Netapp Cloud Backup vulnerabilities, page 3
346 vulnerabilities
Known vulnerabilities in Netapp Cloud Backup, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2021-42376alpinebusybox+13
EPSS score0.43%
A NULL pointer dereference in Busybox's hush applet leads to denial of service when processing a crafted shell command, due to missing validation after a \x03 delimiter character. This may be used for DoS under very rare conditions of filtered command input.CVE-2021-42373alpinebusybox+14EPSS score0.41%
A NULL pointer dereference in Busybox's man applet leads to denial of service when a section name is supplied but no page argument is givenCVE-2021-42374alpinebusybox+14EPSS score0.62%
An out-of-bounds heap read in Busybox's unlzma applet leads to information leak and denial of service when crafted LZMA-compressed input is decompressed. This can be triggered by any applet/format thatCVE-2021-20197broadcombrocade_fabric_operating_system_firmware+7EPSS score0.30%
There is an open race window when writing output in the following utilities in GNU binutils version 2.35 and earlier:ar, objcopy, strip, ranlib. When these utilities are run as a privileged user (presumably as part of a script updating binaries across different users), an unprivileged user can trick these utilities into getting ownership of arbitrary files through a symlink.CVE-2021-20226debianlinux+19EPSS score0.44%
A use-after-free flaw was found in the io_uring in Linux kernel, where a local attacker with a user privilege could cause a denial of service problem on the system The issue results from the lack of validating the existence of an object prior to performing operations on the object by not incrementing the file reference counter while in use. The highest threat from this vulnerability is to data integrity, confidentiality and system availability.CVE-2021-20284debianbinutils+4EPSS score1.29%
A flaw was found in GNU Binutils 2.35.1, where there is a heap-based buffer overflow in _bfd_elf_slurp_secondary_reloc_section in elf.c due to the number of symbols not calculated correctly. The highest threat from this vulnerability is to system availability.CVE-2021-0156intelatom_c3308+679EPSS score0.30%
Improper input validation in the firmware for some Intel(R) Processors may allow an authenticated user to potentially enable an escalation of privilege via local access.CVE-2021-0099intelatom_c3308+680EPSS score0.30%
Insufficient control flow management in the firmware for some Intel(R) Processors may allow an authenticated user to potentially enable an escalation of privilege via local access.CVE-2021-0060intel11th_generation_core_series_firmware+15EPSS score0.32%
Insufficient compartmentalization in HECI subsystem for the Intel(R) SPS before versions SPS_E5_04.01.04.516.0, SPS_E5_04.04.04.033.0, SPS_E5_04.04.03.281.0, SPS_E5_03.01.03.116.0, SPS_E3_05.01.04.309.0, SPS_02.04.00.101.0, SPS_SoC-A_05.00.03.114.0, SPS_SoC-X_04.00.04.326.0, SPS_SoC-X_03.00.03.117.0, IGN_E5_91.00.00.167.0, SPS_PHI_03.01.03.078.0 may allow an authenticated user to potentially enable escalation of privilege via physical access.CVE-2021-0124intelatom_c3308+680EPSS score0.32%
Improper access control in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via physical access.CVE-2021-0118intelatom_c3308+680EPSS score0.30%
Out-of-bounds read in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable an escalation of privilege via local access.CVE-2021-0092intelatom_c3308+680EPSS score0.25%
Improper access control in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable a denial of service via local access.CVE-2021-0107intelatom_c3308+680EPSS score0.30%
Unchecked return value in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access.CVE-2021-0117intelatom_c3308+680EPSS score0.30%
Pointer issues in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable an escalation of privilege via local access.CVE-2021-0093intelatom_c3308+680EPSS score0.24%
Incorrect default permissions in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable a denial of service via local access.CVE-2021-0091intelatom_c3308+680EPSS score0.32%
Improper access control in the firmware for some Intel(R) Processors may allow an unauthenticated user to potentially enable an escalation of privilege via local access.CVE-2021-0103intelatom_c3308+680EPSS score0.30%
Insufficient control flow management in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable an escalation of privilege via local access.CVE-2021-0111intelatom_c3308+680EPSS score0.30%
NULL pointer dereference in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable an escalation of privilege via local access.CVE-2021-0119intelatom_c3308+680EPSS score0.30%
Improper initialization in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via physical access.CVE-2021-0116intelatom_c3308+680EPSS score0.30%
Out-of-bounds write in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable an escalation of privilege via local access.