H615c Firmware (Netapp) - vulnerabilities (CVEs)

35 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2025-02-05. Vendor: Netapp.

CVEs of H615c Firmware

CVE-2025-0167 - CVSS 3.4 (low), 2025-02-05: When asked to use a `.netrc` file for credentials **and** to follow HTTP redirects, curl could leak the password used for the first host to the followed-to…
CVE-2024-11053 - CVSS 3.4 (low), 2024-12-11: When asked to both use a `.netrc` file for credentials and to follow HTTP redirects, curl could leak the password used for the first host to the followed-to…
CVE-2024-33600 - CVSS 5.9 (medium), 2024-05-06: nscd: Null pointer crashes after notfound response If the Name Service Cache Daemon's (nscd) cache fails to add a not-found netgroup response to the cache,…
CVE-2024-33601 - CVSS 7.3 (high), 2024-05-06: nscd: netgroup cache may terminate daemon on memory allocation failure The Name Service Cache Daemon's (nscd) netgroup cache uses xmalloc or xrealloc and…
CVE-2024-26735 - CVSS 5.5 (medium), 2024-04-03: In the Linux kernel, the following vulnerability has been resolved: ipv6: sr: fix possible use-after-free and null-ptr-deref The pernet operations structure…
CVE-2024-26733 - CVSS 5.5 (medium), 2024-04-03: In the Linux kernel, the following vulnerability has been resolved: arp: Prevent overflow in arp_req_get(). syzkaller reported an overflown write in…
CVE-2024-2398 - CVSS 8.6 (high), 2024-03-27: When an application tells libcurl it wants to allow HTTP/2 server push, and the amount of received headers for the push surpasses the maximum allowed limit…
CVE-2024-2379 - CVSS 6.3 (medium), 2024-03-27: libcurl skips the certificate verification for a QUIC connection under certain conditions, when built to use wolfSSL. If told to use an unknown/bad cipher or…
CVE-2024-26633 - CVSS 5.5 (medium), 2024-03-18: In the Linux kernel, the following vulnerability has been resolved: ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim() syzbot pointed…
CVE-2023-52585 - CVSS 5.5 (medium), 2024-03-06: In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix possible NULL dereference in amdgpu_ras_query_error_status_helper() Return…
CVE-2024-26458 - CVSS 5.3 (medium), 2024-02-29: Kerberos 5 (aka krb5) 1.21.2 contains a memory leak in /krb5/src/lib/rpc/pmap_rmt.c.
CVE-2024-26462 - CVSS 5.5 (medium), 2024-02-29: Kerberos 5 (aka krb5) 1.21.2 contains a memory leak vulnerability in /krb5/src/kdc/ndr.c.
CVE-2024-26461 - CVSS 7.5 (high), 2024-02-29: Kerberos 5 (aka krb5) 1.21.2 contains a memory leak vulnerability in /krb5/src/lib/gssapi/krb5/k5sealv3.c.
CVE-2022-36879 - CVSS 5.5 (medium), 2022-07-27: An issue was discovered in the Linux kernel through 5.18.14. xfrm_expand_policies in net/xfrm/xfrm_policy.c can cause a refcount to be dropped twice.
CVE-2022-2068 - CVSS 9.8 (critical), 2022-06-21: In addition to the c_rehash shell command injection identified in CVE-2022-1292, further circumstances where the c_rehash script does not properly sanitise…
CVE-2022-0995 - CVSS 7.8 (high), 2022-03-25: An out-of-bounds (OOB) memory write flaw was found in the Linux kernel’s watch_queue event notification subsystem. This flaw can overwrite parts of the kernel…
CVE-2021-3609 - CVSS 7 (high), 2022-03-03: .A flaw was found in the CAN BCM networking protocol in the Linux kernel, where a local attacker can abuse a flaw in the CAN subsystem to corrupt memory,…
CVE-2021-3772 - CVSS 6.5 (medium), 2022-03-02: A flaw was found in the Linux SCTP stack. A blind attacker may be able to kill an existing SCTP association through invalid chunks if the attacker knows the…
CVE-2020-36516 - CVSS 5.9 (medium), 2022-02-26: An issue was discovered in the Linux kernel through 5.16.11. The mixed IPID assignment method with the hash-based IPID assignment policy allows an off-path…
CVE-2021-45485 - CVSS 7.5 (high), 2021-12-25: In the IPv6 implementation in the Linux kernel before 5.13.3, net/ipv6/output_core.c has an information leak because of certain use of a hash table which,…
CVE-2021-40490 - CVSS 7 (high), 2021-09-03: A race condition was discovered in ext4_write_inline_data_end in fs/ext4/inline.c in the ext4 subsystem in the Linux kernel through 5.13.13.
CVE-2021-22555 - CVSS 8.3 (high), 2021-07-07: A heap out-of-bounds write affecting Linux since v2.6.19-rc1 was discovered in net/netfilter/x_tables.c. This allows an attacker to gain privileges or cause a…
CVE-2021-36086 - CVSS 3.3 (low), 2021-07-01: The CIL compiler in SELinux 3.2 has a use-after-free in cil_reset_classpermission (called from cil_reset_classperms_set and cil_reset_classperms_list).
CVE-2019-25045 - CVSS 7.8 (high), 2021-06-07: An issue was discovered in the Linux kernel before 5.0.19. The XFRM subsystem has a use-after-free, related to an xfrm_state_fini panic, aka CID-dbb2483b2a46.
CVE-2020-35508 - CVSS 4.5 (medium), 2021-03-26: A flaw possibility of race condition and incorrect initialization of the process id was found in the Linux kernel child/parent process identification handling…
CVE-2020-15436 - CVSS 6.7 (medium), 2020-11-23: Use-after-free vulnerability in fs/block_dev.c in the Linux kernel before 5.8 allows local users to gain privileges or cause a denial of service by leveraging…
CVE-2020-13143 - CVSS 6.5 (medium), 2020-05-18: gadget_dev_desc_UDC_store in drivers/usb/gadget/configfs.c in the Linux kernel 3.16 through 5.6.13 relies on kstrdup without considering the possibility of an…
CVE-2020-12888 - CVSS 5.3 (medium), 2020-05-15: The VFIO PCI driver in the Linux kernel through 5.6.13 mishandles attempts to access disabled memory space.
CVE-2020-12771 - CVSS 5.5 (medium), 2020-05-09: An issue was discovered in the Linux kernel through 5.6.11. btree_gc_coalesce in drivers/md/bcache/btree.c has a deadlock if a coalescing operation fails.
CVE-2020-12770 - CVSS 6.7 (medium), 2020-05-09: An issue was discovered in the Linux kernel through 5.6.11. sg_write lacks an sg_remove_request call in a certain failure case, aka CID-83c6f2390040.
CVE-2020-12769 - CVSS 5.5 (medium), 2020-05-09: An issue was discovered in the Linux kernel before 5.4.17. drivers/spi/spi-dw.c allows attackers to cause a panic via concurrent calls to dw_spi_irq and…
CVE-2020-10690 - CVSS 6.5 (medium), 2020-05-08: There is a use-after-free in kernel versions before 5.5 due to a race condition between the release of ptp_clock and cdev while resource deallocation. When a…
CVE-2020-12653 - CVSS 7.8 (high), 2020-05-05: An issue was found in Linux kernel before 5.5.4. The mwifiex_cmd_append_vsie_tlv() function in drivers/net/wireless/marvell/mwifiex/scan.c allows local users…
CVE-2020-8832 - CVSS 5.5 (medium), 2020-04-10: The fix for the Linux kernel in Ubuntu 18.04 LTS for CVE-2019-14615 ("The Linux kernel did not properly clear data structures on context switches for certain…
CVE-2020-8835 - CVSS 7.8 (high), 2020-04-02: In the Linux kernel 5.5.0 and newer, the bpf verifier (kernel/bpf/verifier.c) did not properly restrict the register bounds for 32-bit operations, leading to…