H500s (Netapp) - vulnerabilities (CVEs)

25 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2023-07-31. Vendor: Netapp.

CVEs of H500s

CVE-2023-4004 - CVSS 7.8 (high), 2023-07-31: A use-after-free flaw was found in the Linux kernel's netfilter in the way a user triggers the nft_pipapo_remove function with the element, without a…
CVE-2023-32247 - CVSS 7.5 (high), 2023-07-24: A flaw was found in the Linux kernel's ksmbd, a high-performance in-kernel SMB server. The specific flaw exists within the handling of SMB2_SESSION_SETUP…
CVE-2023-32258 - CVSS 8.1 (high), 2023-07-24: A flaw was found in the Linux kernel's ksmbd, a high-performance in-kernel SMB server. The specific flaw exists within the processing of SMB2_LOGOFF and…
CVE-2023-32257 - CVSS 8.1 (high), 2023-07-24: A flaw was found in the Linux kernel's ksmbd, a high-performance in-kernel SMB server. The specific flaw exists within the processing of SMB2_SESSION_SETUP…
CVE-2023-32248 - CVSS 7.5 (high), 2023-07-24: A flaw was found in the Linux kernel's ksmbd, a high-performance in-kernel SMB server. The specific flaw exists within the handling of SMB2_TREE_CONNECT and…
CVE-2023-38426 - CVSS 9.1 (critical), 2023-07-18: An issue was discovered in the Linux kernel before 6.3.4. ksmbd has an out-of-bounds read in smb2_find_context_vals when create_context's name_len is larger…
CVE-2023-38430 - CVSS 9.1 (critical), 2023-07-18: An issue was discovered in the Linux kernel before 6.3.9. ksmbd does not validate the SMB request protocol ID, leading to an out-of-bounds read.
CVE-2023-38428 - CVSS 9.1 (critical), 2023-07-18: An issue was discovered in the Linux kernel before 6.3.4. fs/ksmbd/smb2pdu.c in ksmbd does not properly check the UserName value because it does not consider…
CVE-2023-38432 - CVSS 9.1 (critical), 2023-07-18: An issue was discovered in the Linux kernel before 6.3.10. fs/smb/server/smb2misc.c in ksmbd does not validate the relationship between the command payload…
CVE-2023-38427 - CVSS 9.8 (critical), 2023-07-18: An issue was discovered in the Linux kernel before 6.3.8. fs/smb/server/smb2pdu.c in ksmbd has an integer underflow and out-of-bounds read in…
CVE-2023-38431 - CVSS 9.1 (critical), 2023-07-18: An issue was discovered in the Linux kernel before 6.3.8. fs/smb/server/connection.c in ksmbd does not validate the relationship between the NetBIOS header's…
CVE-2023-32254 - CVSS 9.8 (critical), 2023-07-10: A flaw was found in the Linux kernel's ksmbd, a high-performance in-kernel SMB server. The specific flaw exists within the processing of SMB2_TREE_DISCONNECT…
CVE-2023-32250 - CVSS 9 (critical), 2023-07-10: A flaw was found in the Linux kernel's ksmbd, a high-performance in-kernel SMB server. The specific flaw exists within the processing of SMB2_SESSION_SETUP…
CVE-2023-35001 - CVSS 7.8 (high), 2023-07-05: Linux Kernel nftables Out-Of-Bounds Read/Write Vulnerability; nft_byteorder poorly handled vm register contents when CAP_NET_ADMIN is in any user or network…
CVE-2023-3390 - CVSS 7.8 (high), 2023-06-28: A use-after-free vulnerability was found in the Linux kernel's netfilter subsystem in net/netfilter/nf_tables_api.c. Mishandled error handling with…
CVE-2023-1295 - CVSS 7.8 (high), 2023-06-28: A time-of-check to time-of-use issue exists in io_uring subsystem's IORING_OP_CLOSE operation in the Linux kernel's versions 5.6 - 5.11 (inclusive), which…
CVE-2023-35828 - CVSS 7 (high), 2023-06-18: An issue was discovered in the Linux kernel before 6.3.2. A use-after-free was found in renesas_usb3_remove in drivers/usb/gadget/udc/renesas_usb3.c.
CVE-2023-35826 - CVSS 7 (high), 2023-06-18: An issue was discovered in the Linux kernel before 6.3.2. A use-after-free was found in cedrus_remove in drivers/staging/media/sunxi/cedrus/cedrus.c.
CVE-2023-35829 - CVSS 7 (high), 2023-06-18: An issue was discovered in the Linux kernel before 6.3.2. A use-after-free was found in rkvdec_remove in drivers/staging/media/rkvdec/rkvdec.c.
CVE-2022-48502 - CVSS 7.1 (high), 2023-05-31: An issue was discovered in the Linux kernel before 6.2. The ntfs3 subsystem does not properly check for correctness during disk reads, leading to an…
CVE-2023-1989 - CVSS 7.1 (high), 2023-04-11: A use-after-free flaw was found in btsdio_remove in drivers\bluetooth\btsdio.c in the Linux Kernel. A call to btsdio_remove with an unfinished job may cause a…
CVE-2023-1838 - CVSS 7.1 (high), 2023-04-05: A use-after-free flaw was found in vhost_net_set_backend in drivers/vhost/net.c in virtio network subcomponent in the Linux kernel due to a double fget. This…
CVE-2023-28466 - CVSS 7 (high), 2023-03-16: do_tls_getsockopt in net/tls/tls_main.c in the Linux kernel through 6.2.6 lacks a lock_sock call, leading to a race condition (with a resultant use-after-free…
CVE-2022-25636 - CVSS 7.8 (high), 2022-02-24: net/netfilter/nf_dup_netdev.c in the Linux kernel 5.4 through 5.6.10 allows local users to gain privileges because of a heap out-of-bounds write. This is…
CVE-2019-20636 - CVSS 6.7 (medium), 2020-04-08: In the Linux kernel before 5.4.12, drivers/input/input.c has out-of-bounds writes via a crafted keycode table, as demonstrated by input_set_keycode, aka…