Netapp h300s vulnerabilities

25 CVEs affecting Netapp h300s, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-4004, published 2023-07-31.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2023-32248, published 2023-07-24. High severity, CVSS 7.5. EPSS: 4.1% chance of exploitation in the next 30 days. A flaw was found in the Linux kernel's ksmbd, a high-performance in-kernel SMB server. The specific flaw exists within the handling of SMB2_TREE_CONNECT and SMB2_QUERY_INFO commands. The issue…
CVE-2023-32247, published 2023-07-24. High severity, CVSS 7.5. EPSS: 3.9% chance of exploitation in the next 30 days. A flaw was found in the Linux kernel's ksmbd, a high-performance in-kernel SMB server. The specific flaw exists within the handling of SMB2_SESSION_SETUP commands. The issue results from the lack of…
CVE-2023-38428, published 2023-07-18. Critical severity, CVSS 9.1. EPSS: 3.2% chance of exploitation in the next 30 days. An issue was discovered in the Linux kernel before 6.3.4. fs/ksmbd/smb2pdu.c in ksmbd does not properly check the UserName value because it does not consider the address of security buffer, leading…
CVE-2023-38426, published 2023-07-18. Critical severity, CVSS 9.1. EPSS: 3% chance of exploitation in the next 30 days. An issue was discovered in the Linux kernel before 6.3.4. ksmbd has an out-of-bounds read in smb2_find_context_vals when create_context's name_len is larger than the tag length.
CVE-2023-32254, published 2023-07-10. High severity, CVSS 8.1. EPSS: 2.9% chance of exploitation in the next 30 days. A flaw was found in the Linux kernel's ksmbd, a high-performance in-kernel SMB server. The specific flaw exists within the processing of SMB2_TREE_DISCONNECT commands. The issue results from the lack…
CVE-2023-32250, published 2023-07-10. High severity, CVSS 8.1. EPSS: 2.6% chance of exploitation in the next 30 days. A flaw was found in the Linux kernel's ksmbd, a high-performance in-kernel SMB server. The specific flaw exists within the processing of SMB2_SESSION_SETUP commands. The issue results from the lack…
CVE-2022-25636, published 2022-02-24. High severity, CVSS 7.8. EPSS: 2.6% chance of exploitation in the next 30 days. net/netfilter/nf_dup_netdev.c in the Linux kernel 5.4 through 5.6.10 allows local users to gain privileges because of a heap out-of-bounds write. This is related to nf_tables_offload.
CVE-2023-38432, published 2023-07-18. Critical severity, CVSS 9.1. EPSS: 2.5% chance of exploitation in the next 30 days. An issue was discovered in the Linux kernel before 6.3.10. fs/smb/server/smb2misc.c in ksmbd does not validate the relationship between the command payload size and the RFC1002 length specification,…
CVE-2023-32258, published 2023-07-24. High severity, CVSS 8.1. EPSS: 2.5% chance of exploitation in the next 30 days. A flaw was found in the Linux kernel's ksmbd, a high-performance in-kernel SMB server. The specific flaw exists within the processing of SMB2_LOGOFF and SMB2_CLOSE commands. The issue results from…
CVE-2023-32257, published 2023-07-24. High severity, CVSS 8.1. EPSS: 2.4% chance of exploitation in the next 30 days. A flaw was found in the Linux kernel's ksmbd, a high-performance in-kernel SMB server. The specific flaw exists within the processing of SMB2_SESSION_SETUP and SMB2_LOGOFF commands. The issue results…

Latest

CVE-2023-4004, published 2023-07-31. High severity, CVSS 7.8. EPSS: 0.9% chance of exploitation in the next 30 days. A use-after-free flaw was found in the Linux kernel's netfilter in the way a user triggers the nft_pipapo_remove function with the element, without a NFT_SET_EXT_KEY_END. This issue could allow a…
CVE-2023-38431, published 2023-07-18. Critical severity, CVSS 9.1. EPSS: 1.2% chance of exploitation in the next 30 days. An issue was discovered in the Linux kernel before 6.3.8. fs/smb/server/connection.c in ksmbd does not validate the relationship between the NetBIOS header's length field and the SMB header sizes,…
CVE-2023-38430, published 2023-07-18. Critical severity, CVSS 9.1. EPSS: 1.2% chance of exploitation in the next 30 days. An issue was discovered in the Linux kernel before 6.3.9. ksmbd does not validate the SMB request protocol ID, leading to an out-of-bounds read.
CVE-2023-38427, published 2023-07-18. Critical severity, CVSS 9.8. EPSS: 1.2% chance of exploitation in the next 30 days. An issue was discovered in the Linux kernel before 6.3.8. fs/smb/server/smb2pdu.c in ksmbd has an integer underflow and out-of-bounds read in deassemble_neg_contexts.