Latest netapp hci storage node firmware Vulnerabilities

● CVE-2021-43818

lxml could allow a remote attacker to bypass security restrictions, caused by a flaw in HTML Cleaner in lxml.html. By sending a specially-crafted script content, an attacker could exploit this vulnera...

redhat/python-lxml<0:4.2.3-4.el8

redhat/python-lxml<0:4.7.1-1.el8

redhat/rh-python38-python-lxml<0:4.4.1-8.el7

debian/lxml

Lxml Lxml<4.6.5

Fedoraproject Fedora=34

and 16 more

● CVE-2021-28041

ssh-agent in OpenSSH before 8.5 has a double free that may be relevant in a few less-common scenarios, such as unconstrained agent-socket access on a legacy operating system, or the forwarding of an a...

Openbsd Openssh>=8.2<8.5

Fedoraproject Fedora=33

Fedoraproject Fedora=34

Netapp Cloud Backup

Netapp Hci Management Node

Netapp Solidfire

and 6 more

● CVE-2020-8286

curl. This issue was addressed with improved checks.

redhat/jbcs-httpd24<0:1-18.el8

redhat/jbcs-httpd24-apr<0:1.6.3-105.el8

redhat/jbcs-httpd24-apr-util<0:1.6.1-82.el8

redhat/jbcs-httpd24-brotli<0:1.0.6-40.el8

redhat/jbcs-httpd24-curl<0:7.77.0-2.el8

redhat/jbcs-httpd24-httpd<0:2.4.37-74.el8

and 67 more

● CVE-2020-8285

curl. A buffer overflow was addressed with improved input validation.

redhat/jbcs-httpd24<0:1-18.el8

redhat/jbcs-httpd24-apr<0:1.6.3-105.el8

redhat/jbcs-httpd24-apr-util<0:1.6.1-82.el8

redhat/jbcs-httpd24-brotli<0:1.0.6-40.el8

redhat/jbcs-httpd24-curl<0:7.77.0-2.el8

redhat/jbcs-httpd24-httpd<0:2.4.37-74.el8

and 105 more

● CVE-2020-11868

NTP is vulnerable to a denial of service, caused by a flaw in ntpd. By sending a server mode packet with a spoofed source IP address, a remote attacker could exploit this vulnerability to block unauth...

IBM ISAM<=9.0.7

IBM Security Verify Access<=10.0.0

redhat/ntp<4.2.8

redhat/ntp<4.3.100

NTP ntp<=4.2.7

NTP ntp>=4.3.98<4.3.100

and 52 more

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.