Netapp Steelstore Cloud Integrated Storage vulnerabilities, page 5
210 vulnerabilities
Known vulnerabilities in Netapp Steelstore Cloud Integrated Storage, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
HighCVE-2020-15852debian · linux +19 moredebian linuxAn issue was discovered in the Linux kernel 5.5 through 5.7.9, as used in Xen through 4.13.x for x86 PV guests. An attacker may be granted the I/O port permissions of an unrelated task. This occurs because tss_invalidate_io_bitmap mishandling causes a loss of synchronization between the I/O bitmaps of TSS and Xen, aka CID-cadfad870154.EPSS0.34%MediumCVE-2020-15025debian · ntp +18 moredebian ntpntpd in ntp 4.2.8 before 4.2.8p15 and 4.3.x before 4.3.101 allows remote attackers to cause a denial of service (memory consumption) by sending packets, because memory is not freed in situations where a CMAC key is used and associated with a CMAC algorithm in the ntp.keys file.EPSS3.14%HighCVE-2020-12464debian · linux +50 moredebian linuxusb_sg_cancel in drivers/usb/core/message.c in the Linux kernel before 5.6.8 has a use-after-free because a transfer occurs without a reference, aka CID-056ad39ee925.EPSS0.80%HighCVE-2020-12243Alpine Linuxalpine · openldap +56 morealpine openldapIn filter.c in slapd in OpenLDAP before 2.4.50, LDAP search filters with nested boolean expressions can result in denial of service (daemon crash).EPSS4.72%MediumCVE-2020-12769canonical · ubuntu_linux +58 morecanonical ubuntu_linuxAn issue was discovered in the Linux kernel before 5.4.17. drivers/spi/spi-dw.c allows attackers to cause a panic via concurrent calls to dw_spi_irq and dw_spi_transfer_one, aka CID-19b61392c5a8.EPSS0.65%MediumCVE-2020-12771canonical · ubuntu_linux +70 morecanonical ubuntu_linuxAn issue was discovered in the Linux kernel through 5.6.11. btree_gc_coalesce in drivers/md/bcache/btree.c has a deadlock if a coalescing operation fails.EPSS0.52%HighCVE-2020-12659debian · linux +32 moredebian linuxAn issue was discovered in the Linux kernel before 5.6.7. xdp_umem_reg in net/xdp/xdp_umem.c has an out-of-bounds write (by a user with the CAP_NET_ADMIN capability) because of a lack of headroom validation.EPSS0.71%HighCVE-2020-12465debian · linux +34 moredebian linuxAn array overflow was discovered in mt76_add_fragment in drivers/net/wireless/mediatek/mt76/dma.c in the Linux kernel before 5.5.10, aka CID-b102f0c522cf. An oversized packet with too many rx fragments can corrupt memory of adjacent pages.EPSS0.38%MediumCVE-2020-12888canonical · ubuntu_linux +109 morecanonical ubuntu_linuxThe VFIO PCI driver in the Linux kernel through 5.6.13 mishandles attempts to access disabled memory space.EPSS0.40%MediumCVE-2020-12770canonical · ubuntu_linux +64 morecanonical ubuntu_linuxAn issue was discovered in the Linux kernel through 5.6.11. sg_write lacks an sg_remove_request call in a certain failure case, aka CID-83c6f2390040.EPSS0.59%HighCVE-2020-12653debian · linux +58 moredebian linuxAn issue was found in Linux kernel before 5.5.4. The mwifiex_cmd_append_vsie_tlv() function in drivers/net/wireless/marvell/mwifiex/scan.c allows local users to gain privileges or cause a denial of service because of an incorrect memcpy and buffer overflow, aka CID-b70261a288ea.EPSS0.45%CriticalCVE-2020-8840chainguard · eco-java-gradle-2.10 +78 morechainguard eco-java-gradle-2.10FasterXML jackson-databind 2.0.0 through 2.9.10.2 lacks certain xbean-reflect/JNDI blocking, as demonstrated by org.apache.xbean.propertyeditor.JndiConverter.EPSS26.59%HighCVE-2020-8835canonical · ubuntu_linux +38 moreLinux kernel bpf verifier vulnerabilityIn the Linux kernel 5.5.0 and newer, the bpf verifier (kernel/bpf/verifier.c) did not properly restrict the register bounds for 32-bit operations, leading to out-of-bounds reads and writes in kernel memory. The vulnerability also affects the Linux 5.4 stable series, starting with v5.4.7, as the introducing commit was backported to that branch. This vulnerability was fixed in 5.6.1, 5.5.14, and 5.4.29. (issue is aka ZDI-CAN-10780)EPSS6.01%MediumCVE-2020-8624Alpine Linuxalpine · bind +11 moreupdate-policy rules of type "subdomain" are enforced incorrectlyIn BIND 9.9.12 -> 9.9.13, 9.10.7 -> 9.10.8, 9.11.3 -> 9.11.21, 9.12.1 -> 9.16.5, 9.17.0 -> 9.17.3, also affects 9.9.12-S1 -> 9.9.13-S1, 9.11.3-S1 -> 9.11.21-S1 of the BIND 9 Supported Preview Edition, An attacker who has been granted privileges to change a specific subset of the zone's content could abuse these unintended additional privileges to update other contents of the zone.EPSS3.75%HighCVE-2020-8623Alpine Linuxalpine · bind +12 moreA flaw in native PKCS#11 code can lead to a remotely triggerable assertion failure in pk11.cIn BIND 9.10.0 -> 9.11.21, 9.12.0 -> 9.16.5, 9.17.0 -> 9.17.3, also affects 9.10.5-S1 -> 9.11.21-S1 of the BIND 9 Supported Preview Edition, An attacker that can reach a vulnerable system with a specially crafted query packet can trigger a crash. To be vulnerable, the system must: * be running BIND that was built with "--enable-native-pkcs11" * be signing one or more zones with an RSA key * be able to receive queries from a possible attackerEPSS6.63%MediumCVE-2020-8622Alpine Linuxalpine · bind +27 moreA truncated TSIG response can lead to an assertion failureIn BIND 9.0.0 -> 9.11.21, 9.12.0 -> 9.16.5, 9.17.0 -> 9.17.3, also affects 9.9.3-S1 -> 9.11.21-S1 of the BIND 9 Supported Preview Edition, An attacker on the network path for a TSIG-signed request, or operating the server receiving the TSIG-signed request, could send a truncated response to that request, triggering an assertion failure, causing the server to exit. Alternately, an off-path attacker would have to correctly guess when a TSIG-signed request was sent, along with other characteristics of the packet and message, and spoof a truncated response to trigger an assertion failure, causing the server to exit.EPSS5.79%HighCVE-2020-8620Alpine Linuxalpine · bind +9 morealpine bindIn BIND 9.15.6 -> 9.16.5, 9.17.0 -> 9.17.3, An attacker who can establish a TCP connection with the server and send data on that connection can exploit this to trigger the assertion failure, causing the server to exit.EPSS3.83%MediumCVE-2020-8992canonical · ubuntu_linux +43 morecanonical ubuntu_linuxext4_protect_reserved_inode in fs/ext4/block_validity.c in the Linux kernel through 5.5.3 allows attackers to cause a denial of service (soft lockup) via a crafted journal size.EPSS0.42%MediumCVE-2020-8618Alpine Linuxalpine · bind +9 moreA buffer boundary check assertion in rdataset.c can fail incorrectly during zone transferAn attacker who is permitted to send zone data to a server via zone transfer can exploit this to intentionally trigger the assertion failure with a specially constructed zone, denying service to clients.EPSS1.85%CriticalCVE-2020-8758intel · active_management_technology_firmware +2 moreintel active_management_technology_firmwareImproper buffer restrictions in network subsystem in provisioned Intel(R) AMT and Intel(R) ISM versions before 11.8.79, 11.12.79, 11.22.79, 12.0.68 and 14.0.39 may allow an unauthenticated user to potentially enable escalation of privilege via network access. On un-provisioned systems, an authenticated user may potentially enable escalation of privilege via local access.EPSS1.89%