Oracle Fujitsu m10 Firmware vulnerabilities

2 CVEs affecting Oracle Fujitsu m10 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2015-7547, published 2016-02-18.

More from Oracle.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2015-7547, published 2016-02-18. High severity, CVSS 8.1. EPSS: 91% chance of exploitation in the next 30 days. Multiple stack-based buffer overflows in the (1) send_dg and (2) send_vc functions in the libresolv library in the GNU C Library (aka glibc or libc6) before 2.23 allow remote attackers to cause a…
• CVE-2013-4786, published 2013-07-08. High severity, CVSS 7.5. EPSS: 78.6% chance of exploitation in the next 30 days. The IPMI 2.0 specification supports RMCP+ Authenticated Key-Exchange Protocol (RAKP) authentication, which allows remote attackers to obtain password hashes and conduct offline password guessing…