Vulnerabilities for Service processor (...) - CXSECURITY.COM

Vulnerabilities for 'Service processor'

2019-09-04

CVE-2019-15902

CWE-200

A backporting error was discovered in the Linux stable/longterm kernel 4.4.x through 4.4.190, 4.9.x through 4.9.190, 4.14.x through 4.14.141, 4.19.x through 4.19.69, and 5.2.x through 5.2.11. Misuse of the upstream "x86/ptrace: Fix possible spectre-v1 in ptrace_get_debugreg()" commit reintroduced the Spectre vulnerability that it aimed to eliminate. This occurred because the backport process depends on cherry picking specific commits, and because two (correctly ordered) code lines were swapped.

2019-03-21

CVE-2019-5490

CWE-264

Certain versions between 2.x to 5.x (refer to advisory) of the NetApp Service Processor firmware were shipped with a default account enabled that could allow unauthorized arbitrary command execution. Any platform listed in the advisory Impact section may be affected and should be upgraded to a fixed version of Service Processor firmware IMMEDIATELY.

2018-08-17

CVE-2018-15473

CWE-200

OpenSSH through 7.7 is prone to a user enumeration vulnerability due to not delaying bailout for an invalid authenticating user until after the packet containing the request has been fully parsed, related to auth2-gss.c, auth2-hostbased.c, and auth2-pubkey.c.

2018-01-21

CVE-2016-10708

CWE-476

sshd in OpenSSH before 7.4 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via an out-of-sequence NEWKEYS message, as demonstrated by Honggfuzz, related to kex.c and packet.c.

2017-11-13

CVE-2016-8610

CWE-400

A denial of service flaw was found in OpenSSL 0.9.8, 1.0.1, 1.0.2 through 1.0.2h, and 1.1.0 in the way the TLS/SSL protocol defined processing of ALERT packets during a connection handshake. A remote attacker could use this flaw to make a TLS/SSL server consume an excessive amount of CPU and fail to accept connections from other clients.

>>> Vendor: Netapp 93 Products

Oncommand balance

Oncommand workflow automation

Clustered data ontap

Oncommand system manager

Snap creator framework

Metrocluster tiebreaker

Oncommand insight

Virtual storage console for vmware vsphere

Snapcenter server

Oncommand unified manager for clustered data ontap

Ontap select administration utility

Oncommand unified manager core package

Storagegrid webscale

Service level manager

Hyper converged infrastructure

Solidfire element os

Oncommand unified manager

Santricity smi-s provider

Cn1610 firmware

Data ontap edge

Element software management node

Solidfire element os management node

Element software

Santricity cloud connector

E-series santricity os controller

Ontap select deploy

Steelstore cloud integrated storage

Storage automation store

Ontap select deploy utility

Active iq performance analytics services

Ontap select deploy administration utility

Element software management

Fas/aff baseboard management controller

E-series santricity management plug-ins

E-series santricity web services proxy

Service processor

Aff baseboard management controller

Fas baseboard management controller

Storagegrid webscale nas bridge

Oncommand api services

E-series santricity management

E-series santricity storage manager

E-series santricity web services

Brocade network advisor

Virtual storage console

Hyper converged infrastructure compute node

Clustered data ontap antivirus connector

Hci storage nodes

Data ontap operating in 7-mode

Oncommand unified manger

Baseboard management controller firmware

E-series santricity unified manager

Oncommand cloud manager

Active iq unified manager

Element healthtools

Hci management node

Hci storage node

Element plug-in for vcenter server

Management services for element software and netapp hci

Solidfire \& hci management node

Brocade fabric os

Manageability software development kit

Storage encryption

Santricity unified manager

Ontap system manager

Brocade san navigator

Cloud insights acquisition unit

Cloud secure agent

Cloud volumes ontap mediator

Copyright 2024, cxsecurity.com