Product:

H410s

(Netapp)
Repositories

Unknown:

This might be proprietary software.
#Vulnerabilities 26
Date Id Summary Products Score Patch Annotated
2023-07-24 CVE-2023-32248 A flaw was found in the Linux kernel's ksmbd, a high-performance in-kernel SMB server. The specific flaw exists within the handling of SMB2_TREE_CONNECT and SMB2_QUERY_INFO commands. The issue results from the lack of proper validation of a pointer prior to accessing it. An attacker can leverage this vulnerability to create a denial-of-service condition on the system. Linux_kernel, H300s, H410c, H410s, H500s, H700s 7.5
2023-07-18 CVE-2023-38427 An issue was discovered in the Linux kernel before 6.3.8. fs/smb/server/smb2pdu.c in ksmbd has an integer underflow and out-of-bounds read in deassemble_neg_contexts. Linux_kernel, H300s, H410s, H500s, H700s 9.8
2023-07-24 CVE-2023-32258 A flaw was found in the Linux kernel's ksmbd, a high-performance in-kernel SMB server. The specific flaw exists within the processing of SMB2_LOGOFF and SMB2_CLOSE commands. The issue results from the lack of proper locking when performing operations on an object. An attacker can leverage this vulnerability to execute code in the context of the kernel. Linux_kernel, H300s, H410s, H500s, H700s 8.1
2020-04-08 CVE-2019-20636 In the Linux kernel before 5.4.12, drivers/input/input.c has out-of-bounds writes via a crafted keycode table, as demonstrated by input_set_keycode, aka CID-cb222aed03d7. Linux_kernel, Cloud_backup, Fas_8300, Fas_8700, Fas_a400, Fas_baseboard_management_controller_a220, Fas_baseboard_management_controller_a320, Fas_baseboard_management_controller_a800, Fas_baseboard_management_controller_c190, H300s, H410s, H500s, H610c, H610s, H615c, H700s, Solidfire, Steelstore_cloud_integrated_storage 6.7
2022-02-24 CVE-2022-25636 net/netfilter/nf_dup_netdev.c in the Linux kernel 5.4 through 5.6.10 allows local users to gain privileges because of a heap out-of-bounds write. This is related to nf_tables_offload. Debian_linux, Linux_kernel, H300e, H300s, H410c, H410s, H500e, H500s, H700e, H700s, Communications_cloud_native_core_binding_support_function, Communications_cloud_native_core_network_exposure_function, Communications_cloud_native_core_policy 7.8
2023-03-16 CVE-2023-28466 do_tls_getsockopt in net/tls/tls_main.c in the Linux kernel through 6.2.6 lacks a lock_sock call, leading to a race condition (with a resultant use-after-free or NULL pointer dereference). Debian_linux, Linux_kernel, H300s, H410c, H410s, H500s, H700s 7.0