Netapp Hci Storage Nodes vulnerabilities

5 CVEs affecting Netapp Hci Storage Nodes, 1 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2024-32487, published 2024-04-13.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2016-5195: Linux Kernel Race Condition Vulnerability, published 2016-11-10. High severity, CVSS 7.0. Actively exploited: in CISA KEV since 2022-03-03. EPSS: 83.5% chance of exploitation in the next 30 days. Race condition in mm/gup.c in the Linux kernel 2.x through 4.x before 4.8.3 allows local users to gain privileges by leveraging incorrect handling of a copy-on-write (COW) feature to write to a…
CVE-2017-7657, published 2018-06-26. Critical severity, CVSS 9.8. EPSS: 14.9% chance of exploitation in the next 30 days. In Eclipse Jetty, versions 9.2.x and older, 9.3.x (all configurations), and 9.4.x (non-default configuration with RFC2616 compliance enabled), transfer-encoding chunks are handled poorly. The chunk…
CVE-2023-32250, published 2023-07-10. High severity, CVSS 8.1. EPSS: 2.6% chance of exploitation in the next 30 days. A flaw was found in the Linux kernel's ksmbd, a high-performance in-kernel SMB server. The specific flaw exists within the processing of SMB2_SESSION_SETUP commands. The issue results from the lack…
CVE-2020-12464, published 2020-04-29. Medium severity, CVSS 6.7. EPSS: 0.8% chance of exploitation in the next 30 days. usb_sg_cancel in drivers/usb/core/message.c in the Linux kernel before 5.6.8 has a use-after-free because a transfer occurs without a reference, aka CID-056ad39ee925.
CVE-2024-32487, published 2024-04-13. High severity, CVSS 8.6. EPSS: 0.6% chance of exploitation in the next 30 days. less through 653 allows OS command execution via a newline character in the name of a file, because quoting is mishandled in filename.c. Exploitation typically requires use with attacker-controlled…