Netapp Aff a250 Firmware vulnerabilities

11 CVEs affecting Netapp Aff a250 Firmware, 1 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2021-33060, published 2022-08-18.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2021-22555: Linux Kernel Heap Out-of-Bounds Write Vulnerability, published 2021-07-07. High severity, CVSS 7.8. Actively exploited: in CISA KEV since 2025-10-06. EPSS: 78.7% chance of exploitation in the next 30 days. A heap out-of-bounds write affecting Linux since v2.6.19-rc1 was discovered in net/netfilter/x_tables.c. This allows an attacker to gain privileges or cause a DoS (via heap memory corruption) through…
CVE-2021-25216, published 2021-04-29. Critical severity, CVSS 9.8. EPSS: 82.4% chance of exploitation in the next 30 days. In BIND 9.5.0 -> 9.11.29, 9.12.0 -> 9.16.13, and versions BIND 9.11.3-S1 -> 9.11.29-S1 and 9.16.8-S1 -> 9.16.13-S1 of BIND Supported Preview Edition, as well as release versions 9.17.0 -> 9.17.1 of…
CVE-2020-1971, published 2020-12-08. Medium severity, CVSS 5.9. EPSS: 7.1% chance of exploitation in the next 30 days. The X.509 GeneralName type is a generic type for representing different types of names. One of those name types is known as EDIPartyName. OpenSSL provides a function GENERAL_NAME_cmp which compares…
CVE-2021-25214, published 2021-04-29. Medium severity, CVSS 6.5. EPSS: 6% chance of exploitation in the next 30 days. In BIND 9.8.5 -> 9.8.8, 9.9.3 -> 9.11.29, 9.12.0 -> 9.16.13, and versions BIND 9.9.3-S1 -> 9.11.29-S1 and 9.16.8-S1 -> 9.16.13-S1 of BIND 9 Supported Preview Edition, as well as release versions…
CVE-2021-41617, published 2021-09-26. High severity, CVSS 7.0. EPSS: 2.5% chance of exploitation in the next 30 days. sshd in OpenSSH 6.2 through 8.x before 8.8, when certain non-default configurations are used, allows privilege escalation because supplemental groups are not initialized as expected. Helper programs…
CVE-2020-27815, published 2021-05-26. High severity, CVSS 7.8. EPSS: 0.8% chance of exploitation in the next 30 days. A flaw was found in the JFS filesystem code in the Linux Kernel which allows a local attacker with the ability to set extended attributes to panic the system, causing memory corruption or escalating…
CVE-2021-28971, published 2021-03-22. Medium severity, CVSS 5.5. EPSS: 0.4% chance of exploitation in the next 30 days. In intel_pmu_drain_pebs_nhm in arch/x86/events/intel/ds.c in the Linux kernel through 5.11.8 on some Haswell CPUs, userspace applications (such as perf-fuzzer) can cause a system crash because the…
CVE-2022-36879, published 2022-07-27. Medium severity, CVSS 5.5. EPSS: 0.3% chance of exploitation in the next 30 days. An issue was discovered in the Linux kernel through 5.18.14. xfrm_expand_policies in net/xfrm/xfrm_policy.c can cause a refcount to be dropped twice.
CVE-2021-40490, published 2021-09-03. High severity, CVSS 7.0. EPSS: 0.3% chance of exploitation in the next 30 days. A race condition was discovered in ext4_write_inline_data_end in fs/ext4/inline.c in the ext4 subsystem in the Linux kernel through 5.13.13.
CVE-2021-28964, published 2021-03-22. Medium severity, CVSS 4.7. EPSS: 0.3% chance of exploitation in the next 30 days. A race condition was discovered in get_old_root in fs/btrfs/ctree.c in the Linux kernel through 5.11.8. It allows attackers to cause a denial of service (BUG) because of a lack of locking on an…

Latest

CVE-2021-33060, published 2022-08-18. High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days. Out-of-bounds write in the BIOS firmware for some Intel(R) Processors may allow an authenticated user to potentially enable escalation of privilege via local access.