Latest netapp aff 8700 Vulnerabilities

● CVE-2022-36879

An issue was discovered in the Linux kernel through 5.18.14. xfrm_expand_policies in net/xfrm/xfrm_policy.c can cause a refcount to be dropped twice.

Linux Linux kernel<=5.18.14

Debian Debian Linux=10.0

Debian Debian Linux=11.0

Netapp A700s Firmware

Netapp A700s

Apple iPadOS

and 216 more

● CVE-2022-2068

OpenSSL could allow a remote attacker to execute arbitrary commands on the system, caused by improper validation of user-supplied input by the c_rehash script. By sending a specially-crafted request u...

redhat/jbcs-httpd24-openssl<1:1.1.1k-13.el8

redhat/jbcs-httpd24-openssl<1:1.1.1k-13.el7

redhat/openssl<1:1.1.1k-7.el8_6

redhat/openssl<1:3.0.1-41.el9_0

redhat/jws5-tomcat-native<0:1.2.31-11.redhat_11.el7

redhat/jws5-tomcat-native<0:1.2.31-11.redhat_11.el8

and 95 more

● CVE-2022-1434

The OpenSSL 3.0 implementation of the RC4-MD5 ciphersuite incorrectly uses the AAD data as the MAC key. This makes the MAC key trivially predictable. An attacker could exploit this issue by performing...

OpenSSL OpenSSL>=3.0.0<3.0.3

Netapp Active Iq Unified Manager

NetApp Clustered Data ONTAP

Netapp Clustered Data Ontap Antivirus Connector

Netapp Santricity Smi-s Provider

Netapp Smi-s Provider

and 77 more

● CVE-2022-1343

The function `OCSP_basic_verify` verifies the signer certificate on an OCSP response. In the case where the (non-default) flag OCSP_NOCHECKS is used then the response will be positive (meaning a succe...

redhat/openssl<1:3.0.1-41.el9_0

OpenSSL OpenSSL>=3.0.0<3.0.3

Netapp Active Iq Unified Manager

NetApp Clustered Data ONTAP

Netapp Clustered Data Ontap Antivirus Connector

Netapp Santricity Smi-s Provider

and 79 more

● CVE-2022-1473

A memory leak flaw was found in OpenSSL, resulting in TLS servers and clients being halted by out-of-memory conditions, leading to a denial of service. An attacker needs to repeat actions continuously...

rust/openssl-src>=300.0.0<300.0.6

redhat/openssl<1:3.0.1-41.el9_0

OpenSSL OpenSSL>=3.0.0<3.0.3

Netapp Active Iq Unified Manager

NetApp Clustered Data ONTAP

Netapp Clustered Data Ontap Antivirus Connector

and 80 more

● CVE-2022-1292

The c_rehash script does not properly sanitise shell metacharacters to prevent command injection. This script is distributed by some operating systems in a manner where it is automatically executed. O...

redhat/jbcs-httpd24-openssl<1:1.1.1k-13.el8

redhat/jbcs-httpd24-openssl<1:1.1.1k-13.el7

redhat/openssl<1:1.1.1k-7.el8_6

redhat/openssl<1:3.0.1-41.el9_0

redhat/jws5-tomcat-native<0:1.2.31-11.redhat_11.el7

redhat/jws5-tomcat-native<0:1.2.31-11.redhat_11.el8

and 108 more

● CVE-2022-0742

Memory leak in icmp6 implementation in Linux Kernel 5.13+ allows a remote attacker to DoS a host by making it go out-of-memory via icmp6 packets of type 130 or 131. We recommend upgrading past commit ...

Linux Linux kernel>=5.13<5.15.27

Linux Linux kernel>=5.16<5.16.13

Linux Linux kernel=5.17-rc1

Linux Linux kernel=5.17-rc2

Linux Linux kernel=5.17-rc3

Linux Linux kernel=5.17-rc4

and 139 more

● CVE-2019-25045

An issue was discovered in the Linux kernel before 5.0.19. The XFRM subsystem has a use-after-free, related to an xfrm_state_fini panic, aka CID-dbb2483b2a46.

Linux Linux kernel<5.0.19

Netapp Solidfire Baseboard Management Controller Firmware

Netapp Solidfire Baseboard Management Controller

Netapp Cloud Backup

Netapp Solidfire \& Hci Management Node

Netapp H500s Firmware

and 35 more

● CVE-2020-15436

A use-after-free flaw was observed in blkdev_get(), in fs/block_dev.c after a call to __blkdev_get() fails, and its refcount gets freed/released. This problem may cause a denial of service problem wit...

redhat/kernel-rt<0:3.10.0-1160.15.2.rt56.1152.el7

redhat/kernel<0:3.10.0-1160.15.2.el7

redhat/kernel-alt<0:4.14.0-115.35.1.el7a

redhat/kernel<0:3.10.0-957.72.1.el7

redhat/kernel<0:3.10.0-1062.51.1.el7

Google Android

and 150 more

● CVE-2020-10732

A flaw was found in the Linux kernel's implementation of Userspace core dumps. This flaw allows an attacker with a local account to crash a trivial program and exfiltrate private kernel data.

redhat/kernel-rt<0:3.10.0-1160.rt56.1131.el7

redhat/kernel<0:3.10.0-1160.el7

redhat/kernel-rt<0:4.18.0-240.rt7.54.el8

redhat/kernel<0:4.18.0-240.el8

Google Android

ubuntu/linux<4.15.0-115.116

and 143 more

● CVE-2020-8832

The fix for the Linux kernel in Ubuntu 18.04 LTS for CVE-2019-14615 ("The Linux kernel did not properly clear data structures on context switches for certain Intel graphics processors.") was discovere...

ubuntu/linux<4.15.0-91.92

ubuntu/linux-aws<4.15.0-1063.67

ubuntu/linux-aws-hwe<4.15.0-1063.67~16.04.1

ubuntu/linux-azure<4.15.0-1074.79~14.04.1

ubuntu/linux-azure<4.15.0-1075.80

ubuntu/linux-gcp<4.15.0-1058.62

and 148 more

● CVE-2019-19448

In the Linux kernel 5.0.21 and 5.3.11, mounting a crafted btrfs filesystem image, performing some operations, and then making a syncfs system call can lead to a use-after-free in try_merge_free_space ...

ubuntu/linux-gke<5.9~

ubuntu/linux-aws-5.8<5.9~

ubuntu/linux-azure-5.8<5.9~

ubuntu/linux-gcp-5.8<5.9~

ubuntu/linux-oracle-5.8<5.9~

ubuntu/linux-riscv-5.8<5.9~

and 152 more

Latest netapp aff 8700 Vulnerabilities

Company

Resources

Contact