H410c Firmware (Netapp) - vulnerabilities (CVEs)

241 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2025-03-11. Vendor: Netapp.

CVEs of H410c Firmware

CVE-2024-54085 - CVSS 10 (critical), 2025-03-11: AMI’s SPx contains a vulnerability in the BMC where an Attacker may bypass authentication remotely through the Redfish Host Interface. A successful…
CVE-2025-24928 - CVSS 7.8 (high), 2025-02-18: libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a stack-based buffer overflow in xmlSnprintfElements in valid.c. To exploit this, DTD validation must…
CVE-2024-56171 - CVSS 9.8 (critical), 2025-02-18: libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a use-after-free in xmlSchemaIDCFillNodeTables and xmlSchemaBubbleIDCNodeTables in xmlschemas.c. To…
CVE-2025-0665 - CVSS 7 (high), 2025-02-05: libcurl would wrongly close the same eventfd file descriptor twice when taking down a connection channel after having completed a threaded name resolve.
CVE-2025-0167 - CVSS 3.4 (low), 2025-02-05: When asked to use a `.netrc` file for credentials **and** to follow HTTP redirects, curl could leak the password used for the first host to the followed-to…
CVE-2024-40896 - CVSS 9.1 (critical), 2024-12-23: In libxml2 2.11 before 2.11.9, 2.12 before 2.12.9, and 2.13 before 2.13.3, the SAX parser can produce events for external entities even if custom SAX handlers…
CVE-2024-50602 - CVSS 5.9 (medium), 2024-10-27: An issue was discovered in libexpat before 2.6.4. There is a crash within the XML_ResumeParser function because XML_StopParser can stop/suspend an unstarted…
CVE-2024-6119 - CVSS 7.5 (high), 2024-09-03: Issue summary: Applications performing certificate name checks (e.g., TLS clients checking server certificates) may attempt to read an invalid memory address…
CVE-2024-36958 - CVSS 9.8 (critical), 2024-05-30: In the Linux kernel, the following vulnerability has been resolved: NFSD: Fix nfsd4_encode_fattr4() crasher Ensure that args.acl is initialized early. It is…
CVE-2024-33600 - CVSS 5.9 (medium), 2024-05-06: nscd: Null pointer crashes after notfound response If the Name Service Cache Daemon's (nscd) cache fails to add a not-found netgroup response to the cache,…
CVE-2024-33599 - CVSS 8.1 (high), 2024-05-06: nscd: Stack-based buffer overflow in netgroup cache If the Name Service Cache Daemon's (nscd) fixed size cache is exhausted by client requests then a…
CVE-2024-33602 - CVSS 7.4 (high), 2024-05-06: nscd: netgroup cache assumes NSS callback uses in-buffer strings The Name Service Cache Daemon's (nscd) netgroup cache can corrupt memory when the NSS…
CVE-2024-33601 - CVSS 7.3 (high), 2024-05-06: nscd: netgroup cache may terminate daemon on memory allocation failure The Name Service Cache Daemon's (nscd) netgroup cache uses xmalloc or xrealloc and…
CVE-2024-28757 - CVSS 7.5 (high), 2024-03-10: libexpat through 2.6.1 allows an XML Entity Expansion attack when there is isolated use of external parsers (created via XML_ExternalEntityParserCreate).
CVE-2024-1086 - CVSS 7.8 (high), 2024-01-31: A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local privilege escalation. The…
CVE-2023-5363 - CVSS 7.5 (high), 2023-10-25: Issue summary: A bug has been identified in the processing of key and initialisation vector (IV) lengths. This can lead to potential truncation or overruns…
CVE-2023-45862 - CVSS 5.5 (medium), 2023-10-14: An issue was discovered in drivers/usb/storage/ene_ub6250.c for the ENE UB6250 reader driver in the Linux kernel before 6.2.5. An object could potentially…
CVE-2023-4911 - CVSS 7.8 (high), 2023-10-03: A buffer overflow was discovered in the GNU C Library's dynamic loader ld.so while processing the GLIBC_TUNABLES environment variable. This issue could allow…
CVE-2023-4236 - CVSS 7.5 (high), 2023-09-20: A flaw in the networking code handling DNS-over-TLS queries may cause `named` to terminate unexpectedly due to an assertion failure. This happens when…
CVE-2023-4527 - CVSS 6.5 (medium), 2023-09-18: A flaw was found in glibc. When the getaddrinfo function is called with the AF_UNSPEC address family and the system is configured with no-aaaa mode via…
CVE-2023-4813 - CVSS 5.9 (medium), 2023-09-12: A flaw has been identified in glibc. In an uncommon situation, the gaih_inet function may use memory that has been freed, resulting in an application crash.…
CVE-2023-32252 - CVSS 7.5 (high), 2023-07-24: A flaw was found in the Linux kernel's ksmbd, a high-performance in-kernel SMB server. The specific flaw exists within the handling of SMB2_LOGOFF commands.…
CVE-2023-3212 - CVSS 4.4 (medium), 2023-06-23: A NULL pointer dereference issue was found in the gfs2 file system in the Linux kernel. It occurs on corrupt gfs2 file systems when the evict code tries to…
CVE-2023-2829 - CVSS 7.5 (high), 2023-06-21: A `named` instance configured to run as a DNSSEC-validating recursive resolver with the Aggressive Use of DNSSEC-Validated Cache (RFC 8198) option…
CVE-2023-2828 - CVSS 7.5 (high), 2023-06-21: Every `named` instance configured to run as a recursive resolver maintains a cache database holding the responses to the queries it has recently sent to…
CVE-2023-2911 - CVSS 7.5 (high), 2023-06-21: If the `recursive-clients` quota is reached on a BIND 9 resolver configured with both `stale-answer-enable yes;` and `stale-answer-client-timeout 0;`, a…
CVE-2023-35788 - CVSS 7.8 (high), 2023-06-16: An issue was discovered in fl_set_geneve_opt in net/sched/cls_flower.c in the Linux kernel before 6.3.7. It allows an out-of-bounds write in the flower…
CVE-2023-3111 - CVSS 7.8 (high), 2023-06-05: A use after free vulnerability was found in prepare_to_relocate in fs/btrfs/relocation.c in btrfs in the Linux Kernel. This possible flaw can be triggered by…
CVE-2023-2953 - CVSS 7.5 (high), 2023-05-30: A vulnerability was found in openldap. This security flaw causes a null pointer dereference in ber_memalloc_x() function.
CVE-2023-2898 - CVSS 4.7 (medium), 2023-05-26: There is a null-pointer-dereference flaw found in f2fs_write_end_io in fs/f2fs/data.c in the Linux kernel. This flaw allows a local privileged user to cause a…
CVE-2023-2124 - CVSS 7.8 (high), 2023-05-15: An out-of-bounds memory access flaw was found in the Linux kernel’s XFS file system in how a user restores an XFS image after failure (with a dirty log…
CVE-2023-0045 - CVSS 7.5 (high), 2023-04-25: The current implementation of the prctl syscall does not issue an IBPB immediately during the syscall. The ib_prctl_set function updates the Thread…
CVE-2023-2269 - CVSS 4.4 (medium), 2023-04-25: A denial of service problem was found, due to a possible recursive locking scenario, resulting in a deadlock in table_clear in drivers/md/dm-ioctl.c in the…
CVE-2023-2007 - CVSS 7.8 (high), 2023-04-24: The specific flaw exists within the DPT I2O Controller driver. The issue results from the lack of proper locking when performing operations on an object. An…
CVE-2023-31084 - CVSS 5.5 (medium), 2023-04-24: An issue was discovered in drivers/media/dvb-core/dvb_frontend.c in the Linux kernel 6.2. There is a blocking operation when a task is in !TASK_RUNNING. In…
CVE-2023-28464 - CVSS 7.8 (high), 2023-03-31: hci_conn_cleanup in net/bluetooth/hci_conn.c in the Linux kernel through 6.2.9 has a use-after-free (observed in hci_conn_hash_flush) because of calls to…
CVE-2023-1077 - CVSS 7 (high), 2023-03-27: In the Linux kernel, pick_next_rt_entity() may return a type confused entry, not detected by the BUG_ON condition, as the confused entry will not be NULL, but…
CVE-2023-1380 - CVSS 7.1 (high), 2023-03-27: A slab-out-of-bound read problem was found in brcmf_get_assoc_ies in drivers/net/wireless/broadcom/brcm80211/brcmfmac/cfg80211.c in the Linux Kernel. This…
CVE-2023-0386 - CVSS 7.8 (high), 2023-03-22: A flaw was found in the Linux kernel, where unauthorized access to the execution of the setuid file with capabilities was found in the Linux kernel’s…
CVE-2023-26545 - CVSS 4.7 (medium), 2023-02-25: In the Linux kernel before 6.1.13, there is a double free in net/mpls/af_mpls.c upon an allocation failure (for registering the sysctl table under a new…
CVE-2022-4696 - CVSS 7.8 (high), 2023-01-11: There exists a use-after-free vulnerability in the Linux kernel through io_uring and the IORING_OP_SPLICE operation. If IORING_OP_SPLICE is missing the…
CVE-2022-47519 - CVSS 7.8 (high), 2022-12-18: An issue was discovered in the Linux kernel before 6.0.11. Missing validation of IEEE80211_P2P_ATTR_OPER_CHANNEL in…
CVE-2022-47518 - CVSS 7.8 (high), 2022-12-18: An issue was discovered in the Linux kernel before 6.0.11. Missing validation of the number of channels in drivers/net/wireless/microchip/wilc1000/cfg80211.c…
CVE-2022-47521 - CVSS 7.8 (high), 2022-12-18: An issue was discovered in the Linux kernel before 6.0.11. Missing validation of IEEE80211_P2P_ATTR_CHANNEL_LIST in…
CVE-2022-47520 - CVSS 7.1 (high), 2022-12-18: An issue was discovered in the Linux kernel before 6.0.11. Missing offset validation in drivers/net/wireless/microchip/wilc1000/hif.c in the WILC1000 wireless…
CVE-2022-45934 - CVSS 7.8 (high), 2022-11-27: An issue was discovered in the Linux kernel through 6.0.10. l2cap_config_req in net/bluetooth/l2cap_core.c has an integer wraparound via L2CAP_CONF_REQ packets.
CVE-2022-45919 - CVSS 7 (high), 2022-11-27: An issue was discovered in the Linux kernel through 6.0.10. In drivers/media/dvb-core/dvb_ca_en50221.c, a use-after-free can occur is there is a disconnect…
CVE-2022-45885 - CVSS 7 (high), 2022-11-25: An issue was discovered in the Linux kernel through 6.0.9. drivers/media/dvb-core/dvb_frontend.c has a race condition that can cause a use-after-free when a…
CVE-2022-45888 - CVSS 6.4 (medium), 2022-11-25: An issue was discovered in the Linux kernel through 6.0.9. drivers/char/xillybus/xillyusb.c has a race condition and use-after-free during physical removal of…
CVE-2022-45884 - CVSS 7 (high), 2022-11-25: An issue was discovered in the Linux kernel through 6.0.9. drivers/media/dvb-core/dvbdev.c has a use-after-free, related to dvb_register_device dynamically…
CVE-2022-45887 - CVSS 4.7 (medium), 2022-11-25: An issue was discovered in the Linux kernel through 6.0.9. drivers/media/usb/ttusb-dec/ttusb_dec.c has a memory leak because of the lack of a…
CVE-2022-45886 - CVSS 7 (high), 2022-11-25: An issue was discovered in the Linux kernel through 6.0.9. drivers/media/dvb-core/dvb_net.c has a .disconnect versus dvb_device_open race condition that leads…
CVE-2022-40304 - CVSS 7.8 (high), 2022-11-23: An issue was discovered in libxml2 before 2.10.3. Certain invalid XML entity definitions can corrupt a hash table key, potentially leading to subsequent logic…
CVE-2022-40303 - CVSS 7.5 (high), 2022-11-23: An issue was discovered in libxml2 before 2.10.3. When parsing a multi-gigabyte XML document with the XML_PARSE_HUGE parser option enabled, several integer…
CVE-2022-43945 - CVSS 7.5 (high), 2022-11-04: The Linux kernel NFSD implementation prior to versions 5.19.17 and 6.0.2 are vulnerable to buffer overflow. NFSD tracks the number of pages held by each NFSD…
CVE-2022-43680 - CVSS 7.5 (high), 2022-10-24: In libexpat through 2.4.9, there is a use-after free caused by overeager destruction of a shared DTD in XML_ExternalEntityParserCreate in out-of-memory…
CVE-2022-3545 - CVSS 7.8 (high), 2022-10-17: A vulnerability has been found in Linux Kernel and classified as critical. Affected by this vulnerability is the function area_cache_get of the file…
CVE-2022-3202 - CVSS 7.1 (high), 2022-09-14: A NULL pointer dereference flaw in diFree in fs/jfs/inode.c in Journaled File System (JFS)in the Linux kernel. This could allow a local attacker to crash the…
CVE-2022-2964 - CVSS 7.8 (high), 2022-09-09: A flaw was found in the Linux kernel’s driver for the ASIX AX88179_178A-based USB 2.0/3.0 Gigabit Ethernet Devices. The vulnerability contains multiple…
CVE-2022-39046 - CVSS 7.5 (high), 2022-08-31: An issue was discovered in the GNU C Library (glibc) 2.36. When the syslog function is passed a crafted input string larger than 1024 bytes, it reads…
CVE-2022-2961 - CVSS 7 (high), 2022-08-29: A use-after-free flaw was found in the Linux kernel’s PLP Rose functionality in the way a user triggers a race condition by calling bind while simultaneously…
CVE-2022-1199 - CVSS 7.5 (high), 2022-08-29: A flaw was found in the Linux kernel. This flaw allows an attacker to crash the Linux kernel by simulating amateur radio from the user space, resulting in a…
CVE-2021-3999 - CVSS 7.8 (high), 2022-08-24: A flaw was found in glibc. An off-by-one buffer overflow and underflow in getcwd() may lead to memory corruption when the size of the buffer is exactly 1. A…
CVE-2021-3998 - CVSS 7.5 (high), 2022-08-24: A flaw was found in glibc. The realpath() function can mistakenly return an unexpected value, potentially leading to information leakage and disclosure of…
CVE-2021-4204 - CVSS 7.1 (high), 2022-08-24: An out-of-bounds (OOB) memory access flaw was found in the Linux kernel's eBPF due to an Improper Input Validation. This flaw allows a local attacker with a…
CVE-2022-2938 - CVSS 7.8 (high), 2022-08-23: A flaw was found in the Linux kernel's implementation of Pressure Stall Information. While the feature is disabled by default, it could allow an attacker to…
CVE-2022-2873 - CVSS 5.5 (medium), 2022-08-22: An out-of-bounds memory access flaw was found in the Linux kernel Intel’s iSMT SMBus host controller driver in the way a user triggers the…
CVE-2022-1973 - CVSS 7.1 (high), 2022-08-05: A use-after-free flaw was found in the Linux kernel in log_replay in fs/ntfs3/fslog.c in the NTFS journal. This flaw allows a local attacker to crash the…
CVE-2022-36123 - CVSS 7.8 (high), 2022-07-29: The Linux kernel before 5.18.13 lacks a certain clear operation for the block starting symbol (.bss). This allows Xen PV guest OS users to cause a denial of…
CVE-2022-36879 - CVSS 5.5 (medium), 2022-07-27: An issue was discovered in the Linux kernel through 5.18.14. xfrm_expand_policies in net/xfrm/xfrm_policy.c can cause a refcount to be dropped twice.
CVE-2022-1671 - CVSS 7.1 (high), 2022-07-26: A NULL pointer dereference flaw was found in rxrpc_preparse_s in net/rxrpc/server_key.c in the Linux kernel. This flaw allows a local attacker to crash the…
CVE-2022-2327 - CVSS 7.8 (high), 2022-07-22: io_uring use work_flags to determine which identity need to grab from the calling process to make sure it is consistent with the calling process when…
CVE-2022-31160 - CVSS 6.1 (medium), 2022-07-20: jQuery UI is a curated set of user interface interactions, effects, widgets, and themes built on top of jQuery. Versions prior to 1.13.2 are potentially…
CVE-2022-2318 - CVSS 5.5 (medium), 2022-07-06: There are use-after-free vulnerabilities caused by timer handler in net/rose/rose_timer.c of linux that allow attackers to crash linux kernel without any…
CVE-2022-2097 - CVSS 5.3 (medium), 2022-07-05: AES OCB mode for 32-bit x86 platforms using the AES-NI assembly optimised implementation will not encrypt the entirety of the data under some circumstances.…
CVE-2022-34918 - CVSS 7.8 (high), 2022-07-04: An issue was discovered in the Linux kernel through 5.18.9. A type confusion bug in nft_set_elem_init (leading to a buffer overflow) could be used by a local…
CVE-2022-2274 - CVSS 9.8 (critical), 2022-07-01: The OpenSSL 3.0.4 release introduced a serious bug in the RSA implementation for X86_64 CPUs supporting the AVX512IFMA instructions. This issue makes the RSA…
CVE-2022-2068 - CVSS 9.8 (critical), 2022-06-21: In addition to the c_rehash shell command injection identified in CVE-2022-1292, further circumstances where the c_rehash script does not properly sanitise…
CVE-2022-1998 - CVSS 7.8 (high), 2022-06-09: A use after free in the Linux kernel File System notify functionality was found in the way user triggers copy_info_records_to_user() call to fail in…
CVE-2022-32250 - CVSS 7.8 (high), 2022-06-02: net/netfilter/nf_tables_api.c in the Linux kernel through 5.18.1 allows a local user (able to create user/net namespaces) to escalate privileges to root…
CVE-2022-1786 - CVSS 7.8 (high), 2022-06-02: A use-after-free flaw was found in the Linux kernel’s io_uring subsystem in the way a user sets up a ring with IORING_SETUP_IOPOLL with more than one task…
CVE-2022-1652 - CVSS 7.8 (high), 2022-06-02: Linux Kernel could allow a local attacker to execute arbitrary code on the system, caused by a concurrency use-after-free flaw in the bad_flp_intr function.…
CVE-2022-1882 - CVSS 7.8 (high), 2022-05-26: A use-after-free flaw was found in the Linux kernel’s pipes functionality in how a user performs manipulations with the pipe post_one_notification() after…
CVE-2022-1678 - CVSS 7.5 (high), 2022-05-25: An issue was discovered in the Linux Kernel from 4.18 to 4.19, an improper update of sock reference in TCP pacing can lead to memory/netns leak, which can be…
CVE-2022-1183 - CVSS 7.5 (high), 2022-05-19: On vulnerable configurations, the named daemon may, in some circumstances, terminate with an assertion failure. Vulnerable configurations are those that…
CVE-2022-1734 - CVSS 7 (high), 2022-05-18: A flaw in Linux Kernel found in nfcmrvl_nci_unregister_dev() in drivers/nfc/nfcmrvl/main.c can lead to use after free both read or write when non synchronized…
CVE-2022-29581 - CVSS 7.8 (high), 2022-05-17: Improper Update of Reference Count vulnerability in net/sched of Linux Kernel allows local attacker to cause privilege escalation to root. This issue affects:…
CVE-2022-1586 - CVSS 9.1 (critical), 2022-05-16: An out-of-bounds read vulnerability was discovered in the PCRE2 library in the compile_xclass_matchingpath() function of the pcre2_jit_compile.c file. This…
CVE-2022-1587 - CVSS 9.1 (critical), 2022-05-16: An out-of-bounds read vulnerability was discovered in the PCRE2 library in the get_recurse_data_length() function of the pcre2_jit_compile.c file. This issue…
CVE-2022-1679 - CVSS 7.8 (high), 2022-05-16: A use-after-free flaw was found in the Linux kernel’s Atheros wireless adapter driver in the way a user forces the ath9k_htc_wait_for_target function to fail…
CVE-2022-30594 - CVSS 7.8 (high), 2022-05-12: The Linux kernel before 5.17.2 mishandles seccomp permissions. The PTRACE_SEIZE code path allows attackers to bypass intended restrictions on setting the…
CVE-2022-29155 - CVSS 9.8 (critical), 2022-05-04: In OpenLDAP 2.x before 2.5.12 and 2.6.x before 2.6.2, a SQL injection vulnerability exists in the experimental back-sql backend to slapd, via a SQL statement…
CVE-2022-29824 - CVSS 6.5 (medium), 2022-05-03: In libxml2 before 2.9.14, several buffer handling functions in buf.c (xmlBuf*) and tree.c (xmlBuffer*) don't check for integer overflows. This can result in…
CVE-2022-29968 - CVSS 7.8 (high), 2022-05-02: An issue was discovered in the Linux kernel through 5.17.5. io_rw_init_file in fs/io_uring.c lacks initialization of kiocb->private.
CVE-2022-1048 - CVSS 7 (high), 2022-04-29: A use-after-free flaw was found in the Linux kernel’s sound subsystem in the way a user triggers concurrent calls of PCM hw_params. The hw_free ioctls or…
CVE-2022-1353 - CVSS 7.1 (high), 2022-04-29: A vulnerability was found in the pfkey_register function in net/key/af_key.c in the Linux kernel. This flaw allows a local, unprivileged user to gain access…
CVE-2022-29156 - CVSS 7.8 (high), 2022-04-13: drivers/infiniband/ulp/rtrs/rtrs-clt.c in the Linux kernel before 5.16.12 has a double free related to rtrs_clt_dev_release.
CVE-2022-28893 - CVSS 7.8 (high), 2022-04-11: The SUNRPC subsystem in the Linux kernel through 5.17.2 can call xs_xprt_free before ensuring that sockets are in the intended state.
CVE-2022-28796 - CVSS 7 (high), 2022-04-08: jbd2_journal_wait_updates in fs/jbd2/transaction.c in the Linux kernel before 5.17.1 has a use-after-free caused by a transaction_t race condition.
CVE-2022-28389 - CVSS 5.5 (medium), 2022-04-03: mcba_usb_start_xmit in drivers/net/can/usb/mcba_usb.c in the Linux kernel through 5.17.1 has a double free.