Latest netapp service processor Vulnerabilities

● CVE-2019-25013

GNU glibc is vulnerable to a denial of service, caused by a buffer over-read in iconv feature. By sending a specially-crafted request, a remote attacker could exploit this vulnerability to cause a SIG...

IBM Security Verify Access<=10.0.0

GNU glibc<=2.32

Fedoraproject Fedora=32

Fedoraproject Fedora=33

NetApp ONTAP Select Deploy administration utility

NetApp Service Processor

and 10 more

● CVE-2019-16995

In the Linux kernel before 5.0.3, a memory leak exits in hsr_dev_finalize() in net/hsr/hsr_device.c if hsr_add_port fails to add a port, which may cause denial of service, aka CID-6caabe7f197d.

Linux Linux kernel>=3.17<3.18.137

Linux Linux kernel>=4.4<4.4.177

Linux Linux kernel>=4.9<4.9.164

Linux Linux kernel>=4.14<4.14.107

Linux Linux kernel>=4.19<4.19.30

Linux Linux kernel>=4.20<4.20.17

and 29 more

● CVE-2019-14835

A buffer overflow flaw was found in the way Linux kernel's vhost functionality that translates virtqueue buffers to IOVs logged the buffer descriptors during migration. A privileged guest user able to...

redhat/kernel<0:2.6.32-754.23.1.el6

redhat/kernel<0:2.6.32-431.96.2.el6

redhat/kernel<0:2.6.32-504.81.2.el6

redhat/kernel-rt<0:3.10.0-1062.1.2.rt56.1025.el7

redhat/kernel<0:3.10.0-1062.1.2.el7

redhat/kernel-alt<0:4.14.0-115.13.1.el7a

and 182 more

● CVE-2019-15902

A backporting error was discovered in the Linux stable/longterm kernel 4.4.x through 4.4.190, 4.9.x through 4.9.190, 4.14.x through 4.14.141, 4.19.x through 4.19.69, and 5.2.x through 5.2.11. Misuse o...

Linux Linux kernel>=4.4<=4.4.190

Linux Linux kernel>=4.9<=4.9.190

Linux Linux kernel>=4.14<=4.14.141

Linux Linux kernel>=4.19<=4.19.69

Linux Linux kernel>=5.2<=5.2.11

Netapp Active Iq Performance Analytics Services

and 76 more

● CVE-2019-14816

Linux Kernel is vulnerable to a heap-based buffer overflow, caused by improper bounds checking by mwifiex_update_vs_ie() function of Marvell Wifi Driver. By sending a specially-crafted packet, a local...

redhat/kernel-rt<0:3.10.0-1062.12.1.rt56.1042.el7

redhat/kernel-alt<0:4.14.0-115.17.1.el7a

redhat/kernel<0:3.10.0-1062.12.1.el7

redhat/kernel<0:3.10.0-327.85.1.el7

redhat/kernel<0:3.10.0-514.73.1.el7

redhat/kernel<0:3.10.0-693.65.1.el7

and 190 more

● CVE-2019-14814

A flaw was found in the Linux kernel’s implementation of the Marvell wifi driver, which can allow a local user who has CAP_NET_ADMIN or administrative privileges to possibly cause a Denial Of Service ...

redhat/kernel-alt<0:4.14.0-115.17.1.el7a

redhat/kernel<0:3.10.0-1127.el7

redhat/kernel-rt<0:4.18.0-147.5.1.rt24.98.el8_1

redhat/kernel<0:4.18.0-147.5.1.el8_1

ubuntu/linux<4.15.0-66.75

ubuntu/linux<5.0.0-32.34

and 165 more

● CVE-2019-13272

Linux Kernel Improper Privilege Management Vulnerability

redhat/kernel-alt<0:4.14.0-115.12.1.el7a

redhat/kernel-rt<0:4.18.0-80.7.2.rt9.154.el8_0

redhat/kernel<0:4.18.0-80.7.2.el8_0

Linux kernel

redhat/kernel<5.1.17

ubuntu/linux<4.15.0-58.64

and 111 more

● CVE-2019-5490

Certain versions between 2.x to 5.x (refer to advisory) of the NetApp Service Processor firmware were shipped with a default account enabled that could allow unauthorized arbitrary command execution. ...

NetApp Service Processor=2.8

NetApp Service Processor=3.7

NetApp Service Processor=4.5

NetApp Service Processor=5.5

NetApp Clustered Data ONTAP=9.5

NetApp Clustered Data ONTAP=9.4

and 44 more

● CVE-2019-1559

OpenSSL could allow a remote attacker to obtain sensitive information, caused by the failure to immediately close the TCP connection after the hosts encounter a zero-length record with valid padding. ...

redhat/openssl<0:1.0.1e-58.el6_10

redhat/openssl<1:1.0.2k-19.el7

redhat/jws5-ecj<0:4.12.0-1.redhat_1.1.el6

redhat/jws5-javapackages-tools<0:3.4.1-5.15.11.el6

redhat/jws5-jboss-logging<0:3.3.2-1.Final_redhat_00001.1.el6

redhat/jws5-tomcat<0:9.0.21-10.redhat_4.1.el6

and 226 more

● CVE-2018-15473

OpenSSH through 7.7 is prone to a user enumeration vulnerability due to not delaying bailout for an invalid authenticating user until after the packet containing the request has been fully parsed, rel...

IBM Security Identity Manager<=7.0.1

debian/openssh<=1:6.7p1-1<=1:7.7p1-1

ubuntu/openssh<1:7.6

ubuntu/openssh<1:7.7

ubuntu/openssh<1:6.6

ubuntu/openssh<1:7.2

and 40 more

Latest netapp service processor Vulnerabilities

Company

Resources

Contact