WaratekVRT Sign in
Reset
More filters (2)
Columns
Including CVEs outside Waratek scope✕Vendor netapp✕Product service processor✕
Overview 13 matches · 0 in Waratek scope · 0 protected · 2 exploited · 2 CISA KEV · 4 public PoC · 3 EPSS ≥ 0.5
13matches 0in Waratek scope0.0% 0protected0.0% 2exploited15.4% 2CISA KEV15.4% 4public PoC30.8% 3EPSS ≥ 0.523.1%
Protected by Waratek 0 0.0% Rule in development 0 0.0% Mitigation candidate 0 0.0% No exploit published 0 0.0% Outside Waratek scope 10 76.9% Not applicable 3 23.1% Withdrawn CVE 0 0.0%
Critical 1 7.7% High 8 61.5% Medium 4 30.8% Low 0 0.0% None 0 0.0% Unknown 0 0.0%
blocked by ARMR today 0 0.0% partly blocked 0 0.0% not blocked 13 100.0% not established 0 0.0% unrecorded 0 0.0%
Exploited 2 15.4% Working exploit published 1 7.7% Proof of concept only 1 7.7% Forecast only 0 0.0% No public exploit 9 69.2%
split by peak 6 / quarter
Not applicable: 3Outside Waratek scope: 10 Medium: 4High: 8Critical: 1 not blocked: 13 No public exploit: 9Proof of concept only: 1Working exploit published: 1Exploited: 2
Q4 171 Outside Waratek scope1 High1 not blocked1 Proof of concept only1 Q1 181 Outside Waratek scope1 High1 not blocked1 No public exploit1 Q2 180 Q3 181 Outside Waratek scope1 Medium1 not blocked1 Working exploit published1 Q4 180 Q1 192 Outside Waratek scope1 Not applicable1 Critical1 Medium1 not blocked2 No public exploit2 Q2 190 Q3 196 Outside Waratek scope5 Not applicable1 High5 Medium1 not blocked6 Exploited1 No public exploit5 Q4 191 Outside Waratek scope1 High1 not blocked1 Exploited1 Q1 200 Q2 200 Q3 200 Q4 200 Q1 211 Not applicable1 Medium1 not blocked1 No public exploit1
Q1 18Q3 18Q1 19Q3 19Q1 20Q3 20Q1 21
13 matches Sign in to download these CVEs as CSV or JSON, or to follow them in a feed.
CVE Severity Published▾ Status Exploitation Description
CVE-2019-25013 Medium 2021-01-04 Not applicable No public exploit The iconv feature in the GNU C Library (aka glibc or libc6) through 2.32, when processing invalid multi-byte input sequences in the EUC-KR encoding, may have a buffer over-read.
CVE-2019-2215 High 2019-10-11 Outside Waratek scope Exploited A use-after-free in binder.c allows an elevation of privilege from an application to the Linux Kernel. No user interaction is required to exploit this vulnerability, however exploitation does require either the installation of a malicious local application or a separate vulnerability in a network facing application.Product: AndroidAndroid ID: A-141720095
CVE-2019-16995 High 2019-09-30 Outside Waratek scope No public exploit In the Linux kernel before 5.0.3, a memory leak exits in hsr_dev_finalize() in net/hsr/hsr_device.c if hsr_add_port fails to add a port, which may cause denial of service, aka CID-6caabe7f197d.
CVE-2019-14816 High 2019-09-20 Outside Waratek scope No public exploit There is heap-based buffer overflow in kernel, all versions up to, excluding 5.3, in the marvell wifi chip driver in Linux kernel, that allows local users to cause a denial of service(system crash) or possibly execute arbitrary code.
CVE-2019-14814 High 2019-09-20 Outside Waratek scope No public exploit There is heap-based buffer overflow in Linux kernel, all versions up to, excluding 5.3, in the marvell wifi chip driver in Linux kernel, that allows local users to cause a denial of service(system crash) or possibly execute arbitrary code.
CVE-2019-14835 High 2019-09-17 Outside Waratek scope No public exploit A buffer overflow flaw was found, in versions from 2.6.34 to 5.2.x, in the way Linux kernel's vhost functionality that translates virtqueue buffers to IOVs, logged the buffer descriptors during migration. A privileged guest user able to pass descriptors with invalid length to the host when migration is underway, could use this flaw to increase their privileges on the host.
CVE-2019-15902 Medium 2019-09-04 Not applicable No public exploit A backporting error was discovered in the Linux stable/longterm kernel 4.4.x through 4.4.190, 4.9.x through 4.9.190, 4.14.x through 4.14.141, 4.19.x through 4.19.69, and 5.2.x through 5.2.11. Misuse of the upstream "x86/ptrace: Fix possible spectre-v1 in ptrace_get_debugreg()" commit reintroduced the Spectre vulnerability that it aimed to eliminate. This occurred because the backport process depends on cherry picking specific commits, and because two (correctly ordered) code lines were swapped.
CVE-2019-13272 High 2019-07-17 Outside Waratek scope Exploited In the Linux kernel before 5.1.17, ptrace_link in kernel/ptrace.c mishandles the recording of the credentials of a process that wants to create a ptrace relationship, which allows local users to obtain root access by leveraging certain scenarios with a parent-child process relationship, where a parent drops privileges and calls execve (potentially allowing control by an attacker). One contributing factor is an object lifetime issue (which can also cause a panic). Another contributing factor is incorrect marking of a ptrace relationship as privileged, which is exploitable through (for example) Polkit's pkexec helper with PTRACE_TRACEME. NOTE: SELinux deny_ptrace might be a usable workaround in some environments.
CVE-2019-5490 Critical 2019-03-21 Not applicable No public exploit Certain versions between 2.x to 5.x (refer to advisory) of the NetApp Service Processor firmware were shipped with a default account enabled that could allow unauthorized arbitrary command execution. Any platform listed in the advisory Impact section may be affected and should be upgraded to a fixed version of Service Processor firmware IMMEDIATELY.
CVE-2019-1559 Medium 2019-02-27 Outside Waratek scope No public exploit If an application encounters a fatal protocol error and then calls SSL_shutdown() twice (once to send a close_notify, and once to receive one) then OpenSSL can respond differently to the calling application if a 0 byte record is received with invalid padding compared to if a 0 byte record is received with an invalid MAC. If the application then behaves differently based on that in a way that is detectable to the remote peer, then this amounts to a padding oracle that could be used to decrypt data. In order for this to be exploitable "non-stitched" ciphersuites must be in use. Stitched ciphersuites are optimised implementations of certain commonly used ciphersuites. Also the application must call SSL_shutdown() twice even if a protocol error has occurred (applications should not do this but some do anyway). Fixed in OpenSSL 1.0.2r (Affected 1.0.2-1.0.2q).
CVE-2018-15473 Medium 2018-08-17 Outside Waratek scope Working exploit published OpenSSH through 7.7 is prone to a user enumeration vulnerability due to not delaying bailout for an invalid authenticating user until after the packet containing the request has been fully parsed, related to auth2-gss.c, auth2-hostbased.c, and auth2-pubkey.c.
CVE-2016-10708 High 2018-01-21 Outside Waratek scope No public exploit sshd in OpenSSH before 7.4 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via an out-of-sequence NEWKEYS message, as demonstrated by Honggfuzz, related to kex.c and packet.c.
CVE-2016-8610 High 2017-11-13 Outside Waratek scope Proof of concept only A denial of service flaw was found in OpenSSL 0.9.8, 1.0.1, 1.0.2 through 1.0.2h, and 1.1.0 in the way the TLS/SSL protocol defined processing of ALERT packets during a connection handshake. A remote attacker could use this flaw to make a TLS/SSL server consume an excessive amount of CPU and fail to accept connections from other clients.