Netapp Active Iq Unified Manager For VMware Vsphere vulnerabilities

5 CVEs affecting Netapp Active Iq Unified Manager For VMware Vsphere, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2019-3846, published 2019-06-03.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2019-3846, published 2019-06-03. High severity, CVSS 8.8. EPSS: 5.9% chance of exploitation in the next 30 days. A flaw that allowed an attacker to corrupt memory and possibly escalate privileges was found in the mwifiex kernel module while connecting to a malicious wireless network.
CVE-2019-3900, published 2019-04-25. High severity, CVSS 7.7. EPSS: 4.3% chance of exploitation in the next 30 days. An infinite loop issue was found in the vhost_net kernel module in Linux Kernel up to and including v5.1-rc6, while handling incoming packets in handle_rx(). It could occur if one end sends packets…
CVE-2019-3874, published 2019-03-25. Medium severity, CVSS 6.5. EPSS: 1.8% chance of exploitation in the next 30 days. The SCTP socket buffer used by a userspace application is not accounted by the cgroups subsystem. An attacker can use this flaw to cause a denial of service attack. Kernel 3.10.x and 4.18.x branches…
CVE-2019-3882, published 2019-04-24. Medium severity, CVSS 5.5. EPSS: 0.5% chance of exploitation in the next 30 days. A flaw was found in the Linux kernel's vfio interface implementation that permits violation of the user's locked memory limit. If a device is bound to a vfio driver, such as vfio-pci, and the local…
CVE-2019-3901, published 2019-04-22. Medium severity, CVSS 4.7. EPSS: 0.3% chance of exploitation in the next 30 days. A race condition in perf_event_open() allows local attackers to leak sensitive data from setuid programs. As no relevant locks (in particular the cred_guard_mutex) are held during the…