Latest netapp fas 8300 Vulnerabilities

● CVE-2022-36879

An issue was discovered in the Linux kernel through 5.18.14. xfrm_expand_policies in net/xfrm/xfrm_policy.c can cause a refcount to be dropped twice.

Linux Linux kernel<=5.18.14

Debian Debian Linux=10.0

Debian Debian Linux=11.0

Netapp A700s Firmware

Netapp A700s

Apple iPadOS

and 216 more

● CVE-2022-2068

OpenSSL could allow a remote attacker to execute arbitrary commands on the system, caused by improper validation of user-supplied input by the c_rehash script. By sending a specially-crafted request u...

redhat/jbcs-httpd24-openssl<1:1.1.1k-13.el8

redhat/jbcs-httpd24-openssl<1:1.1.1k-13.el7

redhat/openssl<1:1.1.1k-7.el8_6

redhat/openssl<1:3.0.1-41.el9_0

redhat/jws5-tomcat-native<0:1.2.31-11.redhat_11.el7

redhat/jws5-tomcat-native<0:1.2.31-11.redhat_11.el8

and 95 more

● CVE-2022-1343

The function `OCSP_basic_verify` verifies the signer certificate on an OCSP response. In the case where the (non-default) flag OCSP_NOCHECKS is used then the response will be positive (meaning a succe...

redhat/openssl<1:3.0.1-41.el9_0

OpenSSL OpenSSL>=3.0.0<3.0.3

Netapp Active Iq Unified Manager

NetApp Clustered Data ONTAP

Netapp Clustered Data Ontap Antivirus Connector

Netapp Santricity Smi-s Provider

and 79 more

● CVE-2022-1434

The OpenSSL 3.0 implementation of the RC4-MD5 ciphersuite incorrectly uses the AAD data as the MAC key. This makes the MAC key trivially predictable. An attacker could exploit this issue by performing...

OpenSSL OpenSSL>=3.0.0<3.0.3

Netapp Active Iq Unified Manager

NetApp Clustered Data ONTAP

Netapp Clustered Data Ontap Antivirus Connector

Netapp Santricity Smi-s Provider

Netapp Smi-s Provider

and 77 more

● CVE-2022-1473

A memory leak flaw was found in OpenSSL, resulting in TLS servers and clients being halted by out-of-memory conditions, leading to a denial of service. An attacker needs to repeat actions continuously...

rust/openssl-src>=300.0.0<300.0.6

redhat/openssl<1:3.0.1-41.el9_0

OpenSSL OpenSSL>=3.0.0<3.0.3

Netapp Active Iq Unified Manager

NetApp Clustered Data ONTAP

Netapp Clustered Data Ontap Antivirus Connector

and 80 more

● CVE-2022-1292

The c_rehash script does not properly sanitise shell metacharacters to prevent command injection. This script is distributed by some operating systems in a manner where it is automatically executed. O...

redhat/jbcs-httpd24-openssl<1:1.1.1k-13.el8

redhat/jbcs-httpd24-openssl<1:1.1.1k-13.el7

redhat/openssl<1:1.1.1k-7.el8_6

redhat/openssl<1:3.0.1-41.el9_0

redhat/jws5-tomcat-native<0:1.2.31-11.redhat_11.el7

redhat/jws5-tomcat-native<0:1.2.31-11.redhat_11.el8

and 108 more

● CVE-2022-0742

Memory leak in icmp6 implementation in Linux Kernel 5.13+ allows a remote attacker to DoS a host by making it go out-of-memory via icmp6 packets of type 130 or 131. We recommend upgrading past commit ...

Linux Linux kernel>=5.13<5.15.27

Linux Linux kernel>=5.16<5.16.13

Linux Linux kernel=5.17-rc1

Linux Linux kernel=5.17-rc2

Linux Linux kernel=5.17-rc3

Linux Linux kernel=5.17-rc4

and 139 more

● CVE-2021-22555

Linux Kernel could allow a local authenticated attacker to gain elevated privileges on the system, caused by a heap out-of-bounds write flaw in net/netfilter/x_tables.c. By sending a specially-crafted...

redhat/kernel-rt<0:3.10.0-1160.41.1.rt56.1181.el7

redhat/kernel<0:3.10.0-1160.41.1.el7

redhat/kernel<0:3.10.0-327.100.1.el7

redhat/kernel<0:3.10.0-514.92.1.el7

redhat/kernel<0:3.10.0-693.94.1.el7

redhat/kernel<0:3.10.0-957.84.1.el7

and 35 more

● CVE-2019-25045

An issue was discovered in the Linux kernel before 5.0.19. The XFRM subsystem has a use-after-free, related to an xfrm_state_fini panic, aka CID-dbb2483b2a46.

Linux Linux kernel<5.0.19

Netapp Solidfire Baseboard Management Controller Firmware

Netapp Solidfire Baseboard Management Controller

Netapp Cloud Backup

Netapp Solidfire \& Hci Management Node

Netapp H500s Firmware

and 35 more

● CVE-2020-15436

A use-after-free flaw was observed in blkdev_get(), in fs/block_dev.c after a call to __blkdev_get() fails, and its refcount gets freed/released. This problem may cause a denial of service problem wit...

redhat/kernel-rt<0:3.10.0-1160.15.2.rt56.1152.el7

redhat/kernel<0:3.10.0-1160.15.2.el7

redhat/kernel-alt<0:4.14.0-115.35.1.el7a

redhat/kernel<0:3.10.0-957.72.1.el7

redhat/kernel<0:3.10.0-1062.51.1.el7

Google Android

and 150 more

● CVE-2019-20636

In the Linux kernel before 5.4.12, drivers/input/input.c has out-of-bounds writes via a crafted keycode table, as demonstrated by input_set_keycode, aka CID-cb222aed03d7.

redhat/kernel-rt<0:3.10.0-1160.rt56.1131.el7

redhat/kernel-alt<0:4.14.0-115.26.1.el7a

redhat/kernel<0:3.10.0-1160.el7

redhat/kernel<0:3.10.0-693.81.1.el7

redhat/kernel<0:3.10.0-957.65.1.el7

redhat/kernel<0:3.10.0-1062.43.1.el7

and 34 more

● CVE-2019-19448

In the Linux kernel 5.0.21 and 5.3.11, mounting a crafted btrfs filesystem image, performing some operations, and then making a syncfs system call can lead to a use-after-free in try_merge_free_space ...

ubuntu/linux-gke<5.9~

ubuntu/linux-aws-5.8<5.9~

ubuntu/linux-azure-5.8<5.9~

ubuntu/linux-gcp-5.8<5.9~

ubuntu/linux-oracle-5.8<5.9~

ubuntu/linux-riscv-5.8<5.9~

and 152 more

Latest netapp fas 8300 Vulnerabilities

Company

Resources

Contact