H700s Firmware (Netapp) - vulnerabilities (CVEs)

294 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2025-03-11. Vendor: Netapp.

CVEs of H700s Firmware

CVE-2024-54085 - CVSS 10 (critical), 2025-03-11: AMI’s SPx contains a vulnerability in the BMC where an Attacker may bypass authentication remotely through the Redfish Host Interface. A successful…
CVE-2025-24928 - CVSS 7.8 (high), 2025-02-18: libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a stack-based buffer overflow in xmlSnprintfElements in valid.c. To exploit this, DTD validation must…
CVE-2024-56171 - CVSS 9.8 (critical), 2025-02-18: libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a use-after-free in xmlSchemaIDCFillNodeTables and xmlSchemaBubbleIDCNodeTables in xmlschemas.c. To…
CVE-2025-0665 - CVSS 7 (high), 2025-02-05: libcurl would wrongly close the same eventfd file descriptor twice when taking down a connection channel after having completed a threaded name resolve.
CVE-2025-0167 - CVSS 3.4 (low), 2025-02-05: When asked to use a `.netrc` file for credentials **and** to follow HTTP redirects, curl could leak the password used for the first host to the followed-to…
CVE-2024-40896 - CVSS 9.1 (critical), 2024-12-23: In libxml2 2.11 before 2.11.9, 2.12 before 2.12.9, and 2.13 before 2.13.3, the SAX parser can produce events for external entities even if custom SAX handlers…
CVE-2024-11053 - CVSS 3.4 (low), 2024-12-11: When asked to both use a `.netrc` file for credentials and to follow HTTP redirects, curl could leak the password used for the first host to the followed-to…
CVE-2024-50602 - CVSS 5.9 (medium), 2024-10-27: An issue was discovered in libexpat before 2.6.4. There is a crash within the XML_ResumeParser function because XML_StopParser can stop/suspend an unstarted…
CVE-2024-8096 - CVSS 6.5 (medium), 2024-09-11: When curl is told to use the Certificate Status Request TLS extension, often referred to as OCSP stapling, to verify that the server certificate is valid, it…
CVE-2024-6119 - CVSS 7.5 (high), 2024-09-03: Issue summary: Applications performing certificate name checks (e.g., TLS clients checking server certificates) may attempt to read an invalid memory address…
CVE-2024-36958 - CVSS 9.8 (critical), 2024-05-30: In the Linux kernel, the following vulnerability has been resolved: NFSD: Fix nfsd4_encode_fattr4() crasher Ensure that args.acl is initialized early. It is…
CVE-2024-33600 - CVSS 5.9 (medium), 2024-05-06: nscd: Null pointer crashes after notfound response If the Name Service Cache Daemon's (nscd) cache fails to add a not-found netgroup response to the cache,…
CVE-2024-33599 - CVSS 8.1 (high), 2024-05-06: nscd: Stack-based buffer overflow in netgroup cache If the Name Service Cache Daemon's (nscd) fixed size cache is exhausted by client requests then a…
CVE-2024-33602 - CVSS 7.4 (high), 2024-05-06: nscd: netgroup cache assumes NSS callback uses in-buffer strings The Name Service Cache Daemon's (nscd) netgroup cache can corrupt memory when the NSS…
CVE-2024-33601 - CVSS 7.3 (high), 2024-05-06: nscd: netgroup cache may terminate daemon on memory allocation failure The Name Service Cache Daemon's (nscd) netgroup cache uses xmalloc or xrealloc and…
CVE-2024-2398 - CVSS 8.6 (high), 2024-03-27: When an application tells libcurl it wants to allow HTTP/2 server push, and the amount of received headers for the push surpasses the maximum allowed limit…
CVE-2024-2379 - CVSS 6.3 (medium), 2024-03-27: libcurl skips the certificate verification for a QUIC connection under certain conditions, when built to use wolfSSL. If told to use an unknown/bad cipher or…
CVE-2024-2466 - CVSS 6.5 (medium), 2024-03-27: libcurl did not check the server certificate of TLS connections done to a host specified as an IP address, when built to use mbedTLS. libcurl would wrongly…
CVE-2024-2004 - CVSS 3.5 (low), 2024-03-27: When a protocol selection parameter option disables all protocols without adding any then the default set of protocols would remain in the allowed set due to…
CVE-2024-28757 - CVSS 7.5 (high), 2024-03-10: libexpat through 2.6.1 allows an XML Entity Expansion attack when there is isolated use of external parsers (created via XML_ExternalEntityParserCreate).
CVE-2024-1086 - CVSS 7.8 (high), 2024-01-31: A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local privilege escalation. The…
CVE-2023-5363 - CVSS 7.5 (high), 2023-10-25: Issue summary: A bug has been identified in the processing of key and initialisation vector (IV) lengths. This can lead to potential truncation or overruns…
CVE-2023-40791 - CVSS 6.3 (medium), 2023-10-16: extract_user_to_sg in lib/scatterlist.c in the Linux kernel before 6.4.12 fails to unpin pages in a certain situation, as demonstrated by a WARNING for…
CVE-2023-4911 - CVSS 7.8 (high), 2023-10-03: A buffer overflow was discovered in the GNU C Library's dynamic loader ld.so while processing the GLIBC_TUNABLES environment variable. This issue could allow…
CVE-2023-4236 - CVSS 7.5 (high), 2023-09-20: A flaw in the networking code handling DNS-over-TLS queries may cause `named` to terminate unexpectedly due to an assertion failure. This happens when…
CVE-2023-4527 - CVSS 6.5 (medium), 2023-09-18: A flaw was found in glibc. When the getaddrinfo function is called with the AF_UNSPEC address family and the system is configured with no-aaaa mode via…
CVE-2023-4813 - CVSS 5.9 (medium), 2023-09-12: A flaw has been identified in glibc. In an uncommon situation, the gaih_inet function may use memory that has been freed, resulting in an application crash.…
CVE-2023-4273 - CVSS 6.7 (medium), 2023-08-09: A flaw was found in the exFAT driver of the Linux kernel. The vulnerability exists in the implementation of the file name reconstruction function, which is…
CVE-2023-32252 - CVSS 7.5 (high), 2023-07-24: A flaw was found in the Linux kernel's ksmbd, a high-performance in-kernel SMB server. The specific flaw exists within the handling of SMB2_LOGOFF commands.…
CVE-2023-3212 - CVSS 4.4 (medium), 2023-06-23: A NULL pointer dereference issue was found in the gfs2 file system in the Linux kernel. It occurs on corrupt gfs2 file systems when the evict code tries to…
CVE-2023-2828 - CVSS 7.5 (high), 2023-06-21: Every `named` instance configured to run as a recursive resolver maintains a cache database holding the responses to the queries it has recently sent to…
CVE-2023-2911 - CVSS 7.5 (high), 2023-06-21: If the `recursive-clients` quota is reached on a BIND 9 resolver configured with both `stale-answer-enable yes;` and `stale-answer-client-timeout 0;`, a…
CVE-2023-2829 - CVSS 7.5 (high), 2023-06-21: A `named` instance configured to run as a DNSSEC-validating recursive resolver with the Aggressive Use of DNSSEC-Validated Cache (RFC 8198) option…
CVE-2023-35788 - CVSS 7.8 (high), 2023-06-16: An issue was discovered in fl_set_geneve_opt in net/sched/cls_flower.c in the Linux kernel before 6.3.7. It allows an out-of-bounds write in the flower…
CVE-2023-3111 - CVSS 7.8 (high), 2023-06-05: A use after free vulnerability was found in prepare_to_relocate in fs/btrfs/relocation.c in btrfs in the Linux Kernel. This possible flaw can be triggered by…
CVE-2023-2953 - CVSS 7.5 (high), 2023-05-30: A vulnerability was found in openldap. This security flaw causes a null pointer dereference in ber_memalloc_x() function.
CVE-2023-2898 - CVSS 4.7 (medium), 2023-05-26: There is a null-pointer-dereference flaw found in f2fs_write_end_io in fs/f2fs/data.c in the Linux kernel. This flaw allows a local privileged user to cause a…
CVE-2023-28321 - CVSS 5.9 (medium), 2023-05-26: An improper certificate validation vulnerability exists in curl <v8.1.0 in the way it supports matching of wildcard patterns when listed as "Subject…
CVE-2023-28322 - CVSS 5.3 (medium), 2023-05-26: An information disclosure vulnerability exists in curl <v8.1.0 when doing HTTP(S) transfers, libcurl might erroneously use the read callback…
CVE-2023-28320 - CVSS 5.9 (medium), 2023-05-26: A denial of service vulnerability exists in curl <v8.1.0 in the way libcurl provides several different backends for resolving host names, selected at build…
CVE-2023-28319 - CVSS 7.5 (high), 2023-05-26: A use after free vulnerability exists in curl <v8.1.0 in the way libcurl offers a feature to verify an SSH server's public key using a SHA 256 hash. When this…
CVE-2023-33250 - CVSS 4.4 (medium), 2023-05-21: The Linux kernel 6.3 has a use-after-free in iopt_unmap_iova_range in drivers/iommu/iommufd/io_pagetable.c.
CVE-2023-2124 - CVSS 7.8 (high), 2023-05-15: An out-of-bounds memory access flaw was found in the Linux kernel’s XFS file system in how a user restores an XFS image after failure (with a dirty log…
CVE-2023-0045 - CVSS 7.5 (high), 2023-04-25: The current implementation of the prctl syscall does not issue an IBPB immediately during the syscall. The ib_prctl_set function updates the Thread…
CVE-2023-2269 - CVSS 4.4 (medium), 2023-04-25: A denial of service problem was found, due to a possible recursive locking scenario, resulting in a deadlock in table_clear in drivers/md/dm-ioctl.c in the…
CVE-2023-2007 - CVSS 7.8 (high), 2023-04-24: The specific flaw exists within the DPT I2O Controller driver. The issue results from the lack of proper locking when performing operations on an object. An…
CVE-2023-28464 - CVSS 7.8 (high), 2023-03-31: hci_conn_cleanup in net/bluetooth/hci_conn.c in the Linux kernel through 6.2.9 has a use-after-free (observed in hci_conn_hash_flush) because of calls to…
CVE-2023-27534 - CVSS 8.8 (high), 2023-03-30: A path traversal vulnerability exists in curl <8.0.0 SFTP implementation causes the tilde (~) character to be wrongly replaced when used as a prefix in the…
CVE-2023-27537 - CVSS 5.9 (medium), 2023-03-30: A double free vulnerability exists in libcurl <8.0.0 when sharing HSTS data between separate "handles". This sharing was introduced without considerations for…
CVE-2023-27533 - CVSS 9.8 (critical), 2023-03-30: A vulnerability in input validation exists in curl <8.0 during communication using the TELNET protocol may allow an attacker to pass on maliciously crafted…
CVE-2023-27536 - CVSS 5.9 (medium), 2023-03-30: An authentication bypass vulnerability exists libcurl <8.0.0 in the connection reuse feature which can reuse previously established connections with incorrect…
CVE-2023-27535 - CVSS 5.9 (medium), 2023-03-30: An authentication bypass vulnerability exists in libcurl <8.0.0 in the FTP connection reuse feature that can result in wrong credentials being used during…
CVE-2023-27538 - CVSS 7.7 (high), 2023-03-30: An authentication bypass vulnerability exists in libcurl prior to v8.0.0 where it reuses a previously established SSH connection despite the fact that an SSH…
CVE-2023-1077 - CVSS 7 (high), 2023-03-27: In the Linux kernel, pick_next_rt_entity() may return a type confused entry, not detected by the BUG_ON condition, as the confused entry will not be NULL, but…
CVE-2023-1380 - CVSS 7.1 (high), 2023-03-27: A slab-out-of-bound read problem was found in brcmf_get_assoc_ies in drivers/net/wireless/broadcom/brcm80211/brcmfmac/cfg80211.c in the Linux Kernel. This…
CVE-2023-0386 - CVSS 7.8 (high), 2023-03-22: A flaw was found in the Linux kernel, where unauthorized access to the execution of the setuid file with capabilities was found in the Linux kernel’s…
CVE-2023-26545 - CVSS 4.7 (medium), 2023-02-25: In the Linux kernel before 6.1.13, there is a double free in net/mpls/af_mpls.c upon an allocation failure (for registering the sysctl table under a new…
CVE-2023-23916 - CVSS 6.5 (medium), 2023-02-23: An allocation of resources without limits or throttling vulnerability exists in curl <v7.88.0 based on the "chained" HTTP compression algorithms, meaning that…
CVE-2023-23915 - CVSS 6.5 (medium), 2023-02-23: A cleartext transmission of sensitive information vulnerability exists in curl <v7.88.0 that could cause HSTS functionality to behave incorrectly when…
CVE-2023-23914 - CVSS 9.1 (critical), 2023-02-23: A cleartext transmission of sensitive information vulnerability exists in curl <v7.88.0 that could cause HSTS functionality fail when multiple URLs are…
CVE-2022-4696 - CVSS 7.8 (high), 2023-01-11: There exists a use-after-free vulnerability in the Linux kernel through io_uring and the IORING_OP_SPLICE operation. If IORING_OP_SPLICE is missing the…
CVE-2022-47518 - CVSS 7.8 (high), 2022-12-18: An issue was discovered in the Linux kernel before 6.0.11. Missing validation of the number of channels in drivers/net/wireless/microchip/wilc1000/cfg80211.c…
CVE-2022-47521 - CVSS 7.8 (high), 2022-12-18: An issue was discovered in the Linux kernel before 6.0.11. Missing validation of IEEE80211_P2P_ATTR_CHANNEL_LIST in…
CVE-2022-47520 - CVSS 7.1 (high), 2022-12-18: An issue was discovered in the Linux kernel before 6.0.11. Missing offset validation in drivers/net/wireless/microchip/wilc1000/hif.c in the WILC1000 wireless…
CVE-2022-47519 - CVSS 7.8 (high), 2022-12-18: An issue was discovered in the Linux kernel before 6.0.11. Missing validation of IEEE80211_P2P_ATTR_OPER_CHANNEL in…
CVE-2022-35260 - CVSS 6.5 (medium), 2022-12-05: curl can be told to parse a `.netrc` file for credentials. If that file endsin a line with 4095 consecutive non-white space letters and no newline, curlwould…
CVE-2022-32221 - CVSS 9.8 (critical), 2022-12-05: When doing HTTP(S) transfers, libcurl might erroneously use the read callback (`CURLOPT_READFUNCTION`) to ask for data to send, even when the…
CVE-2022-45934 - CVSS 7.8 (high), 2022-11-27: An issue was discovered in the Linux kernel through 6.0.10. l2cap_config_req in net/bluetooth/l2cap_core.c has an integer wraparound via L2CAP_CONF_REQ packets.
CVE-2022-45919 - CVSS 7 (high), 2022-11-27: An issue was discovered in the Linux kernel through 6.0.10. In drivers/media/dvb-core/dvb_ca_en50221.c, a use-after-free can occur is there is a disconnect…
CVE-2022-45884 - CVSS 7 (high), 2022-11-25: An issue was discovered in the Linux kernel through 6.0.9. drivers/media/dvb-core/dvbdev.c has a use-after-free, related to dvb_register_device dynamically…
CVE-2022-45887 - CVSS 4.7 (medium), 2022-11-25: An issue was discovered in the Linux kernel through 6.0.9. drivers/media/usb/ttusb-dec/ttusb_dec.c has a memory leak because of the lack of a…
CVE-2022-45886 - CVSS 7 (high), 2022-11-25: An issue was discovered in the Linux kernel through 6.0.9. drivers/media/dvb-core/dvb_net.c has a .disconnect versus dvb_device_open race condition that leads…
CVE-2022-45885 - CVSS 7 (high), 2022-11-25: An issue was discovered in the Linux kernel through 6.0.9. drivers/media/dvb-core/dvb_frontend.c has a race condition that can cause a use-after-free when a…
CVE-2022-45888 - CVSS 6.4 (medium), 2022-11-25: An issue was discovered in the Linux kernel through 6.0.9. drivers/char/xillybus/xillyusb.c has a race condition and use-after-free during physical removal of…
CVE-2022-40304 - CVSS 7.8 (high), 2022-11-23: An issue was discovered in libxml2 before 2.10.3. Certain invalid XML entity definitions can corrupt a hash table key, potentially leading to subsequent logic…
CVE-2022-40303 - CVSS 7.5 (high), 2022-11-23: An issue was discovered in libxml2 before 2.10.3. When parsing a multi-gigabyte XML document with the XML_PARSE_HUGE parser option enabled, several integer…
CVE-2022-44792 - CVSS 6.5 (medium), 2022-11-07: handle_ipDefaultTTL in agent/mibgroup/ip-mib/ip_scalars.c in Net-SNMP 5.8 through 5.9.3 has a NULL Pointer Exception bug that can be used by a remote attacker…
CVE-2022-44793 - CVSS 6.5 (medium), 2022-11-07: handle_ipv6IpForwarding in agent/mibgroup/ip-mib/ip_scalars.c in Net-SNMP 5.4.3 through 5.9.3 has a NULL Pointer Exception bug that can be used by a remote…
CVE-2022-43945 - CVSS 7.5 (high), 2022-11-04: The Linux kernel NFSD implementation prior to versions 5.19.17 and 6.0.2 are vulnerable to buffer overflow. NFSD tracks the number of pages held by each NFSD…
CVE-2022-42915 - CVSS 8.1 (high), 2022-10-29: curl before 7.86.0 has a double free. If curl is told to use an HTTP proxy for a transfer with a non-HTTP(S) URL, it sets up the connection to the remote…
CVE-2022-43680 - CVSS 7.5 (high), 2022-10-24: In libexpat through 2.4.9, there is a use-after free caused by overeager destruction of a shared DTD in XML_ExternalEntityParserCreate in out-of-memory…
CVE-2022-3649 - CVSS 7 (high), 2022-10-21: A vulnerability was found in Linux Kernel. It has been classified as problematic. Affected is the function nilfs_new_inode of the file fs/nilfs2/inode.c of…
CVE-2022-3564 - CVSS 7.1 (high), 2022-10-17: A vulnerability classified as critical was found in Linux Kernel. Affected by this vulnerability is the function l2cap_reassemble_sdu of the file…
CVE-2022-3545 - CVSS 7.8 (high), 2022-10-17: A vulnerability has been found in Linux Kernel and classified as critical. Affected by this vulnerability is the function area_cache_get of the file…
CVE-2022-35252 - CVSS 3.7 (low), 2022-09-23: When curl is used to retrieve and parse cookies from a HTTP(S) server, itaccepts cookies using control codes that when later are sent back to a HTTPserver…
CVE-2022-3202 - CVSS 7.1 (high), 2022-09-14: A NULL pointer dereference flaw in diFree in fs/jfs/inode.c in Journaled File System (JFS)in the Linux kernel. This could allow a local attacker to crash the…
CVE-2022-2964 - CVSS 7.8 (high), 2022-09-09: A flaw was found in the Linux kernel’s driver for the ASIX AX88179_178A-based USB 2.0/3.0 Gigabit Ethernet Devices. The vulnerability contains multiple…
CVE-2022-2526 - CVSS 9.8 (critical), 2022-09-09: A use-after-free vulnerability was found in systemd. This issue occurs due to the on_stream_io() function and dns_stream_complete() function in…
CVE-2022-39046 - CVSS 7.5 (high), 2022-08-31: An issue was discovered in the GNU C Library (glibc) 2.36. When the syslog function is passed a crafted input string larger than 1024 bytes, it reads…
CVE-2022-2961 - CVSS 7 (high), 2022-08-29: A use-after-free flaw was found in the Linux kernel’s PLP Rose functionality in the way a user triggers a race condition by calling bind while simultaneously…
CVE-2022-1199 - CVSS 7.5 (high), 2022-08-29: A flaw was found in the Linux kernel. This flaw allows an attacker to crash the Linux kernel by simulating amateur radio from the user space, resulting in a…
CVE-2021-3998 - CVSS 7.5 (high), 2022-08-24: A flaw was found in glibc. The realpath() function can mistakenly return an unexpected value, potentially leading to information leakage and disclosure of…
CVE-2021-4204 - CVSS 7.1 (high), 2022-08-24: An out-of-bounds (OOB) memory access flaw was found in the Linux kernel's eBPF due to an Improper Input Validation. This flaw allows a local attacker with a…
CVE-2021-3999 - CVSS 7.8 (high), 2022-08-24: A flaw was found in glibc. An off-by-one buffer overflow and underflow in getcwd() may lead to memory corruption when the size of the buffer is exactly 1. A…
CVE-2022-2938 - CVSS 7.8 (high), 2022-08-23: A flaw was found in the Linux kernel's implementation of Pressure Stall Information. While the feature is disabled by default, it could allow an attacker to…
CVE-2022-2873 - CVSS 5.5 (medium), 2022-08-22: An out-of-bounds memory access flaw was found in the Linux kernel Intel’s iSMT SMBus host controller driver in the way a user triggers the…
CVE-2022-1973 - CVSS 7.1 (high), 2022-08-05: A use-after-free flaw was found in the Linux kernel in log_replay in fs/ntfs3/fslog.c in the NTFS journal. This flaw allows a local attacker to crash the…
CVE-2022-37434 - CVSS 9.8 (critical), 2022-08-05: zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field. NOTE: only applications…
CVE-2022-36123 - CVSS 7.8 (high), 2022-07-29: The Linux kernel before 5.18.13 lacks a certain clear operation for the block starting symbol (.bss). This allows Xen PV guest OS users to cause a denial of…
CVE-2022-36879 - CVSS 5.5 (medium), 2022-07-27: An issue was discovered in the Linux kernel through 5.18.14. xfrm_expand_policies in net/xfrm/xfrm_policy.c can cause a refcount to be dropped twice.