Netapp Aff Baseboard Management Controller vulnerabilities
15 CVEs affecting Netapp Aff Baseboard Management Controller, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2021-26708, published 2021-02-05.
More from Netapp.
Highest priority
Known exploited (CISA KEV) first, then by EPSS exploit probability.
- CVE-2018-15473, published 2018-08-17. Medium severity, CVSS 5.3. EPSS: 98.6% chance of exploitation in the next 30 days. OpenSSH through 7.7 is prone to a user enumeration vulnerability due to not delaying bailout for an invalid authenticating user until after the packet containing the request has been fully parsed,…
- CVE-2019-19052, published 2019-11-18. High severity, CVSS 7.5. EPSS: 5.2% chance of exploitation in the next 30 days. A memory leak in the gs_can_open() function in drivers/net/can/usb/gs_usb.c in the Linux kernel before 5.3.11 allows attackers to cause a denial of service (memory consumption) by triggering…
- CVE-2019-19044, published 2019-11-18. High severity, CVSS 7.5. EPSS: 4% chance of exploitation in the next 30 days. Two memory leaks in the v3d_submit_cl_ioctl() function in drivers/gpu/drm/v3d/v3d_gem.c in the Linux kernel before 5.3.11 allow attackers to cause a denial of service (memory consumption) by…
- CVE-2019-19060, published 2019-11-18. High severity, CVSS 7.5. EPSS: 3.6% chance of exploitation in the next 30 days. A memory leak in the adis_update_scan_mode() function in drivers/iio/imu/adis_buffer.c in the Linux kernel before 5.3.9 allows attackers to cause a denial of service (memory consumption), aka…
- CVE-2019-19061, published 2019-11-18. High severity, CVSS 7.5. EPSS: 3.4% chance of exploitation in the next 30 days. A memory leak in the adis_update_scan_mode_burst() function in drivers/iio/imu/adis_buffer.c in the Linux kernel before 5.3.9 allows attackers to cause a denial of service (memory consumption), aka…
- CVE-2019-19053, published 2019-11-18. High severity, CVSS 7.5. EPSS: 3.3% chance of exploitation in the next 30 days. A memory leak in the rpmsg_eptdev_write_iter() function in drivers/rpmsg/rpmsg_char.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service (memory consumption) by…
- CVE-2021-26708, published 2021-02-05. High severity, CVSS 7.0. EPSS: 1.6% chance of exploitation in the next 30 days. A local privilege escalation was discovered in the Linux kernel before 5.10.13. Multiple race conditions in the AF_VSOCK implementation are caused by wrong locking in net/vmw_vsock/af_vsock.c. The…
- CVE-2019-19922, published 2019-12-22. Medium severity, CVSS 5.5. EPSS: 0.9% chance of exploitation in the next 30 days. kernel/sched/fair.c in the Linux kernel before 5.3.9, when cpu.cfs_quota_us is used (e.g., with Kubernetes), allows attackers to cause a denial of service against non-cpu-bound applications by…
- CVE-2019-19063, published 2019-11-18. Medium severity, CVSS 4.6. EPSS: 0.9% chance of exploitation in the next 30 days. Two memory leaks in the rtl_usb_probe() function in drivers/net/wireless/realtek/rtlwifi/usb.c in the Linux kernel through 5.3.11 allow attackers to cause a denial of service (memory consumption),…
- CVE-2019-19057, published 2019-11-18. Low severity, CVSS 3.3. EPSS: 0.8% chance of exploitation in the next 30 days. Two memory leaks in the mwifiex_pcie_init_evt_ring() function in drivers/net/wireless/marvell/mwifiex/pcie.c in the Linux kernel through 5.3.11 allow attackers to cause a denial of service (memory…
Latest
- CVE-2020-12659, published 2020-05-05. Medium severity, CVSS 6.7. EPSS: 0.7% chance of exploitation in the next 30 days. An issue was discovered in the Linux kernel before 5.6.7. xdp_umem_reg in net/xdp/xdp_umem.c has an out-of-bounds write (by a user with the CAP_NET_ADMIN capability) because of a lack of headroom…
- CVE-2020-12465, published 2020-04-29. Medium severity, CVSS 6.7. EPSS: 0.4% chance of exploitation in the next 30 days. An array overflow was discovered in mt76_add_fragment in drivers/net/wireless/mediatek/mt76/dma.c in the Linux kernel before 5.5.10, aka CID-b102f0c522cf. An oversized packet with too many rx…
- CVE-2019-19966, published 2019-12-25. Medium severity, CVSS 4.6. EPSS: 0.6% chance of exploitation in the next 30 days. In the Linux kernel before 5.1.6, there is a use-after-free in cpia2_exit() in drivers/media/usb/cpia2/cpia2_v4l.c that will cause denial of service, aka CID-dea37a972655.
- CVE-2019-19947, published 2019-12-24. Medium severity, CVSS 4.6. EPSS: 0.5% chance of exploitation in the next 30 days. In the Linux kernel through 5.4.6, there are information leaks of uninitialized memory to a USB device in the drivers/net/can/usb/kvaser_usb/kvaser_usb_leaf.c driver, aka CID-da2311a6385c.