aff_a700s_firmware Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/aff_a700s_firmware/ Sun, 26 Feb 2023 06:37:12 +0000 en-US hourly 1 https://wordpress.org/?v=7.0 https://cvevulnerability.com/wp-content/uploads/2023/02/cropped-Screenshot-2023-02-27-at-3.52.32-PM-32x32.png aff_a700s_firmware Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/aff_a700s_firmware/ 32 32 CVE-2020-14145 https://cvevulnerability.com/cve_vulnerabilities/cve-2020-14145/ Sun, 26 Feb 2023 06:37:12 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2020-14145/ The client side in OpenSSH 5.7 through 8.4 has an Observable Discrepancy leading to an information leak in the algorithm negotiation. This allows man-in-the-middle attackers to target initial connection attempts (where no host key for the server has been cached by the client). NOTE: some reports state that 8.5 and 8.6 are also affected.

The post CVE-2020-14145 appeared first on CVE Vulnerability.

]]> The client side in OpenSSH 5.7 through 8.4 has an Observable Discrepancy leading to an information leak in the algorithm negotiation. This allows man-in-the-middle attackers to target initial connection attempts (where no host key for the server has been cached by the client). NOTE: some reports state that 8.5 and 8.6 are also affected.

The post CVE-2020-14145 appeared first on CVE Vulnerability.

]]> CVE-2019-5497 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-5497/ Sun, 26 Feb 2023 06:33:40 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-5497/ NetApp AFF A700s Baseboard Management Controller (BMC) firmware versions 1.22 and higher were shipped with a default account enabled that could allow unauthorized arbitrary command execution.

The post CVE-2019-5497 appeared first on CVE Vulnerability.

]]> NetApp AFF A700s Baseboard Management Controller (BMC) firmware versions 1.22 and higher were shipped with a default account enabled that could allow unauthorized arbitrary command execution.

The post CVE-2019-5497 appeared first on CVE Vulnerability.

]]> CVE-2019-15538 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-15538/ Sun, 26 Feb 2023 06:30:58 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-15538/ An issue was discovered in xfs_setattr_nonsize in fs/xfs/xfs_iops.c in the Linux kernel through 5.2.9. XFS partially wedges when a chgrp fails on account of being out of disk quota. xfs_setattr_nonsize is failing to unlock the ILOCK after the xfs_qm_vop_chown_reserve call fails. This is primarily a local DoS attack vector, but it might result as well […]

The post CVE-2019-15538 appeared first on CVE Vulnerability.

]]> An issue was discovered in xfs_setattr_nonsize in fs/xfs/xfs_iops.c in the Linux kernel through 5.2.9. XFS partially wedges when a chgrp fails on account of being out of disk quota. xfs_setattr_nonsize is failing to unlock the ILOCK after the xfs_qm_vop_chown_reserve call fails. This is primarily a local DoS attack vector, but it might result as well in remote DoS if the XFS filesystem is exported for instance via NFS.

The post CVE-2019-15538 appeared first on CVE Vulnerability.

]]> CVE-2019-12615 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-12615/ Sun, 26 Feb 2023 06:29:56 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-12615/ An issue was discovered in get_vdev_port_node_info in arch/sparc/kernel/mdesc.c in the Linux kernel through 5.1.6. There is an unchecked kstrdup_const of node_info->vdev_port.name, which might allow an attacker to cause a denial of service (NULL pointer dereference and system crash).

The post CVE-2019-12615 appeared first on CVE Vulnerability.

]]> An issue was discovered in get_vdev_port_node_info in arch/sparc/kernel/mdesc.c in the Linux kernel through 5.1.6. There is an unchecked kstrdup_const of node_info->vdev_port.name, which might allow an attacker to cause a denial of service (NULL pointer dereference and system crash).

The post CVE-2019-12615 appeared first on CVE Vulnerability.

]]>