Solidfire & Hci Storage Node (Netapp) - vulnerabilities (CVEs)

27 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2025-02-05. Vendor: Netapp.

CVEs of Solidfire & Hci Storage Node

• CVE-2025-0167 - CVSS 3.4 (low), 2025-02-05: When asked to use a `.netrc` file for credentials **and** to follow HTTP redirects, curl could leak the password used for the first host to the followed-to…
• CVE-2025-0725 - CVSS 7.3 (high), 2025-02-05: When libcurl is asked to perform automatic gzip decompression of content-encoded HTTP responses with the `CURLOPT_ACCEPT_ENCODING` option, **using zlib…
• CVE-2024-40896 - CVSS 9.1 (critical), 2024-12-23: In libxml2 2.11 before 2.11.9, 2.12 before 2.12.9, and 2.13 before 2.13.3, the SAX parser can produce events for external entities even if custom SAX handlers…
• CVE-2024-50602 - CVSS 5.9 (medium), 2024-10-27: An issue was discovered in libexpat before 2.6.4. There is a crash within the XML_ResumeParser function because XML_StopParser can stop/suspend an unstarted…
• CVE-2024-36958 - CVSS 9.8 (critical), 2024-05-30: In the Linux kernel, the following vulnerability has been resolved: NFSD: Fix nfsd4_encode_fattr4() crasher Ensure that args.acl is initialized early. It is…
• CVE-2024-33602 - CVSS 7.4 (high), 2024-05-06: nscd: netgroup cache assumes NSS callback uses in-buffer strings The Name Service Cache Daemon's (nscd) netgroup cache can corrupt memory when the NSS…
• CVE-2023-5178 - CVSS 8.8 (high), 2023-11-01: A use-after-free vulnerability was found in drivers/nvme/target/tcp.c` in `nvmet_tcp_free_crypto` due to a logical bug in the NVMe/TCP subsystem in the Linux…
• CVE-2023-37920 - CVSS 9.8 (critical), 2023-07-25: Certifi is a curated collection of Root Certificates for validating the trustworthiness of SSL certificates while verifying the identity of TLS hosts. Certifi…
• CVE-2023-32257 - CVSS 8.1 (high), 2023-07-24: A flaw was found in the Linux kernel's ksmbd, a high-performance in-kernel SMB server. The specific flaw exists within the processing of SMB2_SESSION_SETUP…
• CVE-2023-38426 - CVSS 9.1 (critical), 2023-07-18: An issue was discovered in the Linux kernel before 6.3.4. ksmbd has an out-of-bounds read in smb2_find_context_vals when create_context's name_len is larger…
• CVE-2023-38432 - CVSS 9.1 (critical), 2023-07-18: An issue was discovered in the Linux kernel before 6.3.10. fs/smb/server/smb2misc.c in ksmbd does not validate the relationship between the command payload…
• CVE-2023-38428 - CVSS 9.1 (critical), 2023-07-18: An issue was discovered in the Linux kernel before 6.3.4. fs/ksmbd/smb2pdu.c in ksmbd does not properly check the UserName value because it does not consider…
• CVE-2022-36946 - CVSS 7.5 (high), 2022-07-27: nfqnl_mangle in net/netfilter/nfnetlink_queue.c in the Linux kernel through 5.18.14 allows remote attackers to cause a denial of service (panic) because, in…
• CVE-2022-2047 - CVSS 2.7 (low), 2022-07-07: In Eclipse Jetty versions 9.4.0 thru 9.4.46, and 10.0.0 thru 10.0.9, and 11.0.0 thru 11.0.9 versions, the parsing of the authority segment of an http scheme…
• CVE-2022-2048 - CVSS 7.5 (high), 2022-07-07: In Eclipse Jetty HTTP/2 server implementation, when encountering an invalid HTTP/2 request, the error handling has a bug that can wind up not properly…
• CVE-2022-27780 - CVSS 7.5 (high), 2022-06-02: The curl URL parser wrongly accepts percent-encoded URL separators like '/'when decoding the host name part of a URL, making it a *different* URL usingthe…
• CVE-2022-27775 - CVSS 7.5 (high), 2022-06-02: An information disclosure vulnerability exists in curl 7.65.0 to 7.82.0 are vulnerable that by using an IPv6 address that was in the connection pool but with…
• CVE-2022-27774 - CVSS 5.7 (medium), 2022-06-02: An insufficiently protected credentials vulnerability exists in curl 4.9 to and include curl 7.82.0 are affected that could allow an attacker to extract…
• CVE-2022-27776 - CVSS 6.5 (medium), 2022-06-02: A insufficiently protected credentials vulnerability in fixed in curl 7.83.0 might leak authentication or cookie header data on HTTP redirects to the same…
• CVE-2022-22576 - CVSS 8.1 (high), 2022-05-26: An improper authentication vulnerability exists in curl 7.33.0 to and including 7.82.0 which might allow reuse OAUTH2-authenticated connections without…
• CVE-2021-3772 - CVSS 6.5 (medium), 2022-03-02: A flaw was found in the Linux SCTP stack. A blind attacker may be able to kill an existing SCTP association through invalid chunks if the attacker knows the…
• CVE-2021-44228 - CVSS 10 (critical), 2021-12-10: Apache Log4j2 2.0-beta9 through 2.15.0 (excluding security releases 2.12.2, 2.12.3, and 2.3.1) JNDI features used in configuration, log messages, and…
• CVE-2020-29569 - CVSS 8.8 (high), 2020-12-15: An issue was discovered in the Linux kernel through 5.10.1, as used with Xen through 4.14.x. The Linux kernel PV block backend expects the kernel thread…
• CVE-2020-29374 - CVSS 3.6 (low), 2020-11-28: An issue was discovered in the Linux kernel before 5.7.3, related to mm/gup.c and mm/huge_memory.c. The get_user_pages (aka gup) implementation, when used for…
• CVE-2020-25645 - CVSS 7.5 (high), 2020-10-13: A flaw was found in the Linux kernel in versions before 5.9-rc7. Traffic between two Geneve endpoints may be unencrypted when IPsec is configured to encrypt…
• CVE-2020-12464 - CVSS 6.7 (medium), 2020-04-29: usb_sg_cancel in drivers/usb/core/message.c in the Linux kernel before 5.6.8 has a use-after-free because a transfer occurs without a reference, aka…
• CVE-2018-20836 - CVSS 8.1 (high), 2019-05-07: An issue was discovered in the Linux kernel before 4.20. There is a race condition in smp_task_timedout() and smp_task_done() in…