Steelstore (Netapp) - vulnerabilities (CVEs)

6 CVEs, 0 in the last 30 days, 6 known versions, newest CVE from 2019-11-25. Vendor: Netapp.

CVEs of Steelstore

• CVE-2019-14815 - CVSS 7.8 (high), 2019-11-25: A vulnerability was found in Linux Kernel, where a Heap Overflow was found in mwifiex_set_wmm_params() function of Marvell Wifi Driver.
• CVE-2019-5481 - CVSS 9.8 (critical), 2019-09-16: Double-free vulnerability in the FTP-kerberos code in cURL 7.52.0 to 7.65.3.
• CVE-2019-7317 - CVSS 5.3 (medium), 2019-02-04: png_image_free in png.c in libpng 1.6.x before 1.6.37 has a use-after-free because png_image_free_function is called under png_safe_execute.
• CVE-2018-0734 - CVSS 5.9 (medium), 2018-10-30: The OpenSSL DSA signature algorithm has been shown to be vulnerable to a timing side channel attack. An attacker could use variations in the signing algorithm…
• CVE-2018-0735 - CVSS 5.9 (medium), 2018-10-29: The OpenSSL ECDSA signature algorithm has been shown to be vulnerable to a timing side channel attack. An attacker could use variations in the signing…
• CVE-2018-15919 - CVSS 5.3 (medium), 2018-08-28: Remotely observable behaviour in auth-gss2.c in OpenSSH through 7.8 could be used by remote attackers to detect existence of users on a target system when…