Service Processor (Netapp) - vulnerabilities (CVEs)
13 CVEs, 0 in the last 30 days, 61 known versions, newest CVE from 2021-01-04. Vendor: Netapp.
CVEs of Service Processor
- CVE-2019-25013 - CVSS 5.9 (medium), 2021-01-04: The iconv feature in the GNU C Library (aka glibc or libc6) through 2.32, when processing invalid multi-byte input sequences in the EUC-KR encoding, may have…
- CVE-2019-2215 - CVSS 7.8 (high), 2019-10-11: A use-after-free in binder.c allows an elevation of privilege from an application to the Linux Kernel. No user interaction is required to exploit this…
- CVE-2019-16995 - CVSS 7.5 (high), 2019-09-30: In the Linux kernel before 5.0.3, a memory leak exits in hsr_dev_finalize() in net/hsr/hsr_device.c if hsr_add_port fails to add a port, which may cause…
- CVE-2019-14816 - CVSS 7.8 (high), 2019-09-20: There is heap-based buffer overflow in kernel, all versions up to, excluding 5.3, in the marvell wifi chip driver in Linux kernel, that allows local users to…
- CVE-2019-14814 - CVSS 7.8 (high), 2019-09-20: There is heap-based buffer overflow in Linux kernel, all versions up to, excluding 5.3, in the marvell wifi chip driver in Linux kernel, that allows local…
- CVE-2019-14835 - CVSS 7.8 (high), 2019-09-17: A buffer overflow flaw was found, in versions from 2.6.34 to 5.2.x, in the way Linux kernel's vhost functionality that translates virtqueue buffers to IOVs,…
- CVE-2019-15902 - CVSS 5.6 (medium), 2019-09-04: A backporting error was discovered in the Linux stable/longterm kernel 4.4.x through 4.4.190, 4.9.x through 4.9.190, 4.14.x through 4.14.141, 4.19.x through…
- CVE-2019-13272 - CVSS 7.8 (high), 2019-07-17: In the Linux kernel before 5.1.17, ptrace_link in kernel/ptrace.c mishandles the recording of the credentials of a process that wants to create a ptrace…
- CVE-2019-5490 - CVSS 9.8 (critical), 2019-03-21: Certain versions between 2.x to 5.x (refer to advisory) of the NetApp Service Processor firmware were shipped with a default account enabled that could allow…
- CVE-2019-1559 - CVSS 5.9 (medium), 2019-02-27: If an application encounters a fatal protocol error and then calls SSL_shutdown() twice (once to send a close_notify, and once to receive one) then OpenSSL…
- CVE-2018-15473 - CVSS 5.9 (medium), 2018-08-17: OpenSSH through 7.7 is prone to a user enumeration vulnerability due to not delaying bailout for an invalid authenticating user until after the packet…
- CVE-2016-10708 - CVSS 7.5 (high), 2018-01-21: sshd in OpenSSH before 7.4 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via an out-of-sequence NEWKEYS…
- CVE-2016-8610 - CVSS 7.5 (high), 2017-11-13: A denial of service flaw was found in OpenSSL 0.9.8, 1.0.1, 1.0.2 through 1.0.2h, and 1.1.0 in the way the TLS/SSL protocol defined processing of ALERT…
