Netapp Element Software Management vulnerabilities

5 CVEs affecting Netapp Element Software Management, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2019-9076, published 2019-02-24.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2018-11236, published 2018-05-18. Critical severity, CVSS 9.8. EPSS: 7.1% chance of exploitation in the next 30 days. stdlib/canonicalize.c in the GNU C Library (aka glibc or libc6) 2.27 and earlier, when processing very long pathname arguments to the realpath function, could encounter an integer overflow on 32-bit…
CVE-2018-6485, published 2018-02-01. Critical severity, CVSS 9.8. EPSS: 4.7% chance of exploitation in the next 30 days. An integer overflow in the implementation of the posix_memalign in memalign functions in the GNU C Library (aka glibc or libc6) 2.26 and earlier could cause these functions to return a pointer to a…
CVE-2019-9070, published 2019-02-24. High severity, CVSS 7.8. EPSS: 1.6% chance of exploitation in the next 30 days. An issue was discovered in GNU libiberty, as distributed in GNU Binutils 2.32. It is a heap-based buffer over-read in d_expression_1 in cp-demangle.c after many recursive calls.
CVE-2019-9076, published 2019-02-24. Medium severity, CVSS 5.5. EPSS: 1.3% chance of exploitation in the next 30 days. An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.32. It is an attempted excessive memory allocation in elf_read_notes in elf.c.
CVE-2018-11237, published 2018-05-18. High severity, CVSS 7.8. EPSS: 0.9% chance of exploitation in the next 30 days. An AVX-512-optimized implementation of the mempcpy function in the GNU C Library (aka glibc or libc6) 2.27 and earlier may write data beyond the target buffer, leading to a buffer overflow in…