H615c Firmware vulnerabilities

9 known vulnerabilities in H615c Firmware from NetApp. 9 are rated high or critical, and 2 have been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.4 High severity

  OpenSSL: Missing Report of Error Condition

  CVE-2024-12797Feb 11, 2025OpenSSLEPSS 1.86%

  Issue summary: Clients using RFC7250 Raw Public Keys (RPKs) to authenticate a server may fail to notice that the server was not authenticated, because handshakes don't abort as expected when the SSL_VERIFY_PEER verification mode is set. Impact summary: TLS and

• 9.8 Critical severity

  OpenSSL: Use After Free

  CVE-2024-4741Nov 13, 2024OpenSSLEPSS 3.28%

  Issue summary: Calling the OpenSSL API function SSL_free_buffers may cause memory to be accessed that was previously freed in some situations Impact summary: A use after free can have a range of potential consequences such as the corruption of valid data, cras

• 8.8 High severity

  OpenSSL: Out-of-bounds Read

  CVE-2024-9143Oct 16, 2024OpenSSLEPSS 12.5%

  Issue summary: Use of the low-level GF(2^m) elliptic curve APIs with untrusted explicit values for the field polynomial can lead to out-of-bounds memory reads or writes. Impact summary: Out of bound memory writes can lead to an application crash or even a poss

• 9.1 Critical severity

  OpenSSL: Out-of-bounds Read

  CVE-2024-5535Jun 27, 2024OpenSSLEPSS 6.13%

  Issue summary: Calling the OpenSSL API function SSL_select_next_proto with an empty supported client protocols buffer may cause a crash or memory contents to be sent to the peer. Impact summary: A buffer overread can have a range of potential consequences such

• 7.3 High severity

  glibc: Reachable Assertion

  CVE-2024-33601May 6, 2024The GNU C LibraryEPSS 1.07%

  nscd: netgroup cache may terminate daemon on memory allocation failure The Name Service Cache Daemon's (nscd) netgroup cache uses xmalloc or xrealloc and these functions may terminate the process due to a memory allocation failure resulting in a denial of serv

• 8.6 High severity

  curl: Missing Release of Resource after Effective Lifetime

  CVE-2024-2398Mar 27, 2024CurlEPSS 36.1%

  When an application tells libcurl it wants to allow HTTP/2 server push, and the amount of received headers for the push surpasses the maximum allowed limit (1000), libcurl aborts the server push. When aborting, libcurl inadvertently does not free all the previ

• 7.3 High severity

  OpenSSL: Improper Neutralization of Special Elements used in an OS Command

  CVE-2022-2068Jun 21, 2022OpenSSLEPSS 96.4%

  In addition to the c_rehash shell command injection identified in CVE-2022-1292, further circumstances where the c_rehash script does not properly sanitise shell metacharacters to prevent command injection were found by code review. When the CVE-2022-1292 was

• 7.8 High severity

  Linux Kernel Out-of-Bounds Write Exploited

  CVE-2022-0995Mar 25, 2022KernelEPSS 8.86%

  An out-of-bounds (OOB) memory write flaw was found in the Linux kernel’s watch_queue event notification subsystem. This flaw can overwrite parts of the kernel state, potentially allowing a local user to gain privileged access or cause a denial of service on th

• 7.8 High severity

  Linux Kernel Heap Out-of-Bounds Write Exploited

  CVE-2021-22555Jul 7, 2021Linux kernelEPSS 78.7%

  A heap out-of-bounds write affecting Linux since v2.6.19-rc1 was discovered in net/netfilter/x_tables.c. This allows an attacker to gain privileges or cause a DoS (via heap memory corruption) through user name space