Netapp Fas/aff Baseboard Management Controller vulnerabilities
14 CVEs affecting Netapp Fas/aff Baseboard Management Controller, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2021-28972, published 2021-03-22.
More from Netapp.
Highest priority
Known exploited (CISA KEV) first, then by EPSS exploit probability.
- CVE-2019-19052, published 2019-11-18. High severity, CVSS 7.5. EPSS: 5.2% chance of exploitation in the next 30 days. A memory leak in the gs_can_open() function in drivers/net/can/usb/gs_usb.c in the Linux kernel before 5.3.11 allows attackers to cause a denial of service (memory consumption) by triggering…
- CVE-2019-6260, published 2019-01-22. Critical severity, CVSS 9.8. EPSS: 4.2% chance of exploitation in the next 30 days. The ASPEED ast2400 and ast2500 Baseband Management Controller (BMC) hardware and firmware implement Advanced High-performance Bus (AHB) bridges, which allow arbitrary read and write access to the…
- CVE-2019-19044, published 2019-11-18. High severity, CVSS 7.5. EPSS: 4% chance of exploitation in the next 30 days. Two memory leaks in the v3d_submit_cl_ioctl() function in drivers/gpu/drm/v3d/v3d_gem.c in the Linux kernel before 5.3.11 allow attackers to cause a denial of service (memory consumption) by…
- CVE-2019-19060, published 2019-11-18. High severity, CVSS 7.5. EPSS: 3.6% chance of exploitation in the next 30 days. A memory leak in the adis_update_scan_mode() function in drivers/iio/imu/adis_buffer.c in the Linux kernel before 5.3.9 allows attackers to cause a denial of service (memory consumption), aka…
- CVE-2019-19061, published 2019-11-18. High severity, CVSS 7.5. EPSS: 3.4% chance of exploitation in the next 30 days. A memory leak in the adis_update_scan_mode_burst() function in drivers/iio/imu/adis_buffer.c in the Linux kernel before 5.3.9 allows attackers to cause a denial of service (memory consumption), aka…
- CVE-2019-19053, published 2019-11-18. High severity, CVSS 7.5. EPSS: 3.3% chance of exploitation in the next 30 days. A memory leak in the rpmsg_eptdev_write_iter() function in drivers/rpmsg/rpmsg_char.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service (memory consumption) by…
- CVE-2019-19922, published 2019-12-22. Medium severity, CVSS 5.5. EPSS: 0.9% chance of exploitation in the next 30 days. kernel/sched/fair.c in the Linux kernel before 5.3.9, when cpu.cfs_quota_us is used (e.g., with Kubernetes), allows attackers to cause a denial of service against non-cpu-bound applications by…
- CVE-2019-19063, published 2019-11-18. Medium severity, CVSS 4.6. EPSS: 0.9% chance of exploitation in the next 30 days. Two memory leaks in the rtl_usb_probe() function in drivers/net/wireless/realtek/rtlwifi/usb.c in the Linux kernel through 5.3.11 allow attackers to cause a denial of service (memory consumption),…
- CVE-2021-28972, published 2021-03-22. Medium severity, CVSS 6.7. EPSS: 0.8% chance of exploitation in the next 30 days. In drivers/pci/hotplug/rpadlpar_sysfs.c in the Linux kernel through 5.11.8, the RPA PCI Hotplug driver has a user-tolerable buffer overflow when writing a new device name to the driver from…
- CVE-2019-19057, published 2019-11-18. Low severity, CVSS 3.3. EPSS: 0.8% chance of exploitation in the next 30 days. Two memory leaks in the mwifiex_pcie_init_evt_ring() function in drivers/net/wireless/marvell/mwifiex/pcie.c in the Linux kernel through 5.3.11 allow attackers to cause a denial of service (memory…
Latest
- CVE-2019-20054, published 2019-12-28. Medium severity, CVSS 5.5. EPSS: 0.5% chance of exploitation in the next 30 days. In the Linux kernel before 5.0.6, there is a NULL pointer dereference in drop_sysctl_table() in fs/proc/proc_sysctl.c, related to put_links, aka CID-23da9588037e.
- CVE-2019-19966, published 2019-12-25. Medium severity, CVSS 4.6. EPSS: 0.6% chance of exploitation in the next 30 days. In the Linux kernel before 5.1.6, there is a use-after-free in cpia2_exit() in drivers/media/usb/cpia2/cpia2_v4l.c that will cause denial of service, aka CID-dea37a972655.
- CVE-2019-19947, published 2019-12-24. Medium severity, CVSS 4.6. EPSS: 0.5% chance of exploitation in the next 30 days. In the Linux kernel through 5.4.6, there are information leaks of uninitialized memory to a USB device in the drivers/net/can/usb/kvaser_usb/kvaser_usb_leaf.c driver, aka CID-da2311a6385c.
- CVE-2019-19054, published 2019-11-18. Medium severity, CVSS 4.7. EPSS: 0.4% chance of exploitation in the next 30 days. A memory leak in the cx23888_ir_probe() function in drivers/media/pci/cx23885/cx23888-ir.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service (memory consumption) by…