A400 Firmware vulnerabilities

6 known vulnerabilities in A400 Firmware from NetApp. 6 are rated high or critical, and 1 has been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  OpenSSL: Use After Free

  CVE-2024-4741Nov 13, 2024OpenSSLEPSS 3.28%

  Issue summary: Calling the OpenSSL API function SSL_free_buffers may cause memory to be accessed that was previously freed in some situations Impact summary: A use after free can have a range of potential consequences such as the corruption of valid data, cras

• 8.1 High severity

  Red Hat Enterprise Linux 9: Concurrent Execution using Shared Resource with Improper Synchronization

  CVE-2024-6387Jul 1, 2024Red HatEPSS 99.5%

  A security regression (CVE-2006-5051) was discovered in OpenSSH's server (sshd). There is a race condition which can lead sshd to handle some signals in an unsafe manner. An unauthenticated, remote attacker may be able to trigger it by failing to authenticate

• 7.0 High severity

  Linux kernel: Access of Resource Using Incompatible Type

  CVE-2023-1077Mar 27, 2023Linux kernel

  In the Linux kernel, pick_next_rt_entity() may return a type confused entry, not detected by the BUG_ON condition, as the confused entry will not be NULL, but list_head.The buggy error condition would lead to a type confused entry with the list head,which woul

• 7.8 High severity

  Linux Kernel: Missing Authorization

  CVE-2022-30594May 12, 2022Linux

  The Linux kernel before 5.17.2 mishandles seccomp permissions. The PTRACE_SEIZE code path allows attackers to bypass intended restrictions on setting the PT_SUSPEND_SECCOMP flag.

• 7.5 High severity

  Kernel: Missing Release of Memory after Effective Lifetime

  CVE-2022-0742Mar 18, 2022LinuxEPSS 5.04%

  Memory leak in icmp6 implementation in Linux Kernel 5.13+ allows a remote attacker to DoS a host by making it go out-of-memory via icmp6 packets of type 130 or 131. We recommend upgrading past commit 2d3916f3189172d5c69d33065c3c21119fe539fc.

• 7.0 High severity

  Linux Kernel Privilege Escalation Exploited

  CVE-2021-22600Jan 26, 2022Linux kernelEPSS 6.59%

  A double free bug in packet_set_ring() in net/packet/af_packet.c can be exploited by a local user through crafted syscalls to escalate privileges or deny service. We recommend upgrading kernel past the effected versions or rebuilding past ec6af094ea28f0f2dda1a