Netapp Solidfire Baseboard Management Controller vulnerabilities, page 5
104 vulnerabilities
Known vulnerabilities in Netapp Solidfire Baseboard Management Controller, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2019-11111intelgraphics_driver+4
EPSS score0.35%
Pointer corruption in the Unified Shader Compiler in Intel(R) Graphics Drivers before 10.18.14.5074 (aka 15.36.x.5074) may allow an authenticated user to potentially enable escalation of privilege via local access.CVE-2019-11089intelgraphics_driver+4EPSS score0.31%
Insufficient input validation in Kernel Mode module for Intel(R) Graphics Driver before version 25.20.100.6519 may allow an authenticated user to potentially enable denial of service via local access.CVE-2019-11113intelgraphics_driver+4EPSS score0.35%
Buffer overflow in Kernel Mode module for Intel(R) Graphics Driver before version 25.20.100.6618 (DCH) or 21.20.x.5077 (aka15.45.5077) may allow a privileged user to potentially enable information disclosure via local access.CVE-2019-20054debianlinux+40EPSS score0.48%
In the Linux kernel before 5.0.6, there is a NULL pointer dereference in drop_sysctl_table() in fs/proc/proc_sysctl.c, related to put_links, aka CID-23da9588037e.CVE-2019-14590intelgraphics_driver+4EPSS score0.28%
Improper access control in the API for the Intel(R) Graphics Driver versions before 26.20.100.7209 may allow an authenticated user to potentially enable information disclosure via local access.CVE-2019-14815debianlinux+43EPSS score0.49%
A vulnerability was found in Linux Kernel, where a Heap Overflow was found in mwifiex_set_wmm_params() function of Marvell Wifi Driver.CVE-2019-14574intelgraphics_driver+4EPSS score0.30%
Out of bounds read in a subsystem for Intel(R) Graphics Driver versions before 26.20.100.7209 may allow an authenticated user to potentially enable denial of service via local access.CVE-2019-14591intelgraphics_driver+4EPSS score0.28%
Improper input validation in the API for Intel(R) Graphics Driver versions before 26.20.100.7209 may allow an authenticated user to potentially enable denial of service via local access.CVE-2019-25044ubuntulinux-aws-5.0+27EPSS score0.65%
The block subsystem in the Linux kernel before 5.2 has a use-after-free that can lead to arbitrary code execution in the kernel context and privilege escalation, aka CID-c3e2219216c9. This is related to blk_mq_free_rqs and blk_cleanup_queue.CVE-2019-25045debianlinux+54EPSS score0.50%
An issue was discovered in the Linux kernel before 5.0.19. The XFRM subsystem has a use-after-free, related to an xfrm_state_fini panic, aka CID-dbb2483b2a46.CVE-2019-5481alpinecurl+14EPSS score7.46%
Double-free vulnerability in the FTP-kerberos code in cURL 7.52.0 to 7.65.3.CVE-2019-15211canonicalubuntu_linux+35EPSS score0.76%
An issue was discovered in the Linux kernel before 5.2.6. There is a use-after-free caused by a malicious USB device in the drivers/media/v4l2-core/v4l2-dev.c driver because drivers/media/radio/radio-raremono.c does not properly allocate memory.CVE-2019-15221canonicalubuntu_linux+35EPSS score0.71%
An issue was discovered in the Linux kernel before 5.1.17. There is a NULL pointer dereference caused by a malicious USB device in the sound/usb/line6/pcm.c driver.CVE-2019-15219canonicalubuntu_linux+37EPSS score0.71%
An issue was discovered in the Linux kernel before 5.1.8. There is a NULL pointer dereference caused by a malicious USB device in the drivers/usb/misc/sisusbvga/sisusb.c driver.CVE-2019-15118canonicalubuntu_linux+36EPSS score0.76%
check_input_term in sound/usb/mixer.c in the Linux kernel through 5.2.9 mishandles recursion, leading to kernel stack exhaustion.CVE-2019-15218canonicalubuntu_linux+36EPSS score0.84%
An issue was discovered in the Linux kernel before 5.1.8. There is a NULL pointer dereference caused by a malicious USB device in the drivers/media/usb/siano/smsusb.c driver.CVE-2019-15223canonicalubuntu_linux+12EPSS score0.60%
An issue was discovered in the Linux kernel before 5.1.8. There is a NULL pointer dereference caused by a malicious USB device in the sound/usb/line6/driver.c driver.CVE-2019-15213debianlinux+177EPSS score0.66%
An issue was discovered in the Linux kernel before 5.2.3. There is a use-after-free caused by a malicious USB device in the drivers/media/usb/dvb-usb/dvb-usb-init.c driver.CVE-2019-15220canonicalubuntu_linux+35EPSS score0.76%
An issue was discovered in the Linux kernel before 5.2.1. There is a use-after-free caused by a malicious USB device in the drivers/net/wireless/intersil/p54/p54usb.c driver.CVE-2019-15216canonicalubuntu_linux+34EPSS score0.69%
An issue was discovered in the Linux kernel before 5.0.14. There is a NULL pointer dereference caused by a malicious USB device in the drivers/usb/misc/yurex.c driver.