Linux Linux Kernel 4.18Fedoraproject FedoraDebian Debian Linux 8.0Debian Debian Linux 9.0Debian Debian Linux 10.0Canonical Ubuntu Linux 16.04Canonical Ubuntu Linux 18.04Canonical Ubuntu Linux 18.10Canonical Ubuntu Linux 19.04Canonical Ubuntu Linux 14.04Opensuse Leap 42.3Opensuse Leap 15.0Opensuse Leap 15.1Netapp Vasa Provider For Clustered Data OntapNetapp Solidfire -Netapp Hci Management Node -Netapp Snapprotect -Netapp Active Iq Unified Manager For Vmware VsphereNetapp Virtual Storage Console For Vmware VsphereNetapp Storage Replication Adapter For Clustered Data Ontap For Vmware Vsphere
7.5
CVSSv2
CVE-2016-9841
inffast.c in zlib 1.2.8 might allow context-dependent malicious users to have unspecified impact by leveraging improper pointer arithmetic.
Zlib ZlibOpensuse Leap 42.2Opensuse Leap 42.1Opensuse Opensuse 13.2Debian Debian Linux 8.0Canonical Ubuntu Linux 18.04Canonical Ubuntu Linux 16.04Oracle MysqlOracle Database Server 18cOracle Jdk 1.8.0Oracle Jdk 1.7.0Oracle Jdk 1.6.0Oracle Jre 1.6.0Oracle Jre 1.8.0Oracle Jre 1.7.0Redhat Enterprise Linux Desktop 7.0Redhat Enterprise Linux Workstation 7.0Redhat Enterprise Linux Server 7.0Redhat Enterprise Linux Desktop 6.0Redhat Enterprise Linux Server 6.0Redhat Enterprise Linux Workstation 6.0Redhat Enterprise Linux Eus 7.4
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-4040privilege escalationCVE-2024-4112CVE-2024-32872man-in-the-middleCVE-2024-32788bypassCVE-2024-3400CVE-2024-28976
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook