Solidfire (Netapp) - vulnerabilities (CVEs)

192 CVEs, 0 in the last 30 days, 2 known versions, newest CVE from 2024-04-13. Vendor: Netapp.

CVEs of Solidfire

• CVE-2024-32487 - CVSS 8.6 (high), 2024-04-13: less through 653 allows OS command execution via a newline character in the name of a file, because quoting is mishandled in filename.c. Exploitation…
• CVE-2023-38432 - CVSS 9.1 (critical), 2023-07-18: An issue was discovered in the Linux kernel before 6.3.10. fs/smb/server/smb2misc.c in ksmbd does not validate the relationship between the command payload…
• CVE-2022-35252 - CVSS 3.7 (low), 2022-09-23: When curl is used to retrieve and parse cookies from a HTTP(S) server, itaccepts cookies using control codes that when later are sent back to a HTTPserver…
• CVE-2022-21549 - CVSS 5.3 (medium), 2022-07-19: Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries). Supported versions that are affected…
• CVE-2022-21541 - CVSS 5.9 (medium), 2022-07-19: Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot). Supported versions that are affected…
• CVE-2022-21540 - CVSS 5.3 (medium), 2022-07-19: Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot). Supported versions that are affected…
• CVE-2022-34169 - CVSS 7.5 (high), 2022-07-19: The Apache Xalan Java XSLT library is vulnerable to an integer truncation issue when processing malicious XSLT stylesheets. This can be used to corrupt Java…
• CVE-2022-32206 - CVSS 6.5 (medium), 2022-07-07: curl < 7.84.0 supports "chained" HTTP compression algorithms, meaning that a serverresponse can be compressed multiple times and potentially with different…
• CVE-2022-32205 - CVSS 4.3 (medium), 2022-07-07: A malicious server can serve excessive amounts of `Set-Cookie:` headers in a HTTP response to curl and curl < 7.84.0 stores all of them. A sufficiently large…
• CVE-2022-32208 - CVSS 5.9 (medium), 2022-07-07: When curl < 7.84.0 does FTP transfers secured by krb5, it handles message verification failures wrongly. This flaw makes it possible for a Man-In-The-Middle…
• CVE-2022-32207 - CVSS 9.8 (critical), 2022-07-07: When curl < 7.84.0 saves cookies, alt-svc and hsts data to local files, it makes the operation atomic by finalizing the operation with a rename from a…
• CVE-2022-2068 - CVSS 9.8 (critical), 2022-06-21: In addition to the c_rehash shell command injection identified in CVE-2022-1292, further circumstances where the c_rehash script does not properly sanitise…
• CVE-2022-1678 - CVSS 7.5 (high), 2022-05-25: An issue was discovered in the Linux Kernel from 4.18 to 4.19, an improper update of sock reference in TCP pacing can lead to memory/netns leak, which can be…
• CVE-2022-1587 - CVSS 9.1 (critical), 2022-05-16: An out-of-bounds read vulnerability was discovered in the PCRE2 library in the get_recurse_data_length() function of the pcre2_jit_compile.c file. This issue…
• CVE-2022-1586 - CVSS 9.1 (critical), 2022-05-16: An out-of-bounds read vulnerability was discovered in the PCRE2 library in the compile_xclass_matchingpath() function of the pcre2_jit_compile.c file. This…
• CVE-2022-1619 - CVSS 7.8 (high), 2022-05-08: Heap-based Buffer Overflow in function cmdline_erase_chars in GitHub repository vim/vim prior to 8.2.4899. This vulnerabilities are capable of crashing…
• CVE-2022-21496 - CVSS 5.3 (medium), 2022-04-19: Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JNDI). Supported versions that are affected are…
• CVE-2022-21476 - CVSS 7.5 (high), 2022-04-19: Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries). Supported versions that are affected…
• CVE-2022-21443 - CVSS 3.7 (low), 2022-04-19: Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries). Supported versions that are affected…
• CVE-2021-4203 - CVSS 6.8 (medium), 2022-03-25: A use-after-free read flaw was found in sock_getsockopt() in net/core/sock.c due to SO_PEERCRED and SO_PEERGROUPS race with listen() (and connect()) in the…
• CVE-2021-3753 - CVSS 4.7 (medium), 2022-02-16: A race problem was seen in the vt_k_ioctl in drivers/tty/vt/vt_ioctl.c in the Linux kernel, which may cause an out of bounds read in vt as the write access to…
• CVE-2022-21365 - CVSS 5.3 (medium), 2022-01-19: Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: ImageIO). Supported versions that are affected…
• CVE-2022-21360 - CVSS 5.3 (medium), 2022-01-19: Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: ImageIO). Supported versions that are affected…
• CVE-2022-21349 - CVSS 5.3 (medium), 2022-01-19: Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: 2D). Supported versions that are affected are…
• CVE-2022-21366 - CVSS 5.3 (medium), 2022-01-19: Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: ImageIO). Supported versions that are affected…
• CVE-2022-21341 - CVSS 5.3 (medium), 2022-01-19: Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Serialization). Supported versions that are…
• CVE-2022-21340 - CVSS 5.3 (medium), 2022-01-19: Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries). Supported versions that are affected…
• CVE-2022-21305 - CVSS 5.3 (medium), 2022-01-19: Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot). Supported versions that are affected…
• CVE-2022-21293 - CVSS 5.3 (medium), 2022-01-19: Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries). Supported versions that are affected…
• CVE-2022-21299 - CVSS 5.3 (medium), 2022-01-19: Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP). Supported versions that are affected are…
• CVE-2022-21291 - CVSS 5.3 (medium), 2022-01-19: Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot). Supported versions that are affected…
• CVE-2022-21296 - CVSS 5.3 (medium), 2022-01-19: Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP). Supported versions that are affected are…
• CVE-2022-21294 - CVSS 5.3 (medium), 2022-01-19: Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries). Supported versions that are affected…
• CVE-2022-21282 - CVSS 5.3 (medium), 2022-01-19: Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP). Supported versions that are affected are…
• CVE-2022-21277 - CVSS 5.3 (medium), 2022-01-19: Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: ImageIO). Supported versions that are affected…
• CVE-2022-21271 - CVSS 5.3 (medium), 2022-01-19: Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries). Supported versions that are affected…
• CVE-2022-21283 - CVSS 5.3 (medium), 2022-01-19: Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries). Supported versions that are affected…
• CVE-2022-21248 - CVSS 3.7 (low), 2022-01-19: Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Serialization). Supported versions that are…
• CVE-2021-4083 - CVSS 7 (high), 2022-01-18: A read-after-free memory flaw was found in the Linux kernel's garbage collection for Unix domain socket file handlers in the way users call close() and fget()…
• CVE-2021-43818 - CVSS 8.2 (high), 2021-12-13: lxml is a library for processing XML and HTML in the Python language. Prior to version 4.6.5, the HTML Cleaner in lxml.html lets certain crafted script…
• CVE-2021-42373 - CVSS 5.5 (medium), 2021-11-15: A NULL pointer dereference in Busybox's man applet leads to denial of service when a section name is supplied but no page argument is given
• CVE-2021-42376 - CVSS 5.5 (medium), 2021-11-15: A NULL pointer dereference in Busybox's hush applet leads to denial of service when processing a crafted shell command, due to missing validation after a \x03…
• CVE-2021-42375 - CVSS 5.5 (medium), 2021-11-15: An incorrect handling of a special element in Busybox's ash applet leads to denial of service when processing a crafted shell command, due to the shell…
• CVE-2021-42374 - CVSS 5.3 (medium), 2021-11-15: An out-of-bounds heap read in Busybox's unlzma applet leads to information leak and denial of service when crafted LZMA-compressed input is decompressed. This…
• CVE-2021-42377 - CVSS 9.8 (critical), 2021-11-15: An attacker-controlled pointer free in Busybox's hush applet leads to denial of service and possible code execution when processing a crafted shell command,…
• CVE-2021-35603 - CVSS 3.7 (low), 2021-10-20: Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). Supported versions that are affected are Java SE:…
• CVE-2021-35586 - CVSS 5.3 (medium), 2021-10-20: Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: ImageIO). Supported versions that are affected are Java…
• CVE-2021-35588 - CVSS 3.1 (low), 2021-10-20: Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot). Supported versions that are affected are Java…
• CVE-2021-35578 - CVSS 5.3 (medium), 2021-10-20: Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). Supported versions that are affected are Java SE:…
• CVE-2021-35567 - CVSS 6.8 (medium), 2021-10-20: Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries). Supported versions that are affected are…
• CVE-2021-35565 - CVSS 5.3 (medium), 2021-10-20: Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). Supported versions that are affected are Java SE:…
• CVE-2021-35564 - CVSS 5.3 (medium), 2021-10-20: Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Keytool). Supported versions that are affected are Java…
• CVE-2021-35561 - CVSS 5.3 (medium), 2021-10-20: Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Utility). Supported versions that are affected are Java…
• CVE-2021-35559 - CVSS 5.3 (medium), 2021-10-20: Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Swing). Supported versions that are affected are Java…
• CVE-2021-35556 - CVSS 5.3 (medium), 2021-10-20: Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Swing). Supported versions that are affected are Java…
• CVE-2021-35550 - CVSS 5.9 (medium), 2021-10-20: Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). Supported versions that are affected are Java SE:…
• CVE-2021-41864 - CVSS 7.8 (high), 2021-10-02: prealloc_elems_and_freelist in kernel/bpf/stackmap.c in the Linux kernel before 5.14.12 allows unprivileged users to trigger an eBPF multiplication integer…
• CVE-2021-41617 - CVSS 7 (high), 2021-09-26: sshd in OpenSSH 6.2 through 8.x before 8.8, when certain non-default configurations are used, allows privilege escalation because supplemental groups are not…
• CVE-2016-20012 - CVSS 5.3 (medium), 2021-09-15: OpenSSH through 8.7 allows remote attackers, who have a suspicion that a certain combination of username and public key is known to an SSH server, to test…
• CVE-2021-3711 - CVSS 9.8 (critical), 2021-08-24: In order to decrypt SM2 encrypted data an application is expected to call the API function EVP_PKEY_decrypt(). Typically an application will call this…
• CVE-2021-3712 - CVSS 7.4 (high), 2021-08-24: ASN.1 strings are represented internally within OpenSSL as an ASN1_STRING structure which contains a buffer holding the string data and a field holding the…
• CVE-2021-38201 - CVSS 7.5 (high), 2021-08-08: net/sunrpc/xdr.c in the Linux kernel before 5.13.4 allows remote attackers to cause a denial of service (xdr_set_page_base slab-out-of-bounds access) by…
• CVE-2021-38199 - CVSS 6.5 (medium), 2021-08-08: fs/nfs/nfs4client.c in the Linux kernel before 5.13.4 has incorrect connection-setup ordering, which allows operators of remote NFSv4 servers to cause a…
• CVE-2021-38203 - CVSS 5.5 (medium), 2021-08-08: btrfs in the Linux kernel before 5.13.4 allows attackers to cause a denial of service (deadlock) via processes that trigger allocation of new system chunks…
• CVE-2021-38202 - CVSS 7.5 (high), 2021-08-08: fs/nfsd/trace.h in the Linux kernel before 5.13.4 might allow remote attackers to cause a denial of service (out-of-bounds read in strlen) by sending NFS…
• CVE-2021-38160 - CVSS 7.8 (high), 2021-08-07: In drivers/char/virtio_console.c in the Linux kernel before 5.13.4, data corruption or loss can be triggered by an untrusted device that supplies a buf->len…
• CVE-2021-22926 - CVSS 7.5 (high), 2021-08-05: libcurl-using applications can ask for a specific client certificate to be used in a transfer. This is done with the `CURLOPT_SSLCERT` option (`--cert` with…
• CVE-2021-22925 - CVSS 5.3 (medium), 2021-08-05: curl supports the `-t` command line option, known as `CURLOPT_TELNETOPTIONS`in libcurl. This rarely used option is used to send variable=content pairs…
• CVE-2021-22923 - CVSS 5.3 (medium), 2021-08-05: When curl is instructed to get content using the metalink feature, and a user name and password are used to download the metalink XML file, those same…
• CVE-2021-22922 - CVSS 6.5 (medium), 2021-08-05: When curl is instructed to download content using the metalink feature, thecontents is verified against a hash provided in the metalink XML file.The metalink…
• CVE-2021-35942 - CVSS 9.1 (critical), 2021-07-22: The wordexp function in the GNU C Library (aka glibc) through 2.33 may crash or read arbitrary memory in parse_param (in posix/wordexp.c) when called with an…
• CVE-2021-33910 - CVSS 5.5 (medium), 2021-07-20: basic/unit-name.c in systemd prior to 246.15, 247.8, 248.5, and 249.1 has a Memory Allocation with an Excessive Size Value (involving strdupa and alloca for a…
• CVE-2021-33909 - CVSS 7.8 (high), 2021-07-20: fs/seq_file.c in the Linux kernel 3.16 through 5.13.x before 5.13.4 does not properly restrict seq buffer allocations, leading to an integer overflow, an…
• CVE-2021-34429 - CVSS 5.3 (medium), 2021-07-15: For Eclipse Jetty versions 9.4.37-9.4.42, 10.0.1-10.0.5 & 11.0.1-11.0.5, URIs can be crafted using some encoded characters to access the content of the…
• CVE-2021-22555 - CVSS 8.3 (high), 2021-07-07: A heap out-of-bounds write affecting Linux since v2.6.19-rc1 was discovered in net/netfilter/x_tables.c. This allows an attacker to gain privileges or cause a…
• CVE-2021-3522 - CVSS 5.5 (medium), 2021-06-02: GStreamer before 1.18.4 may perform an out-of-bounds read when handling certain ID3v2 tags.
• CVE-2021-3517 - CVSS 8.6 (high), 2021-05-19: There is a flaw in the xml entity encoding functionality of libxml2 in versions before 2.9.11. An attacker who is able to supply a crafted file to be…
• CVE-2021-2163 - CVSS 5.3 (medium), 2021-04-22: Vulnerability in the Java SE, Java SE Embedded, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries). Supported versions that…
• CVE-2021-2161 - CVSS 5.9 (medium), 2021-04-22: Vulnerability in the Java SE, Java SE Embedded, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries). Supported versions that…
• CVE-2021-29154 - CVSS 7.8 (high), 2021-04-08: BPF JIT compilers in the Linux kernel through 5.11.12 have incorrect computation of branch displacements, allowing them to execute arbitrary code within the…
• CVE-2021-22890 - CVSS 4.3 (medium), 2021-04-01: curl 7.63.0 to and including 7.75.0 includes vulnerability that allows a malicious HTTPS proxy to MITM a connection due to bad handling of TLS 1.3 session…
• CVE-2021-22876 - CVSS 5.3 (medium), 2021-04-01: curl 7.1.1 to and including 7.75.0 is vulnerable to an "Exposure of Private Personal Information to an Unauthorized Actor" by leaking credentials in the HTTP…
• CVE-2021-28041 - CVSS 7.1 (high), 2021-03-05: ssh-agent in OpenSSH before 8.5 has a double free that may be relevant in a few less-common scenarios, such as unconstrained agent-socket access on a legacy…
• CVE-2020-27223 - CVSS 5.3 (medium), 2021-02-26: In Eclipse Jetty 9.4.6.v20170531 to 9.4.36.v20210114 (inclusive), 10.0.0, and 11.0.0 when Jetty handles a request containing multiple Accept headers with a…
• CVE-2021-3156 - CVSS 7.8 (high), 2021-01-26: Sudo before 1.9.5p2 contains an off-by-one error that can result in a heap-based buffer overflow, which allows privilege escalation to root via "sudoedit -s"…
• CVE-2021-23239 - CVSS 2.5 (low), 2021-01-12: The sudoedit personality of Sudo before 1.9.5 may allow a local unprivileged user to perform arbitrary directory-existence tests by winning a sudo_edit.c race…
• CVE-2021-23240 - CVSS 7.8 (high), 2021-01-12: selinux_edit_copy_tfiles in sudoedit in Sudo before 1.9.5 allows a local unprivileged user to gain file ownership and escalate privileges by replacing a…
• CVE-2020-8584 - CVSS 9.8 (critical), 2021-01-08: Element OS versions prior to 1.8P1 and 12.2 are susceptible to a vulnerability that could allow an unauthenticated remote attacker to perform arbitrary code…
• CVE-2020-8286 - CVSS 7.5 (high), 2020-12-14: curl 7.41.0 through 7.73.0 is vulnerable to an improper check for certificate revocation due to insufficient verification of the OCSP response.
• CVE-2020-8285 - CVSS 7.5 (high), 2020-12-14: curl 7.21.0 to and including 7.73.0 is vulnerable to uncontrolled recursion due to a stack overflow issue in FTP wildcard match parsing.
• CVE-2020-8284 - CVSS 3.7 (low), 2020-12-14: A malicious server can use the FTP PASV response to trick curl 7.73.0 and earlier into connecting back to a given IP address and port, and this way…
• CVE-2020-16599 - CVSS 5.5 (medium), 2020-12-09: A Null Pointer Dereference vulnerability exists in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.35, in…
• CVE-2020-1971 - CVSS 5.9 (medium), 2020-12-08: The X.509 GeneralName type is a generic type for representing different types of names. One of those name types is known as EDIPartyName. OpenSSL provides a…
• CVE-2020-29369 - CVSS 7 (high), 2020-11-28: An issue was discovered in mm/mmap.c in the Linux kernel before 5.7.11. There is a race condition between certain expand functions (expand_downwards and…
• CVE-2020-29368 - CVSS 7 (high), 2020-11-28: An issue was discovered in __split_huge_pmd in mm/huge_memory.c in the Linux kernel before 5.7.5. The copy-on-write implementation can grant unintended write…
• CVE-2019-17006 - CVSS 9.8 (critical), 2020-10-22: In Network Security Services (NSS) before 3.46, several cryptographic primitives had missing length checks. In cases where the application calling the library…
• CVE-2020-14803 - CVSS 5.3 (medium), 2020-10-21: Vulnerability in the Java SE product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 11.0.8 and 15. Easily…
• CVE-2020-14797 - CVSS 3.7 (low), 2020-10-21: Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u271,…
• CVE-2020-14796 - CVSS 3.1 (low), 2020-10-21: Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u271,…
• CVE-2020-14792 - CVSS 4.2 (medium), 2020-10-21: Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Hotspot). Supported versions that are affected are Java SE: 7u271, 8u261,…