Hci Baseboard Management Controller (Netapp) - vulnerabilities (CVEs)

39 CVEs, 0 in the last 30 days, 12 known versions, newest CVE from 2025-02-05. Vendor: Netapp.

CVEs of Hci Baseboard Management Controller

CVE-2025-0725 - CVSS 7.3 (high), 2025-02-05: When libcurl is asked to perform automatic gzip decompression of content-encoded HTTP responses with the `CURLOPT_ACCEPT_ENCODING` option, **using zlib…
CVE-2023-50868 - CVSS 7.5 (high), 2024-02-14: The Closest Encloser Proof aspect of the DNS protocol (in RFC 5155 when RFC 9276 guidance is skipped) allows remote attackers to cause a denial of service…
CVE-2023-3141 - CVSS 7.1 (high), 2023-06-09: A use-after-free flaw was found in r592_remove in drivers/memstick/host/r592.c in media access in the Linux Kernel. This flaw allows a local attacker to crash…
CVE-2023-2598 - CVSS 7.8 (high), 2023-06-01: A flaw was found in the fixed buffer registration code for io_uring (io_sqe_buffer_register in io_uring/rsrc.c) in the Linux kernel that allows out-of-bounds…
CVE-2023-32233 - CVSS 7.8 (high), 2023-05-08: In the Linux kernel through 6.3.1, a use-after-free in Netfilter nf_tables when processing batch requests can be abused to perform arbitrary read and write…
CVE-2023-2236 - CVSS 7.8 (high), 2023-05-01: A use-after-free vulnerability in the Linux Kernel io_uring subsystem can be exploited to achieve local privilege escalation. Both io_install_fixed_file and…
CVE-2023-2006 - CVSS 7 (high), 2023-04-24: A race condition was found in the Linux kernel's RxRPC network protocol, within the processing of RxRPC bundles. This issue results from the lack of proper…
CVE-2023-1989 - CVSS 7.1 (high), 2023-04-11: A use-after-free flaw was found in btsdio_remove in drivers\bluetooth\btsdio.c in the Linux Kernel. A call to btsdio_remove with an unfinished job may cause a…
CVE-2023-26607 - CVSS 7.1 (high), 2023-02-26: In the Linux kernel 6.0.8, there is an out-of-bounds read in ntfs_attr_find in fs/ntfs/attrib.c.
CVE-2022-26872 - CVSS 8.8 (high), 2023-01-30: AMI Megarac Password reset interception via API
CVE-2022-41858 - CVSS 7.1 (high), 2023-01-17: A flaw was found in the Linux kernel. A NULL pointer dereference may occur while a slip driver is in progress to detach in sl_tx_timeout in…
CVE-2023-23559 - CVSS 7.8 (high), 2023-01-13: In rndis_query_oid in drivers/net/wireless/rndis_wlan.c in the Linux kernel through 6.1.5, there is an integer overflow in an addition.
CVE-2022-3996 - CVSS 7.5 (high), 2022-12-13: If an X.509 certificate contains a malformed policy constraint and policy processing is enabled, then a write lock will be taken twice recursively. On some…
CVE-2022-41222 - CVSS 7 (high), 2022-09-21: mm/mremap.c in the Linux kernel before 5.13.3 has a use-after-free via a stale TLB because an rmap lock is not held during a PUD move.
CVE-2022-39189 - CVSS 7.8 (high), 2022-09-02: An issue was discovered the x86 KVM subsystem in the Linux kernel before 5.18.17. Unprivileged guest users can compromise the guest kernel because TLB flush…
CVE-2022-1729 - CVSS 7 (high), 2022-09-01: A race condition was found the Linux kernel in perf_event_open() which can be exploited by an unprivileged user to gain root privileges. The bug allows to…
CVE-2022-2097 - CVSS 5.3 (medium), 2022-07-05: AES OCB mode for 32-bit x86 platforms using the AES-NI assembly optimised implementation will not encrypt the entirety of the data under some circumstances.…
CVE-2022-27780 - CVSS 7.5 (high), 2022-06-02: The curl URL parser wrongly accepts percent-encoded URL separators like '/'when decoding the host name part of a URL, making it a *different* URL usingthe…
CVE-2022-28390 - CVSS 7.8 (high), 2022-04-03: ems_usb_start_xmit in drivers/net/can/usb/ems_usb.c in the Linux kernel through 5.17.1 has a double free.
CVE-2021-4154 - CVSS 8.8 (high), 2022-02-04: A use-after-free flaw was found in cgroup1_parse_param in kernel/cgroup/cgroup-v1.c in the Linux kernel's cgroup v1 parser. A local attacker with a user…
CVE-2021-46143 - CVSS 8.1 (high), 2022-01-06: In doProlog in xmlparse.c in Expat (aka libexpat) before 2.4.3, an integer overflow exists for m_groupSize.
CVE-2021-45960 - CVSS 8.8 (high), 2022-01-01: In Expat (aka libexpat) before 2.4.3, a left shift by 29 (or more) places in the storeAtts function in xmlparse.c can lead to realloc misbehavior (e.g.,…
CVE-2020-12659 - CVSS 6.7 (medium), 2020-05-05: An issue was discovered in the Linux kernel before 5.6.7. xdp_umem_reg in net/xdp/xdp_umem.c has an out-of-bounds write (by a user with the CAP_NET_ADMIN…
CVE-2020-11023 - CVSS 6.9 (medium), 2020-04-29: In jQuery versions greater than or equal to 1.0.3 and before 3.5.0, passing HTML containing <option> elements from untrusted sources - even after sanitizing…
CVE-2020-12465 - CVSS 6.7 (medium), 2020-04-29: An array overflow was discovered in mt76_add_fragment in drivers/net/wireless/mediatek/mt76/dma.c in the Linux kernel before 5.5.10, aka CID-b102f0c522cf. An…
CVE-2020-12464 - CVSS 6.7 (medium), 2020-04-29: usb_sg_cancel in drivers/usb/core/message.c in the Linux kernel before 5.6.8 has a use-after-free because a transfer occurs without a reference, aka…
CVE-2020-8648 - CVSS 7.1 (high), 2020-02-06: There is a use-after-free vulnerability in the Linux kernel through 5.5.2 in the n_tty_receive_buf_common function in drivers/tty/n_tty.c.
CVE-2019-19966 - CVSS 4.6 (medium), 2019-12-25: In the Linux kernel before 5.1.6, there is a use-after-free in cpia2_exit() in drivers/media/usb/cpia2/cpia2_v4l.c that will cause denial of service, aka…
CVE-2019-19947 - CVSS 4.6 (medium), 2019-12-24: In the Linux kernel through 5.4.6, there are information leaks of uninitialized memory to a USB device in the drivers/net/can/usb/kvaser_usb/kvaser_usb_leaf.c…
CVE-2019-19922 - CVSS 5.5 (medium), 2019-12-22: kernel/sched/fair.c in the Linux kernel before 5.3.9, when cpu.cfs_quota_us is used (e.g., with Kubernetes), allows attackers to cause a denial of service…
CVE-2019-19447 - CVSS 7.8 (high), 2019-12-08: In the Linux kernel 5.0.21, mounting a crafted ext4 filesystem image, performing some operations, and unmounting can lead to a use-after-free in…
CVE-2019-19061 - CVSS 7.5 (high), 2019-11-18: A memory leak in the adis_update_scan_mode_burst() function in drivers/iio/imu/adis_buffer.c in the Linux kernel before 5.3.9 allows attackers to cause a…
CVE-2019-19060 - CVSS 7.5 (high), 2019-11-18: A memory leak in the adis_update_scan_mode() function in drivers/iio/imu/adis_buffer.c in the Linux kernel before 5.3.9 allows attackers to cause a denial of…
CVE-2019-19057 - CVSS 3.3 (low), 2019-11-18: Two memory leaks in the mwifiex_pcie_init_evt_ring() function in drivers/net/wireless/marvell/mwifiex/pcie.c in the Linux kernel through 5.3.11 allow…
CVE-2019-19063 - CVSS 4.6 (medium), 2019-11-18: Two memory leaks in the rtl_usb_probe() function in drivers/net/wireless/realtek/rtlwifi/usb.c in the Linux kernel through 5.3.11 allow attackers to cause a…
CVE-2019-19054 - CVSS 4.7 (medium), 2019-11-18: A memory leak in the cx23888_ir_probe() function in drivers/media/pci/cx23885/cx23888-ir.c in the Linux kernel through 5.3.11 allows attackers to cause a…
CVE-2019-19053 - CVSS 7.5 (high), 2019-11-18: A memory leak in the rpmsg_eptdev_write_iter() function in drivers/rpmsg/rpmsg_char.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of…
CVE-2019-19052 - CVSS 7.5 (high), 2019-11-18: A memory leak in the gs_can_open() function in drivers/net/can/usb/gs_usb.c in the Linux kernel before 5.3.11 allows attackers to cause a denial of service…
CVE-2019-19044 - CVSS 7.5 (high), 2019-11-18: Two memory leaks in the v3d_submit_cl_ioctl() function in drivers/gpu/drm/v3d/v3d_gem.c in the Linux kernel before 5.3.11 allow attackers to cause a denial of…