Solidfire Baseboard Management Controller Firmware (Netapp) - vulnerabilities (CVEs)

71 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2021-10-11. Vendor: Netapp.

CVEs of Solidfire Baseboard Management Controller Firmware

• CVE-2021-42252 - CVSS 7.8 (high), 2021-10-11: An issue was discovered in aspeed_lpc_ctrl_mmap in drivers/soc/aspeed/aspeed-lpc-ctrl.c in the Linux kernel before 5.14.6. Local attackers able to access the…
• CVE-2021-42008 - CVSS 7.8 (high), 2021-10-05: The decode_data function in drivers/net/hamradio/6pack.c in the Linux kernel before 5.13.13 has a slab out-of-bounds write. Input from a process that has the…
• CVE-2021-41864 - CVSS 7.8 (high), 2021-10-02: prealloc_elems_and_freelist in kernel/bpf/stackmap.c in the Linux kernel before 5.14.12 allows unprivileged users to trigger an eBPF multiplication integer…
• CVE-2021-22946 - CVSS 7.5 (high), 2021-09-29: A user can tell curl >= 7.20.0 and <= 7.78.0 to require a successful upgrade to TLS when speaking to an IMAP, POP3 or FTP server (`--ssl-reqd` on the command…
• CVE-2021-22947 - CVSS 5.9 (medium), 2021-09-29: When curl >= 7.20.0 and <= 7.78.0 connects to an IMAP or POP3 server to retrieve data using STARTTLS to upgrade to TLS security, the server can respond and…
• CVE-2021-22945 - CVSS 9.1 (critical), 2021-09-23: When sending data to an MQTT server, libcurl <= 7.73.0 and 7.78.0 could in some circumstances erroneously keep a pointer to an already freed memory area and…
• CVE-2021-22924 - CVSS 3.7 (low), 2021-08-05: libcurl keeps previously used connections in a connection pool for subsequenttransfers to reuse, if one of them matches the setup.Due to errors in the logic,…
• CVE-2021-3612 - CVSS 7.8 (high), 2021-07-09: An out-of-bounds memory write flaw was found in the Linux kernel's joystick devices subsystem in versions before 5.9-rc1, in the way the user calls ioctl…
• CVE-2021-22901 - CVSS 8.1 (high), 2021-06-11: curl 7.75.0 through 7.76.1 suffers from a use-after-free vulnerability resulting in already freed memory being used when a TLS 1.3 session ticket arrives over…
• CVE-2021-22897 - CVSS 5.3 (medium), 2021-06-11: curl 7.61.0 through 7.76.1 suffers from exposure of data element to wrong session due to a mistake in the code for CURLOPT_SSL_CIPHER_LIST when libcurl is…
• CVE-2019-25045 - CVSS 7.8 (high), 2021-06-07: An issue was discovered in the Linux kernel before 5.0.19. The XFRM subsystem has a use-after-free, related to an xfrm_state_fini panic, aka CID-dbb2483b2a46.
• CVE-2020-25668 - CVSS 7 (high), 2021-05-26: A flaw was found in Linux Kernel because access to the global variable fg_console is not properly synchronized leading to a use after free in con_font_op.
• CVE-2020-25671 - CVSS 7.8 (high), 2021-05-26: A vulnerability was found in Linux Kernel, where a refcount leak in llcp_sock_connect() causing use-after-free which might lead to privilege escalations.
• CVE-2020-25670 - CVSS 7.8 (high), 2021-05-26: A vulnerability was found in Linux Kernel where refcount leak in llcp_sock_bind() causing use-after-free which might lead to privilege escalations.
• CVE-2021-22543 - CVSS 8.7 (high), 2021-05-26: An issue was discovered in Linux: KVM through Improper handling of VM_IO|VM_PFNMAP vmas in KVM can bypass RO checks and can lead to pages being freed while…
• CVE-2020-25673 - CVSS 5.5 (medium), 2021-05-26: A vulnerability was found in Linux kernel where non-blocking socket in llcp_sock_connect() leads to leak and eventually hanging-up the system.
• CVE-2021-33574 - CVSS 9.8 (critical), 2021-05-25: The mq_notify function in the GNU C Library (aka glibc) versions 2.32 and 2.33 has a use-after-free. It may use the notification thread attributes object…
• CVE-2020-25672 - CVSS 7.5 (high), 2021-05-25: A memory leak vulnerability was found in Linux kernel in llcp_sock_connect
• CVE-2021-31440 - CVSS 8.8 (high), 2021-05-21: This vulnerability allows local attackers to escalate privileges on affected installations of Linux Kernel 5.11.15. An attacker must first obtain the ability…
• CVE-2019-25044 - CVSS 7.8 (high), 2021-05-14: The block subsystem in the Linux kernel before 5.2 has a use-after-free that can lead to arbitrary code execution in the kernel context and privilege…
• CVE-2021-23134 - CVSS 7.8 (high), 2021-05-12: Use After Free vulnerability in nfc sockets in the Linux Kernel before 5.12.4 allows local attackers to elevate their privileges. In typical configurations,…
• CVE-2021-32399 - CVSS 7 (high), 2021-05-10: net/bluetooth/hci_request.c in the Linux kernel through 5.12.2 has a race condition for removal of the HCI controller.
• CVE-2020-35519 - CVSS 7.8 (high), 2021-05-06: An out-of-bounds (OOB) memory access flaw was found in x25_bind in net/x25/af_x25.c in the Linux kernel version v5.12-rc5. A bounds check failure allows a…
• CVE-2021-3501 - CVSS 7.1 (high), 2021-05-06: A flaw was found in the Linux kernel in versions before 5.12. The value of internal.ndata, in the KVM API, is mapped to an array index, which can be updated…
• CVE-2021-23133 - CVSS 7 (high), 2021-04-22: A race condition in Linux kernel SCTP sockets (net/sctp/socket.c) before 5.12-rc8 can lead to kernel privilege escalation from the context of a network…
• CVE-2021-3506 - CVSS 7.1 (high), 2021-04-19: An out-of-bounds (OOB) memory access flaw was found in fs/f2fs/node.c in the f2fs module in the Linux kernel in versions before 5.12.0-rc4. A bounds check…
• CVE-2021-28972 - CVSS 6.7 (medium), 2021-03-22: In drivers/pci/hotplug/rpadlpar_sysfs.c in the Linux kernel through 5.11.8, the RPA PCI Hotplug driver has a user-tolerable buffer overflow when writing a new…
• CVE-2021-28971 - CVSS 5.5 (medium), 2021-03-22: In intel_pmu_drain_pebs_nhm in arch/x86/events/intel/ds.c in the Linux kernel through 5.11.8 on some Haswell CPUs, userspace applications (such as…
• CVE-2021-28964 - CVSS 4.7 (medium), 2021-03-22: A race condition was discovered in get_old_root in fs/btrfs/ctree.c in the Linux kernel through 5.11.8. It allows attackers to cause a denial of service (BUG)…
• CVE-2021-28952 - CVSS 7.8 (high), 2021-03-20: An issue was discovered in the Linux kernel through 5.11.8. The sound/soc/qcom/sdm845.c soundwire device driver has a buffer overflow when an unexpected port…
• CVE-2021-28951 - CVSS 5.5 (medium), 2021-03-20: An issue was discovered in fs/io_uring.c in the Linux kernel through 5.11.8. It allows attackers to cause a denial of service (deadlock) because exit may be…
• CVE-2021-28660 - CVSS 8.8 (high), 2021-03-17: rtw_wx_set_scan in drivers/staging/rtl8188eu/os_dep/ioctl_linux.c in the Linux kernel through 5.11.6 allows writing beyond the end of the ->ssid[] array.…
• CVE-2021-28375 - CVSS 7.8 (high), 2021-03-15: An issue was discovered in the Linux kernel through 5.11.6. fastrpc_internal_invoke in drivers/misc/fastrpc.c does not prevent user applications from sending…
• CVE-2021-27365 - CVSS 7.8 (high), 2021-03-07: An issue was discovered in the Linux kernel through 5.11.3. Certain iSCSI data structures do not have appropriate length constraints or checks, and can exceed…
• CVE-2021-27364 - CVSS 7.1 (high), 2021-03-07: An issue was discovered in the Linux kernel through 5.11.3. drivers/scsi/scsi_transport_iscsi.c is adversely affected by the ability of an unprivileged user…
• CVE-2021-27363 - CVSS 4.4 (medium), 2021-03-07: An issue was discovered in the Linux kernel through 5.11.3. A kernel pointer leak can be used to determine the address of the iscsi_transport structure. When…
• CVE-2021-28039 - CVSS 6.5 (medium), 2021-03-05: An issue was discovered in the Linux kernel 5.9.x through 5.11.3, as used with Xen. In some less-common configurations, an x86 PV guest OS user can crash a…
• CVE-2021-28038 - CVSS 6.5 (medium), 2021-03-05: An issue was discovered in the Linux kernel through 5.11.3, as used with Xen PV. A certain part of the netback driver lacks necessary treatment of errors such…
• CVE-2020-36158 - CVSS 8.8 (high), 2021-01-05: mwifiex_cmd_802_11_ad_hoc_start in drivers/net/wireless/marvell/mwifiex/join.c in the Linux kernel through 5.10.4 might allow remote attackers to execute…
• CVE-2020-27825 - CVSS 5.7 (medium), 2020-12-11: A use-after-free flaw was found in kernel/trace/ring_buffer.c in Linux kernel (before 5.10-rc1). There was a race problem in trace_open and resize of cpu…
• CVE-2020-27350 - CVSS 5.7 (medium), 2020-12-10: APT had several integer overflows and underflows while parsing .deb packages, aka GHSL-2020-168 GHSL-2020-169, in files apt-pkg/contrib/extracttar.cc,…
• CVE-2020-29660 - CVSS 4.4 (medium), 2020-12-09: A locking inconsistency issue was discovered in the tty subsystem of the Linux kernel through 5.9.13. drivers/tty/tty_io.c and drivers/tty/tty_jobctrl.c may…
• CVE-2020-29661 - CVSS 7.8 (high), 2020-12-09: A locking issue was discovered in the tty subsystem of the Linux kernel through 5.9.13. drivers/tty/tty_jobctrl.c allows a use-after-free attack against…
• CVE-2020-25692 - CVSS 7.5 (high), 2020-12-08: A NULL pointer dereference was found in OpenLDAP server and was fixed in openldap 2.4.55, during a request for renaming RDNs. An unauthenticated attacker…
• CVE-2020-14305 - CVSS 8.1 (high), 2020-12-02: An out-of-bounds memory write flaw was found in how the Linux kernel’s Voice Over IP H.323 connection tracking functionality handled connections on ipv6 port…
• CVE-2020-29370 - CVSS 7 (high), 2020-11-28: An issue was discovered in kmem_cache_alloc_bulk in mm/slub.c in the Linux kernel before 5.5.11. The slowpath lacks the required TID increment, aka…
• CVE-2020-15436 - CVSS 6.7 (medium), 2020-11-23: Use-after-free vulnerability in fs/block_dev.c in the Linux kernel before 5.8 allows local users to gain privileges or cause a denial of service by leveraging…
• CVE-2020-14356 - CVSS 7.8 (high), 2020-08-19: A flaw null pointer dereference in the Linux kernel cgroupv2 subsystem in versions before 5.7.10 was found in the way when reboot the system. A local user…
• CVE-2020-13143 - CVSS 6.5 (medium), 2020-05-18: gadget_dev_desc_UDC_store in drivers/usb/gadget/configfs.c in the Linux kernel 3.16 through 5.6.13 relies on kstrdup without considering the possibility of an…
• CVE-2020-12888 - CVSS 5.3 (medium), 2020-05-15: The VFIO PCI driver in the Linux kernel through 5.6.13 mishandles attempts to access disabled memory space.
• CVE-2020-8832 - CVSS 5.5 (medium), 2020-04-10: The fix for the Linux kernel in Ubuntu 18.04 LTS for CVE-2019-14615 ("The Linux kernel did not properly clear data structures on context switches for certain…
• CVE-2020-9383 - CVSS 7.1 (high), 2020-02-25: An issue was discovered in the Linux kernel 3.16 through 5.5.6. set_fdc in drivers/block/floppy.c leads to a wait_til_ready out-of-bounds read because the FDC…
• CVE-2019-19448 - CVSS 7.8 (high), 2019-12-08: In the Linux kernel 5.0.21 and 5.3.11, mounting a crafted btrfs filesystem image, performing some operations, and then making a syncfs system call can lead to…
• CVE-2019-14815 - CVSS 7.8 (high), 2019-11-25: A vulnerability was found in Linux Kernel, where a Heap Overflow was found in mwifiex_set_wmm_params() function of Marvell Wifi Driver.
• CVE-2019-19061 - CVSS 7.5 (high), 2019-11-18: A memory leak in the adis_update_scan_mode_burst() function in drivers/iio/imu/adis_buffer.c in the Linux kernel before 5.3.9 allows attackers to cause a…
• CVE-2019-19060 - CVSS 7.5 (high), 2019-11-18: A memory leak in the adis_update_scan_mode() function in drivers/iio/imu/adis_buffer.c in the Linux kernel before 5.3.9 allows attackers to cause a denial of…
• CVE-2019-19057 - CVSS 3.3 (low), 2019-11-18: Two memory leaks in the mwifiex_pcie_init_evt_ring() function in drivers/net/wireless/marvell/mwifiex/pcie.c in the Linux kernel through 5.3.11 allow…
• CVE-2019-19063 - CVSS 4.6 (medium), 2019-11-18: Two memory leaks in the rtl_usb_probe() function in drivers/net/wireless/realtek/rtlwifi/usb.c in the Linux kernel through 5.3.11 allow attackers to cause a…
• CVE-2019-19054 - CVSS 4.7 (medium), 2019-11-18: A memory leak in the cx23888_ir_probe() function in drivers/media/pci/cx23885/cx23888-ir.c in the Linux kernel through 5.3.11 allows attackers to cause a…
• CVE-2019-19053 - CVSS 7.5 (high), 2019-11-18: A memory leak in the rpmsg_eptdev_write_iter() function in drivers/rpmsg/rpmsg_char.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of…
• CVE-2019-19052 - CVSS 7.5 (high), 2019-11-18: A memory leak in the gs_can_open() function in drivers/net/can/usb/gs_usb.c in the Linux kernel before 5.3.11 allows attackers to cause a denial of service…
• CVE-2019-19044 - CVSS 7.5 (high), 2019-11-18: Two memory leaks in the v3d_submit_cl_ioctl() function in drivers/gpu/drm/v3d/v3d_gem.c in the Linux kernel before 5.3.11 allow attackers to cause a denial of…
• CVE-2019-11113 - CVSS 4.4 (medium), 2019-11-14: Buffer overflow in Kernel Mode module for Intel(R) Graphics Driver before version 25.20.100.6618 (DCH) or 21.20.x.5077 (aka15.45.5077) may allow a privileged…
• CVE-2019-14591 - CVSS 5.5 (medium), 2019-11-14: Improper input validation in the API for Intel(R) Graphics Driver versions before 26.20.100.7209 may allow an authenticated user to potentially enable denial…
• CVE-2019-11111 - CVSS 7.8 (high), 2019-11-14: Pointer corruption in the Unified Shader Compiler in Intel(R) Graphics Drivers before 10.18.14.5074 (aka 15.36.x.5074) may allow an authenticated user to…
• CVE-2019-14590 - CVSS 5.5 (medium), 2019-11-14: Improper access control in the API for the Intel(R) Graphics Driver versions before 26.20.100.7209 may allow an authenticated user to potentially enable…
• CVE-2019-11089 - CVSS 5.5 (medium), 2019-11-14: Insufficient input validation in Kernel Mode module for Intel(R) Graphics Driver before version 25.20.100.6519 may allow an authenticated user to potentially…
• CVE-2019-14574 - CVSS 5.5 (medium), 2019-11-14: Out of bounds read in a subsystem for Intel(R) Graphics Driver versions before 26.20.100.7209 may allow an authenticated user to potentially enable denial of…
• CVE-2019-2215 - CVSS 7.8 (high), 2019-10-11: A use-after-free in binder.c allows an elevation of privilege from an application to the Linux Kernel. No user interaction is required to exploit this…
• CVE-2019-5481 - CVSS 9.8 (critical), 2019-09-16: Double-free vulnerability in the FTP-kerberos code in cURL 7.52.0 to 7.65.3.
• CVE-2019-15118 - CVSS 5.5 (medium), 2019-08-16: check_input_term in sound/usb/mixer.c in the Linux kernel through 5.2.9 mishandles recursion, leading to kernel stack exhaustion.