A700s Firmware (Netapp) - vulnerabilities (CVEs)

32 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2024-07-01. Vendor: Netapp.

CVEs of A700s Firmware

CVE-2024-6387 - CVSS 8.1 (high), 2024-07-01: A security regression (CVE-2006-5051) was discovered in OpenSSH's server (sshd). There is a race condition which can lead sshd to handle some signals in an…
CVE-2024-26733 - CVSS 5.5 (medium), 2024-04-03: In the Linux kernel, the following vulnerability has been resolved: arp: Prevent overflow in arp_req_get(). syzkaller reported an overflown write in…
CVE-2023-1077 - CVSS 7 (high), 2023-03-27: In the Linux kernel, pick_next_rt_entity() may return a type confused entry, not detected by the BUG_ON condition, as the confused entry will not be NULL, but…
CVE-2022-36879 - CVSS 5.5 (medium), 2022-07-27: An issue was discovered in the Linux kernel through 5.18.14. xfrm_expand_policies in net/xfrm/xfrm_policy.c can cause a refcount to be dropped twice.
CVE-2022-1292 - CVSS 9.8 (critical), 2022-05-03: The c_rehash script does not properly sanitise shell metacharacters to prevent command injection. This script is distributed by some operating systems in a…
CVE-2022-1473 - CVSS 7.5 (high), 2022-05-03: The OPENSSL_LH_flush() function, which empties a hash table, contains a bug that breaks reuse of the memory occuppied by the removed hash table entries. This…
CVE-2022-1434 - CVSS 5.9 (medium), 2022-05-03: The OpenSSL 3.0 implementation of the RC4-MD5 ciphersuite incorrectly uses the AAD data as the MAC key. This makes the MAC key trivially predictable. An…
CVE-2022-1343 - CVSS 5.3 (medium), 2022-05-03: The function `OCSP_basic_verify` verifies the signer certificate on an OCSP response. In the case where the (non-default) flag OCSP_NOCHECKS is used then the…
CVE-2021-4203 - CVSS 6.8 (medium), 2022-03-25: A use-after-free read flaw was found in sock_getsockopt() in net/core/sock.c due to SO_PEERCRED and SO_PEERGROUPS race with listen() (and connect()) in the…
CVE-2020-35508 - CVSS 4.5 (medium), 2021-03-26: A flaw possibility of race condition and incorrect initialization of the process id was found in the Linux kernel child/parent process identification handling…
CVE-2020-29661 - CVSS 7.8 (high), 2020-12-09: A locking issue was discovered in the tty subsystem of the Linux kernel through 5.9.13. drivers/tty/tty_jobctrl.c allows a use-after-free attack against…
CVE-2020-29660 - CVSS 4.4 (medium), 2020-12-09: A locking inconsistency issue was discovered in the tty subsystem of the Linux kernel through 5.9.13. drivers/tty/tty_io.c and drivers/tty/tty_jobctrl.c may…
CVE-2020-15436 - CVSS 6.7 (medium), 2020-11-23: Use-after-free vulnerability in fs/block_dev.c in the Linux kernel before 5.8 allows local users to gain privileges or cause a denial of service by leveraging…
CVE-2020-15778 - CVSS 7.8 (high), 2020-07-24: scp in OpenSSH through 8.3p1 allows command injection in the scp.c toremote function, as demonstrated by backtick characters in the destination argument.…
CVE-2020-13143 - CVSS 6.5 (medium), 2020-05-18: gadget_dev_desc_UDC_store in drivers/usb/gadget/configfs.c in the Linux kernel 3.16 through 5.6.13 relies on kstrdup without considering the possibility of an…
CVE-2020-12888 - CVSS 5.3 (medium), 2020-05-15: The VFIO PCI driver in the Linux kernel through 5.6.13 mishandles attempts to access disabled memory space.
CVE-2020-12771 - CVSS 5.5 (medium), 2020-05-09: An issue was discovered in the Linux kernel through 5.6.11. btree_gc_coalesce in drivers/md/bcache/btree.c has a deadlock if a coalescing operation fails.
CVE-2020-12770 - CVSS 6.7 (medium), 2020-05-09: An issue was discovered in the Linux kernel through 5.6.11. sg_write lacks an sg_remove_request call in a certain failure case, aka CID-83c6f2390040.
CVE-2020-12769 - CVSS 5.5 (medium), 2020-05-09: An issue was discovered in the Linux kernel before 5.4.17. drivers/spi/spi-dw.c allows attackers to cause a panic via concurrent calls to dw_spi_irq and…
CVE-2020-12653 - CVSS 7.8 (high), 2020-05-05: An issue was found in Linux kernel before 5.5.4. The mwifiex_cmd_append_vsie_tlv() function in drivers/net/wireless/marvell/mwifiex/scan.c allows local users…
CVE-2020-11884 - CVSS 7 (high), 2020-04-29: In the Linux kernel 4.19 through 5.6.7 on the s390 platform, code execution may occur because of a race condition, as demonstrated by code in…
CVE-2020-8835 - CVSS 7.8 (high), 2020-04-02: In the Linux kernel 5.5.0 and newer, the bpf verifier (kernel/bpf/verifier.c) did not properly restrict the register bounds for 32-bit operations, leading to…
CVE-2019-18282 - CVSS 5.3 (medium), 2020-01-16: The flow_dissector feature in the Linux kernel 4.3 through 5.x before 5.3.10 has a device tracking vulnerability, aka CID-55667441c84f. This occurs because…
CVE-2019-20095 - CVSS 5.5 (medium), 2019-12-30: mwifiex_tm_cmd in drivers/net/wireless/marvell/mwifiex/cfg80211.c in the Linux kernel before 5.1.6 has some error-handling cases that did not free allocated…
CVE-2019-19965 - CVSS 4.7 (medium), 2019-12-25: In the Linux kernel through 5.4.6, there is a NULL pointer dereference in drivers/scsi/libsas/sas_discover.c because of mishandling of port disconnection…
CVE-2019-5108 - CVSS 7.4 (high), 2019-12-23: An exploitable denial-of-service vulnerability exists in the Linux kernel prior to mainline 5.3. An attacker could exploit this vulnerability by triggering AP…
CVE-2019-19448 - CVSS 7.8 (high), 2019-12-08: In the Linux kernel 5.0.21 and 5.3.11, mounting a crafted btrfs filesystem image, performing some operations, and then making a syncfs system call can lead to…
CVE-2019-18683 - CVSS 7 (high), 2019-11-04: An issue was discovered in drivers/media/platform/vivid in the Linux kernel through 5.3.8. It is exploitable for privilege escalation on some Linux…
CVE-2019-14814 - CVSS 7.8 (high), 2019-09-20: There is heap-based buffer overflow in Linux kernel, all versions up to, excluding 5.3, in the marvell wifi chip driver in Linux kernel, that allows local…
CVE-2019-14816 - CVSS 7.8 (high), 2019-09-20: There is heap-based buffer overflow in kernel, all versions up to, excluding 5.3, in the marvell wifi chip driver in Linux kernel, that allows local users to…
CVE-2019-10126 - CVSS 9.8 (critical), 2019-06-14: A flaw was found in the Linux kernel. A heap based buffer overflow in mwifiex_uap_parse_tail_ies function in drivers/net/wireless/marvell/mwifiex/ie.c might…
CVE-2019-3846 - CVSS 8.8 (high), 2019-06-03: A flaw that allowed an attacker to corrupt memory and possibly escalate privileges was found in the mwifiex kernel module while connecting to a malicious…