Fas 500f Firmware (Netapp) - vulnerabilities (CVEs)
11 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2022-07-27. Vendor: Netapp.
CVEs of Fas 500f Firmware
- CVE-2022-36879 - CVSS 5.5 (medium), 2022-07-27: An issue was discovered in the Linux kernel through 5.18.14. xfrm_expand_policies in net/xfrm/xfrm_policy.c can cause a refcount to be dropped twice.
- CVE-2022-1292 - CVSS 9.8 (critical), 2022-05-03: The c_rehash script does not properly sanitise shell metacharacters to prevent command injection. This script is distributed by some operating systems in a…
- CVE-2022-1473 - CVSS 7.5 (high), 2022-05-03: The OPENSSL_LH_flush() function, which empties a hash table, contains a bug that breaks reuse of the memory occuppied by the removed hash table entries. This…
- CVE-2022-1434 - CVSS 5.9 (medium), 2022-05-03: The OpenSSL 3.0 implementation of the RC4-MD5 ciphersuite incorrectly uses the AAD data as the MAC key. This makes the MAC key trivially predictable. An…
- CVE-2022-1343 - CVSS 5.3 (medium), 2022-05-03: The function `OCSP_basic_verify` verifies the signer certificate on an OCSP response. In the case where the (non-default) flag OCSP_NOCHECKS is used then the…
- CVE-2021-40490 - CVSS 7 (high), 2021-09-03: A race condition was discovered in ext4_write_inline_data_end in fs/ext4/inline.c in the ext4 subsystem in the Linux kernel through 5.13.13.
- CVE-2021-28964 - CVSS 4.7 (medium), 2021-03-22: A race condition was discovered in get_old_root in fs/btrfs/ctree.c in the Linux kernel through 5.11.8. It allows attackers to cause a denial of service (BUG)…
- CVE-2021-28952 - CVSS 7.8 (high), 2021-03-20: An issue was discovered in the Linux kernel through 5.11.8. The sound/soc/qcom/sdm845.c soundwire device driver has a buffer overflow when an unexpected port…
- CVE-2021-28951 - CVSS 5.5 (medium), 2021-03-20: An issue was discovered in fs/io_uring.c in the Linux kernel through 5.11.8. It allows attackers to cause a denial of service (deadlock) because exit may be…
- CVE-2020-14305 - CVSS 8.1 (high), 2020-12-02: An out-of-bounds memory write flaw was found in how the Linux kernel’s Voice Over IP H.323 connection tracking functionality handled connections on ipv6 port…
- CVE-2020-15436 - CVSS 6.7 (medium), 2020-11-23: Use-after-free vulnerability in fs/block_dev.c in the Linux kernel before 5.8 allows local users to gain privileges or cause a denial of service by leveraging…
