[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fjzvMiJMYOIS8nkL1ZSix3l1X82GZ7aPeooYJioK6l7c":3,"g5a-ex:netapp\u002Fa1k_firmware@*":59,"g5a-family:netapp\u002Fa1k_firmware":61},{"success":4,"data":5},true,{"product":6,"versions":14,"topVulnerabilitiesByEpss":15,"kevVulnerabilities":36,"seoMetadata":37,"meta":56},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":9,"lastCveUpdate":11,"versions":12,"description":13},"netapp","a1k_firmware",0,3,"2024-07-01",[],"A1k Firmware by Netapp is a technology product and 3 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[],[16,24,31],{"cveId":17,"description":18,"publishedDate":11,"cvssScore":19,"cvssVersion":20,"severity":21,"isKev":22,"epssScore":23},"CVE-2024-6387","A security regression (CVE-2006-5051) was discovered in OpenSSH's server (sshd). There is a race condition which can lead sshd to handle some signals in an unsafe manner. An unauthenticated, remote attacker may be able to trigger it by failing to authenticate within a set time period.",8.1,"v3.1","High",false,0.99506,{"cveId":25,"description":26,"publishedDate":27,"cvssScore":28,"cvssVersion":20,"severity":29,"isKev":22,"epssScore":30},"CVE-2024-26633","In the Linux kernel, the following vulnerability has been resolved:\n\nip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()\n\nsyzbot pointed out [1] that NEXTHDR_FRAGMENT handling is broken.\n\nReading frag_off can only be done if we pulled enough bytes\nto skb->head. Currently we might access garbage.\n\n[1]\nBUG: KMSAN: uninit-value in ip6_tnl_parse_tlv_enc_lim+0x94f\u002F0xbb0\nip6_tnl_parse_tlv_enc_lim+0x94f\u002F0xbb0\nipxip6_tnl_xmit net\u002Fipv6\u002Fip6_tunnel.c:1326 [inline]\nip6_tnl_start_xmit+0xab2\u002F0x1a70 net\u002Fipv6\u002Fip6_tunnel.c:1432\n__netdev_start_xmit include\u002Flinux\u002Fnetdevice.h:4940 [inline]\nnetdev_start_xmit include\u002Flinux\u002Fnetdevice.h:4954 [inline]\nxmit_one net\u002Fcore\u002Fdev.c:3548 [inline]\ndev_hard_start_xmit+0x247\u002F0xa10 net\u002Fcore\u002Fdev.c:3564\n__dev_queue_xmit+0x33b8\u002F0x5130 net\u002Fcore\u002Fdev.c:4349\ndev_queue_xmit include\u002Flinux\u002Fnetdevice.h:3134 [inline]\nneigh_connected_output+0x569\u002F0x660 net\u002Fcore\u002Fneighbour.c:1592\nneigh_output include\u002Fnet\u002Fneighbour.h:542 [inline]\nip6_finish_output2+0x23a9\u002F0x2b30 net\u002Fipv6\u002Fip6_output.c:137\nip6_finish_output+0x855\u002F0x12b0 net\u002Fipv6\u002Fip6_output.c:222\nNF_HOOK_COND include\u002Flinux\u002Fnetfilter.h:303 [inline]\nip6_output+0x323\u002F0x610 net\u002Fipv6\u002Fip6_output.c:243\ndst_output include\u002Fnet\u002Fdst.h:451 [inline]\nip6_local_out+0xe9\u002F0x140 net\u002Fipv6\u002Foutput_core.c:155\nip6_send_skb net\u002Fipv6\u002Fip6_output.c:1952 [inline]\nip6_push_pending_frames+0x1f9\u002F0x560 net\u002Fipv6\u002Fip6_output.c:1972\nrawv6_push_pending_frames+0xbe8\u002F0xdf0 net\u002Fipv6\u002Fraw.c:582\nrawv6_sendmsg+0x2b66\u002F0x2e70 net\u002Fipv6\u002Fraw.c:920\ninet_sendmsg+0x105\u002F0x190 net\u002Fipv4\u002Faf_inet.c:847\nsock_sendmsg_nosec net\u002Fsocket.c:730 [inline]\n__sock_sendmsg net\u002Fsocket.c:745 [inline]\n____sys_sendmsg+0x9c2\u002F0xd60 net\u002Fsocket.c:2584\n___sys_sendmsg+0x28d\u002F0x3c0 net\u002Fsocket.c:2638\n__sys_sendmsg net\u002Fsocket.c:2667 [inline]\n__do_sys_sendmsg net\u002Fsocket.c:2676 [inline]\n__se_sys_sendmsg net\u002Fsocket.c:2674 [inline]\n__x64_sys_sendmsg+0x307\u002F0x490 net\u002Fsocket.c:2674\ndo_syscall_x64 arch\u002Fx86\u002Fentry\u002Fcommon.c:52 [inline]\ndo_syscall_64+0x44\u002F0x110 arch\u002Fx86\u002Fentry\u002Fcommon.c:83\nentry_SYSCALL_64_after_hwframe+0x63\u002F0x6b\n\nUninit was created at:\nslab_post_alloc_hook+0x129\u002F0xa70 mm\u002Fslab.h:768\nslab_alloc_node mm\u002Fslub.c:3478 [inline]\n__kmem_cache_alloc_node+0x5c9\u002F0x970 mm\u002Fslub.c:3517\n__do_kmalloc_node mm\u002Fslab_common.c:1006 [inline]\n__kmalloc_node_track_caller+0x118\u002F0x3c0 mm\u002Fslab_common.c:1027\nkmalloc_reserve+0x249\u002F0x4a0 net\u002Fcore\u002Fskbuff.c:582\npskb_expand_head+0x226\u002F0x1a00 net\u002Fcore\u002Fskbuff.c:2098\n__pskb_pull_tail+0x13b\u002F0x2310 net\u002Fcore\u002Fskbuff.c:2655\npskb_may_pull_reason include\u002Flinux\u002Fskbuff.h:2673 [inline]\npskb_may_pull include\u002Flinux\u002Fskbuff.h:2681 [inline]\nip6_tnl_parse_tlv_enc_lim+0x901\u002F0xbb0 net\u002Fipv6\u002Fip6_tunnel.c:408\nipxip6_tnl_xmit net\u002Fipv6\u002Fip6_tunnel.c:1326 [inline]\nip6_tnl_start_xmit+0xab2\u002F0x1a70 net\u002Fipv6\u002Fip6_tunnel.c:1432\n__netdev_start_xmit include\u002Flinux\u002Fnetdevice.h:4940 [inline]\nnetdev_start_xmit include\u002Flinux\u002Fnetdevice.h:4954 [inline]\nxmit_one net\u002Fcore\u002Fdev.c:3548 [inline]\ndev_hard_start_xmit+0x247\u002F0xa10 net\u002Fcore\u002Fdev.c:3564\n__dev_queue_xmit+0x33b8\u002F0x5130 net\u002Fcore\u002Fdev.c:4349\ndev_queue_xmit include\u002Flinux\u002Fnetdevice.h:3134 [inline]\nneigh_connected_output+0x569\u002F0x660 net\u002Fcore\u002Fneighbour.c:1592\nneigh_output include\u002Fnet\u002Fneighbour.h:542 [inline]\nip6_finish_output2+0x23a9\u002F0x2b30 net\u002Fipv6\u002Fip6_output.c:137\nip6_finish_output+0x855\u002F0x12b0 net\u002Fipv6\u002Fip6_output.c:222\nNF_HOOK_COND include\u002Flinux\u002Fnetfilter.h:303 [inline]\nip6_output+0x323\u002F0x610 net\u002Fipv6\u002Fip6_output.c:243\ndst_output include\u002Fnet\u002Fdst.h:451 [inline]\nip6_local_out+0xe9\u002F0x140 net\u002Fipv6\u002Foutput_core.c:155\nip6_send_skb net\u002Fipv6\u002Fip6_output.c:1952 [inline]\nip6_push_pending_frames+0x1f9\u002F0x560 net\u002Fipv6\u002Fip6_output.c:1972\nrawv6_push_pending_frames+0xbe8\u002F0xdf0 net\u002Fipv6\u002Fraw.c:582\nrawv6_sendmsg+0x2b66\u002F0x2e70 net\u002Fipv6\u002Fraw.c:920\ninet_sendmsg+0x105\u002F0x190 net\u002Fipv4\u002Faf_inet.c:847\nsock_sendmsg_nosec net\u002Fsocket.c:730 [inline]\n__sock_sendmsg net\u002Fsocket.c:745 [inline]\n____sys_sendmsg+0x9c2\u002F0xd60 net\u002Fsocket.c:2584\n___sys_sendmsg+0x28d\u002F0x3c0 net\u002Fsocket.c:2638\n__sys_sendmsg net\u002Fsocket.c:2667 [inline]\n__do_sys_sendms\n---truncated---","2024-03-18",5.5,"Medium",0.0033,{"cveId":32,"description":33,"publishedDate":34,"cvssScore":28,"cvssVersion":20,"severity":29,"isKev":22,"epssScore":35},"CVE-2024-26733","In the Linux kernel, the following vulnerability has been resolved:\n\narp: Prevent overflow in arp_req_get().\n\nsyzkaller reported an overflown write in arp_req_get(). [0]\n\nWhen ioctl(SIOCGARP) is issued, arp_req_get() looks up an neighbour\nentry and copies neigh->ha to struct arpreq.arp_ha.sa_data.\n\nThe arp_ha here is struct sockaddr, not struct sockaddr_storage, so\nthe sa_data buffer is just 14 bytes.\n\nIn the splat below, 2 bytes are overflown to the next int field,\narp_flags.  We initialise the field just after the memcpy(), so it's\nnot a problem.\n\nHowever, when dev->addr_len is greater than 22 (e.g. MAX_ADDR_LEN),\narp_netmask is overwritten, which could be set as htonl(0xFFFFFFFFUL)\nin arp_ioctl() before calling arp_req_get().\n\nTo avoid the overflow, let's limit the max length of memcpy().\n\nNote that commit b5f0de6df6dc (\"net: dev: Convert sa_data to flexible\narray in struct sockaddr\") just silenced syzkaller.\n\n[0]:\nmemcpy: detected field-spanning write (size 16) of single field \"r->arp_ha.sa_data\" at net\u002Fipv4\u002Farp.c:1128 (size 14)\nWARNING: CPU: 0 PID: 144638 at net\u002Fipv4\u002Farp.c:1128 arp_req_get+0x411\u002F0x4a0 net\u002Fipv4\u002Farp.c:1128\nModules linked in:\nCPU: 0 PID: 144638 Comm: syz-executor.4 Not tainted 6.1.74 #31\nHardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.16.0-debian-1.16.0-5 04\u002F01\u002F2014\nRIP: 0010:arp_req_get+0x411\u002F0x4a0 net\u002Fipv4\u002Farp.c:1128\nCode: fd ff ff e8 41 42 de fb b9 0e 00 00 00 4c 89 fe 48 c7 c2 20 6d ab 87 48 c7 c7 80 6d ab 87 c6 05 25 af 72 04 01 e8 5f 8d ad fb \u003C0f> 0b e9 6c fd ff ff e8 13 42 de fb be 03 00 00 00 4c 89 e7 e8 a6\nRSP: 0018:ffffc900050b7998 EFLAGS: 00010286\nRAX: 0000000000000000 RBX: ffff88803a815000 RCX: 0000000000000000\nRDX: 0000000000000000 RSI: ffffffff8641a44a RDI: 0000000000000001\nRBP: ffffc900050b7a98 R08: 0000000000000001 R09: 0000000000000000\nR10: 0000000000000000 R11: 203a7970636d656d R12: ffff888039c54000\nR13: 1ffff92000a16f37 R14: ffff88803a815084 R15: 0000000000000010\nFS:  00007f172bf306c0(0000) GS:ffff88805aa00000(0000) knlGS:0000000000000000\nCS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033\nCR2: 00007f172b3569f0 CR3: 0000000057f12005 CR4: 0000000000770ef0\nDR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000\nDR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400\nPKRU: 55555554\nCall Trace:\n \u003CTASK>\n arp_ioctl+0x33f\u002F0x4b0 net\u002Fipv4\u002Farp.c:1261\n inet_ioctl+0x314\u002F0x3a0 net\u002Fipv4\u002Faf_inet.c:981\n sock_do_ioctl+0xdf\u002F0x260 net\u002Fsocket.c:1204\n sock_ioctl+0x3ef\u002F0x650 net\u002Fsocket.c:1321\n vfs_ioctl fs\u002Fioctl.c:51 [inline]\n __do_sys_ioctl fs\u002Fioctl.c:870 [inline]\n __se_sys_ioctl fs\u002Fioctl.c:856 [inline]\n __x64_sys_ioctl+0x18e\u002F0x220 fs\u002Fioctl.c:856\n do_syscall_x64 arch\u002Fx86\u002Fentry\u002Fcommon.c:51 [inline]\n do_syscall_64+0x37\u002F0x90 arch\u002Fx86\u002Fentry\u002Fcommon.c:81\n entry_SYSCALL_64_after_hwframe+0x64\u002F0xce\nRIP: 0033:0x7f172b262b8d\nCode: 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 f3 0f 1e fa 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 \u003C48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48\nRSP: 002b:00007f172bf300b8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010\nRAX: ffffffffffffffda RBX: 00007f172b3abf80 RCX: 00007f172b262b8d\nRDX: 0000000020000000 RSI: 0000000000008954 RDI: 0000000000000003\nRBP: 00007f172b2d3493 R08: 0000000000000000 R09: 0000000000000000\nR10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000\nR13: 000000000000000b R14: 00007f172b3abf80 R15: 00007f172bf10000\n \u003C\u002FTASK>","2024-04-03",0.00256,[],{"title":38,"metaDescription":39,"keywords":40,"structuredData":41},"A1k Firmware by Netapp - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for A1k Firmware by Netapp with 3 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","A1k Firmware vulnerabilities, A1k Firmware security, A1k Firmware CVE, Netapp A1k Firmware, A1k Firmware threat intelligence, Netapp security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":42,"@type":43,"name":44,"description":39,"url":45,"manufacturer":46,"applicationCategory":50,"softwareVersion":51,"mainEntity":52},"https:\u002F\u002Fschema.org","SoftwareApplication","A1k Firmware","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fnetapp\u002Fa1k_firmware",{"@type":47,"name":48,"url":49},"Organization","Netapp","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fnetapp","Security Software","Multiple versions",{"@type":53,"name":54,"description":55,"vulnerabilityCount":10,"dateModified":11},"SecurityVulnerability","A1k Firmware Security Vulnerabilities","Security vulnerabilities affecting A1k Firmware by Netapp",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":9,"lastUpdated":11,"generatedAt":57,"apiVersion":58},"2026-10-18T18:11:26.712Z","3.0",{"rows":60,"total":9,"capped":22,"failed":9},[],[]]