Netapp Steelstore vulnerabilities

6 vulnerabilities

Known vulnerabilities in Netapp Steelstore, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

5.9CVE-2018-0734alpinenodejs+23
EPSS score
12.15%
The OpenSSL DSA signature algorithm has been shown to be vulnerable to a timing side channel attack. An attacker could use variations in the signing algorithm to recover the private key. Fixed in OpenSSL 1.1.1a (Affected 1.1.1). Fixed in OpenSSL 1.1.0j (Affected 1.1.0-1.1.0i). Fixed in OpenSSL 1.0.2q (Affected 1.0.2-1.0.2p).5.9CVE-2018-0735alpinenodejs+32
EPSS score
4.72%
The OpenSSL ECDSA signature algorithm has been shown to be vulnerable to a timing side channel attack. An attacker could use variations in the signing algorithm to recover the private key. Fixed in OpenSSL 1.1.0j (Affected 1.1.0-1.1.0i). Fixed in OpenSSL 1.1.1a (Affected 1.1.1).5.3CVE-2018-15919debianopenssh+8
EPSS score
3.56%
Remotely observable behaviour in auth-gss2.c in OpenSSH through 7.8 could be used by remote attackers to detect existence of users on a target system when GSS2 is in use. NOTE: the discoverer states 'We understand that the OpenSSH developers do not want to treat such a username enumeration (or "oracle") as a vulnerability.'7.8CVE-2019-14815debianlinux+43
EPSS score
0.49%
A vulnerability was found in Linux Kernel, where a Heap Overflow was found in mwifiex_set_wmm_params() function of Marvell Wifi Driver.5.3CVE-2019-7317alpinelibpng+71
EPSS score
9.39%
png_image_free in png.c in libpng 1.6.x before 1.6.37 has a use-after-free because png_image_free_function is called under png_safe_execute.9.8CVE-2019-5481alpinecurl+14
EPSS score
7.46%
Double-free vulnerability in the FTP-kerberos code in cURL 7.52.0 to 7.65.3.