netapp aff a700s firmware vulnerabilities and exploits

(subscribe to this query)

NetApp AFF A700s Baseboard Management Controller (BMC) firmware versions 1.22 and higher were shipped with a default account enabled that could allow unauthorized arbitrary command execution.

Netapp Aff A700s Firmware Netapp Clustered Data Ontap -

An issue exists in get_vdev_port_node_info in arch/sparc/kernel/mdesc.c in the Linux kernel up to and including 5.1.6. There is an unchecked kstrdup_const of node_info->vdev_port.name, which might allow an malicious user to cause a denial of service (NULL pointer dereference a...

Linux Linux Kernel 2.6.12 Linux Linux Kernel Linux Linux Kernel 5.2 Netapp Aff A700s Firmware -Netapp Active Iq Unified Manager Netapp Solidfire -Netapp Hci Management Node -Netapp Cn1610 Firmware -Netapp H610s Firmware -

The function `OCSP_basic_verify` verifies the signer certificate on an OCSP response. In the case where the (non-default) flag OCSP_NOCHECKS is used then the response will be positive (meaning a successful verification) even in the case where the response signing certificate fail...

The OpenSSL 3.0 implementation of the RC4-MD5 ciphersuite incorrectly uses the AAD data as the MAC key. This makes the MAC key trivially predictable. An attacker could exploit this issue by performing a man-in-the-middle attack to modify data being sent from one endpoint to an Op...

The OPENSSL_LH_flush() function, which empties a hash table, contains a bug that breaks reuse of the memory occuppied by the removed hash table entries. This function is used when decoding certificates or keys. If a long lived process periodically decodes certificates or keys its...

The fix for the Linux kernel in Ubuntu 18.04 LTS for CVE-2019-14615 ("The Linux kernel did not properly clear data structures on context switches for certain Intel graphics processors.") exists to be incomplete, meaning that in versions of the kernel prior to 4.15.0-91....

In the Linux kernel 5.0.21 and 5.3.11, mounting a crafted btrfs filesystem image, performing some operations, and then making a syncfs system call can lead to a use-after-free in try_merge_free_space in fs/btrfs/free-space-cache.c because the pointer to a left data structure can ...

1 2 3 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook