Netapp Steelstore vulnerabilities

6 CVEs affecting Netapp Steelstore, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2019-14815, published 2019-11-25.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2018-0734, published 2018-10-30. Medium severity, CVSS 5.9. EPSS: 12.2% chance of exploitation in the next 30 days. The OpenSSL DSA signature algorithm has been shown to be vulnerable to a timing side channel attack. An attacker could use variations in the signing algorithm to recover the private key. Fixed in…
CVE-2019-7317, published 2019-02-04. Medium severity, CVSS 5.3. EPSS: 9.4% chance of exploitation in the next 30 days. png_image_free in png.c in libpng 1.6.x before 1.6.37 has a use-after-free because png_image_free_function is called under png_safe_execute.
CVE-2019-5481, published 2019-09-16. Critical severity, CVSS 9.8. EPSS: 7.5% chance of exploitation in the next 30 days. Double-free vulnerability in the FTP-kerberos code in cURL 7.52.0 to 7.65.3.
CVE-2018-0735, published 2018-10-29. Medium severity, CVSS 5.9. EPSS: 4.7% chance of exploitation in the next 30 days. The OpenSSL ECDSA signature algorithm has been shown to be vulnerable to a timing side channel attack. An attacker could use variations in the signing algorithm to recover the private key. Fixed in…
CVE-2018-15919, published 2018-08-28. Medium severity, CVSS 5.3. EPSS: 3.6% chance of exploitation in the next 30 days. Remotely observable behaviour in auth-gss2.c in OpenSSH through 7.8 could be used by remote attackers to detect existence of users on a target system when GSS2 is in use. NOTE: the discoverer states…
CVE-2019-14815, published 2019-11-25. High severity, CVSS 7.8. EPSS: 0.5% chance of exploitation in the next 30 days. A vulnerability was found in Linux Kernel, where a Heap Overflow was found in mwifiex_set_wmm_params() function of Marvell Wifi Driver.