H410c Firmware vulnerabilities

93 known vulnerabilities in H410c Firmware from NetApp. 92 are rated high or critical, and 13 have been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.8 High severity

  Linux Kernel Privilege Escalation Exploited

  CVE-2022-0847Mar 10, 2022KernelEPSS 92.8%

  A flaw was found in the way the "flags" member of the new pipe buffer structure was lacking proper initialization in copy_page_to_iter_pipe and push_pipe functions in the Linux kernel and could thus contain stale values. An unprivileged local user could use th

• 7.8 High severity

  kernel: Exposure of Sensitive Information to an Unauthorized Actor

  CVE-2022-0516Mar 10, 2022Kernel

  A vulnerability was found in kvm_s390_guest_sida_op in the arch/s390/kvm/kvm-s390.c function in KVM for s390 in the Linux kernel. This flaw allows a local attacker with a normal user privilege to obtain unauthorized memory write access. This flaw affects Linux

• 7.8 High severity

  Linux Kernel: Buffer Copy without Checking Size of Input

  CVE-2022-26490Mar 6, 2022Linux

  st21nfca_connectivity_event_received in drivers/nfc/st21nfca/se.c in the Linux kernel through 5.16.12 has EVT_TRANSACTION buffer overflows because of untrusted length parameters.

• 7.8 High severity

  Linux Kernel Improper Authentication Exploited

  CVE-2022-0492Mar 3, 2022KernelEPSS 5.53%

  A vulnerability was found in the Linux kernel’s cgroup_release_agent_write in the kernel/cgroup/cgroup-v1.c function. This flaw, under certain circumstances, allows the use of the cgroups v1 release_agent feature to escalate privileges and bypass the namespace

• 7.8 High severity

  Kernel: Use After Free

  CVE-2022-0646Feb 18, 2022Kernel

  A flaw use after free in the Linux kernel Management Component Transport Protocol (MCTP) subsystem was found in the way user triggers cancel_work_sync after the unregister_netdev during removing device. A local user could use this flaw to crash the system or e

• 8.4 High severity

  Linux Kernel Heap-Based Buffer Overflow Exploited

  CVE-2022-0185Feb 11, 2022KernelEPSS 25.2%

  A heap-based buffer overflow flaw was found in the way the legacy_parse_param function in the Filesystem Context functionality of the Linux kernel verified the supplied parameters length. An unprivileged (in case of unprivileged user namespaces enabled, otherw

• 7.8 High severity

  Linux Kernel: Use After Free

  CVE-2022-24122Jan 29, 2022LinuxEPSS 1.01%

  kernel/ucount.c in the Linux kernel 5.14 through 5.16.4, when unprivileged user namespaces are enabled, allows a use-after-free and privilege escalation because a ucounts object can outlive its namespace.

• 7.0 High severity

  Linux Kernel Privilege Escalation Exploited

  CVE-2021-22600Jan 26, 2022Linux kernelEPSS 6.59%

  A double free bug in packet_set_ring() in net/packet/af_packet.c can be exploited by a local user through crafted syscalls to escalate privileges or deny service. We recommend upgrading kernel past the effected versions or rebuilding past ec6af094ea28f0f2dda1a

• 7.8 High severity

  Linux Kernel: NULL Pointer Dereference

  CVE-2022-23222Jan 14, 2022LinuxEPSS 2.03%

  kernel/bpf/verifier.c in the Linux kernel through 5.15.14 allows local users to gain privileges because of the availability of pointer arithmetic via certain *_OR_NULL pointer types.

• 7.8 High severity

  Linux Kernel Heap Out-of-Bounds Write Exploited

  CVE-2021-22555Jul 7, 2021Linux kernelEPSS 78.7%

  A heap out-of-bounds write affecting Linux since v2.6.19-rc1 was discovered in net/netfilter/x_tables.c. This allows an attacker to gain privileges or cause a DoS (via heap memory corruption) through user name space

• 6.1 Medium severity

  JQuery Cross-Site Scripting (XSS) Exploited

  CVE-2020-11023Apr 29, 2020JqueryEPSS 84.9%

  In jQuery versions greater than or equal to 1.0.3 and before 3.5.0, passing HTML containing <option> elements from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untr

• 7.8 High severity

  Android Kernel Use-After-Free Exploited

  CVE-2019-2215Oct 11, 2019AndroidEPSS 72.1%

  A use-after-free in binder.c allows an elevation of privilege from an application to the Linux Kernel. No user interaction is required to exploit this vulnerability, however exploitation does require either the installation of a malicious local application or

• 7.8 High severity

  Linux Kernel Improper Privilege Management Exploited

  CVE-2019-13272Jul 17, 2019LinuxEPSS 52.2%

  In the Linux kernel before 5.1.17, ptrace_link in kernel/ptrace.c mishandles the recording of the credentials of a process that wants to create a ptrace relationship, which allows local users to obtain root access by leveraging certain scenarios with a parent-