A250 Firmware vulnerabilities

8 known vulnerabilities in A250 Firmware from NetApp. 8 are rated high or critical, and 1 has been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  OpenSSL: Use After Free

  CVE-2024-4741Nov 13, 2024OpenSSLEPSS 3.28%

  Issue summary: Calling the OpenSSL API function SSL_free_buffers may cause memory to be accessed that was previously freed in some situations Impact summary: A use after free can have a range of potential consequences such as the corruption of valid data, cras

• 8.8 High severity

  OpenSSL: Out-of-bounds Read

  CVE-2024-9143Oct 16, 2024OpenSSLEPSS 12.5%

  Issue summary: Use of the low-level GF(2^m) elliptic curve APIs with untrusted explicit values for the field polynomial can lead to out-of-bounds memory reads or writes. Impact summary: Out of bound memory writes can lead to an application crash or even a poss

• 7.5 High severity

  OpenSSL: Access of Resource Using Incompatible Type

  CVE-2024-6119Sep 3, 2024OpenSSLEPSS 66.6%

  Issue summary: Applications performing certificate name checks (e.g., TLS clients checking server certificates) may attempt to read an invalid memory address resulting in abnormal termination of the application process. Impact summary: Abnormal termination of

• 8.1 High severity

  Red Hat Enterprise Linux 9: Concurrent Execution using Shared Resource with Improper Synchronization

  CVE-2024-6387Jul 1, 2024Red HatEPSS 99.5%

  A security regression (CVE-2006-5051) was discovered in OpenSSH's server (sshd). There is a race condition which can lead sshd to handle some signals in an unsafe manner. An unauthenticated, remote attacker may be able to trigger it by failing to authenticate

• 9.1 Critical severity

  OpenSSL: Out-of-bounds Read

  CVE-2024-5535Jun 27, 2024OpenSSLEPSS 6.13%

  Issue summary: Calling the OpenSSL API function SSL_select_next_proto with an empty supported client protocols buffer may cause a crash or memory contents to be sent to the peer. Impact summary: A buffer overread can have a range of potential consequences such

• 7.8 High severity

  Linux Kernel Use-After-Free Exploited

  CVE-2024-1086Jan 31, 2024LinuxEPSS 28.1%

  A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local privilege escalation. The nft_verdict_init() function allows positive values as drop error within the hook verdict, and hence the nf_hook_slow

• 7.5 High severity

  OpenSSL: Incomplete Cleanup

  CVE-2022-1473May 3, 2022OpenSSLEPSS 4.68%

  The OPENSSL_LH_flush() function, which empties a hash table, contains a bug that breaks reuse of the memory occuppied by the removed hash table entries. This function is used when decoding certificates or keys. If a long lived process periodically decodes cert

• 7.3 High severity

  OpenSSL: Improper Neutralization of Special Elements used in an OS Command

  CVE-2022-1292May 3, 2022OpenSSLEPSS 82.6%

  The c_rehash script does not properly sanitise shell metacharacters to prevent command injection. This script is distributed by some operating systems in a manner where it is automatically executed. On such operating systems, an attacker could execute arbitrar