CVE-2022-1473: Netapp a250 Firmware

High severity, CVSS 7.5. EPSS: 2.5% chance of exploitation in the next 30 days.

The OPENSSL_LH_flush() function, which empties a hash table, contains a bug that breaks reuse of the memory occuppied by the removed hash table entries. This function is used when decoding certificates or keys. If a long lived process periodically decodes certificates or keys its memory usage will expand without bounds and the process might be terminated by the operating system causing a denial of service. Also traversing the empty hash table entries will take increasingly more time. Typically such long lived processes might be TLS clients or TLS servers configured to accept client certificate authentication. The function was added in the OpenSSL 3.0 version thus older releases are not affected by the issue. Fixed in OpenSSL 3.0.3 (Affected 3.0.0,3.0.1,3.0.2).

Affected products

Netapp a250 Firmware: affected versions not specified
Netapp a700s Firmware: affected versions not specified
Netapp Active Iq Unified Manager: affected versions not specified
Netapp Aff 500f Firmware: affected versions not specified
Netapp Aff 8300 Firmware: affected versions not specified
Netapp Aff 8700 Firmware: affected versions not specified
Netapp Aff a400 Firmware: affected versions not specified
Netapp Clustered Data Ontap: affected versions not specified
Netapp Clustered Data Ontap Antivirus Connector: affected versions not specified
Netapp Fabric-Attached Storage a400 Firmware: affected versions not specified
Netapp Fas 500f Firmware: affected versions not specified
Netapp Fas 8300 Firmware: affected versions not specified
Netapp Fas 8700 Firmware: affected versions not specified
Netapp h300e Firmware: affected versions not specified
Netapp h300s Firmware: affected versions not specified
Netapp h410s Firmware: affected versions not specified
Netapp h500e Firmware: affected versions not specified
Netapp h500s Firmware: affected versions not specified
Netapp h700e Firmware: affected versions not specified
Netapp h700s Firmware: affected versions not specified
Netapp Santricity Smi-S Provider: affected versions not specified
Netapp Smi-S Provider: affected versions not specified
Netapp Snapmanager: affected versions not specified
Netapp Solidfire, Enterprise Sds & Hci Storage Node: affected versions not specified
Netapp Solidfire & Hci Management Node: affected versions not specified
and 1 more

Published 2022-05-03. Last modified 2026-06-17.