Fabric-attached Storage A400 Firmware (Netapp) - vulnerabilities (CVEs)

8 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2022-05-03. Vendor: Netapp.

CVEs of Fabric-attached Storage A400 Firmware

• CVE-2022-1343 - CVSS 5.3 (medium), 2022-05-03: The function `OCSP_basic_verify` verifies the signer certificate on an OCSP response. In the case where the (non-default) flag OCSP_NOCHECKS is used then the…
• CVE-2022-1292 - CVSS 9.8 (critical), 2022-05-03: The c_rehash script does not properly sanitise shell metacharacters to prevent command injection. This script is distributed by some operating systems in a…
• CVE-2022-1473 - CVSS 7.5 (high), 2022-05-03: The OPENSSL_LH_flush() function, which empties a hash table, contains a bug that breaks reuse of the memory occuppied by the removed hash table entries. This…
• CVE-2022-1434 - CVSS 5.9 (medium), 2022-05-03: The OpenSSL 3.0 implementation of the RC4-MD5 ciphersuite incorrectly uses the AAD data as the MAC key. This makes the MAC key trivially predictable. An…
• CVE-2021-45485 - CVSS 7.5 (high), 2021-12-25: In the IPv6 implementation in the Linux kernel before 5.13.3, net/ipv6/output_core.c has an information leak because of certain use of a hash table which,…
• CVE-2019-25045 - CVSS 7.8 (high), 2021-06-07: An issue was discovered in the Linux kernel before 5.0.19. The XFRM subsystem has a use-after-free, related to an xfrm_state_fini panic, aka CID-dbb2483b2a46.
• CVE-2020-15436 - CVSS 6.7 (medium), 2020-11-23: Use-after-free vulnerability in fs/block_dev.c in the Linux kernel before 5.8 allows local users to gain privileges or cause a denial of service by leveraging…
• CVE-2020-11868 - CVSS 7.5 (high), 2020-04-17: ntpd in ntp before 4.2.8p14 and 4.3.x before 4.3.100 allows an off-path attacker to block unauthenticated synchronization via a server mode packet with a…