Hci Storage Nodes vulnerabilities

3 known vulnerabilities in Hci Storage Nodes from NetApp. 3 are rated high or critical, and 1 has been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.6 High severity

  less: Improper Neutralization of Directives in Statically Saved Code

  CVE-2024-32487Apr 13, 2024NetApp

  less through 653 allows OS command execution via a newline character in the name of a file, because quoting is mishandled in filename.c. Exploitation typically requires use with attacker-controlled file names, such as the files extracted from an untrusted arch

• 8.1 High severity

  kernel: Concurrent Execution using Shared Resource with Improper Synchronization

  CVE-2023-32250Jul 10, 2023KernelEPSS 2.59%

  A flaw was found in the Linux kernel's ksmbd, a high-performance in-kernel SMB server. The specific flaw exists within the processing of SMB2_SESSION_SETUP commands. The issue results from the lack of proper locking when performing operations on an object. An

• 7.0 High severity

  Linux Kernel Race Condition Exploited

  CVE-2016-5195Nov 10, 2016CanonicalEPSS 83.5%

  Race condition in mm/gup.c in the Linux kernel 2.x through 4.x before 4.8.3 allows local users to gain privileges by leveraging incorrect handling of a copy-on-write (COW) feature to write to a read-only memory mapping, as exploited in the wild in October 2016