H610s Firmware vulnerabilities

13 known vulnerabilities in H610s Firmware from NetApp. 13 are rated high or critical, and 4 have been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.4 High severity

  OpenSSL: Missing Report of Error Condition

  CVE-2024-12797Feb 11, 2025OpenSSLEPSS 1.86%

  Issue summary: Clients using RFC7250 Raw Public Keys (RPKs) to authenticate a server may fail to notice that the server was not authenticated, because handshakes don't abort as expected when the SSL_VERIFY_PEER verification mode is set. Impact summary: TLS and

• 9.8 Critical severity

  OpenSSL: Use After Free

  CVE-2024-4741Nov 13, 2024OpenSSLEPSS 3.28%

  Issue summary: Calling the OpenSSL API function SSL_free_buffers may cause memory to be accessed that was previously freed in some situations Impact summary: A use after free can have a range of potential consequences such as the corruption of valid data, cras

• 8.8 High severity

  OpenSSL: Out-of-bounds Read

  CVE-2024-9143Oct 16, 2024OpenSSLEPSS 12.5%

  Issue summary: Use of the low-level GF(2^m) elliptic curve APIs with untrusted explicit values for the field polynomial can lead to out-of-bounds memory reads or writes. Impact summary: Out of bound memory writes can lead to an application crash or even a poss

• 7.5 High severity

  OpenSSL: Access of Resource Using Incompatible Type

  CVE-2024-6119Sep 3, 2024OpenSSLEPSS 66.6%

  Issue summary: Applications performing certificate name checks (e.g., TLS clients checking server certificates) may attempt to read an invalid memory address resulting in abnormal termination of the application process. Impact summary: Abnormal termination of

• 9.1 Critical severity

  OpenSSL: Out-of-bounds Read

  CVE-2024-5535Jun 27, 2024OpenSSLEPSS 6.13%

  Issue summary: Calling the OpenSSL API function SSL_select_next_proto with an empty supported client protocols buffer may cause a crash or memory contents to be sent to the peer. Impact summary: A buffer overread can have a range of potential consequences such

• 7.3 High severity

  glibc: Reachable Assertion

  CVE-2024-33601May 6, 2024The GNU C LibraryEPSS 1.07%

  nscd: netgroup cache may terminate daemon on memory allocation failure The Name Service Cache Daemon's (nscd) netgroup cache uses xmalloc or xrealloc and these functions may terminate the process due to a memory allocation failure resulting in a denial of serv

• 8.6 High severity

  curl: Missing Release of Resource after Effective Lifetime

  CVE-2024-2398Mar 27, 2024CurlEPSS 36.1%

  When an application tells libcurl it wants to allow HTTP/2 server push, and the amount of received headers for the push surpasses the maximum allowed limit (1000), libcurl aborts the server push. When aborting, libcurl inadvertently does not free all the previ

• 7.5 High severity

  SIMATIC S7-1500 CPU 1518-4 PN/DP MFP…: Improper Restriction of Recursive Entity References in DTDs

  CVE-2024-28757Mar 10, 2024SiemensEPSS 2.03%

  libexpat through 2.6.1 allows an XML Entity Expansion attack when there is isolated use of external parsers (created via XML_ExternalEntityParserCreate).

• 7.3 High severity

  OpenSSL: Improper Neutralization of Special Elements used in an OS Command

  CVE-2022-2068Jun 21, 2022OpenSSLEPSS 96.4%

  In addition to the c_rehash shell command injection identified in CVE-2022-1292, further circumstances where the c_rehash script does not properly sanitise shell metacharacters to prevent command injection were found by code review. When the CVE-2022-1292 was

• 7.8 High severity

  Linux Kernel Out-of-Bounds Write Exploited

  CVE-2022-0995Mar 25, 2022KernelEPSS 8.86%

  An out-of-bounds (OOB) memory write flaw was found in the Linux kernel’s watch_queue event notification subsystem. This flaw can overwrite parts of the kernel state, potentially allowing a local user to gain privileged access or cause a denial of service on th

• 7.8 High severity

  Linux Kernel Heap Out-of-Bounds Write Exploited

  CVE-2021-22555Jul 7, 2021Linux kernelEPSS 78.7%

  A heap out-of-bounds write affecting Linux since v2.6.19-rc1 was discovered in net/netfilter/x_tables.c. This allows an attacker to gain privileges or cause a DoS (via heap memory corruption) through user name space

• 7.8 High severity

  Android Kernel Use-After-Free Exploited

  CVE-2019-2215Oct 11, 2019AndroidEPSS 72.1%

  A use-after-free in binder.c allows an elevation of privilege from an application to the Linux Kernel. No user interaction is required to exploit this vulnerability, however exploitation does require either the installation of a malicious local application or

• 7.8 High severity

  Linux Kernel Improper Privilege Management Exploited

  CVE-2019-13272Jul 17, 2019LinuxEPSS 52.2%

  In the Linux kernel before 5.1.17, ptrace_link in kernel/ptrace.c mishandles the recording of the credentials of a process that wants to create a ptrace relationship, which allows local users to obtain root access by leveraging certain scenarios with a parent-