[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fx28odWmvEoaA0PsrPOsFquhC3IBs5iNlr-Qcx6lq6ds":3,"g5a-family:netapp\u002Fa320_firmware":80,"g5a-ex:netapp\u002Fa320_firmware@*":81},{"success":4,"data":5},true,{"product":6,"versions":15,"topVulnerabilitiesByEpss":16,"kevVulnerabilities":52,"seoMetadata":58,"meta":77},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":14},"netapp","a320_firmware",0,6,1,"2024-04-03",[],"A320 Firmware by Netapp is a technology product and 6 known security vulnerabilities including 1 CISA Known Exploited Vulnerability. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[],[17,25,33,38,43,47],{"cveId":18,"description":19,"publishedDate":20,"cvssScore":21,"cvssVersion":22,"severity":23,"isKev":4,"epssScore":24},"CVE-2019-2215","A use-after-free in binder.c allows an elevation of privilege from an application to the Linux Kernel. No user interaction is required to exploit this vulnerability, however exploitation does require either the installation of a malicious local application or a separate vulnerability in a network facing application.Product: AndroidAndroid ID: A-141720095","2019-10-11",7.8,"v3.1","High",0.72105,{"cveId":26,"description":27,"publishedDate":28,"cvssScore":29,"cvssVersion":22,"severity":30,"isKev":31,"epssScore":32},"CVE-2019-1559","If an application encounters a fatal protocol error and then calls SSL_shutdown() twice (once to send a close_notify, and once to receive one) then OpenSSL can respond differently to the calling application if a 0 byte record is received with invalid padding compared to if a 0 byte record is received with an invalid MAC. If the application then behaves differently based on that in a way that is detectable to the remote peer, then this amounts to a padding oracle that could be used to decrypt data. In order for this to be exploitable \"non-stitched\" ciphersuites must be in use. Stitched ciphersuites are optimised implementations of certain commonly used ciphersuites. Also the application must call SSL_shutdown() twice even if a protocol error has occurred (applications should not do this but some do anyway). Fixed in OpenSSL 1.0.2r (Affected 1.0.2-1.0.2q).","2019-02-27",5.9,"Medium",false,0.17139,{"cveId":34,"description":35,"publishedDate":36,"cvssScore":21,"cvssVersion":22,"severity":23,"isKev":31,"epssScore":37},"CVE-2020-8835","In the Linux kernel 5.5.0 and newer, the bpf verifier (kernel\u002Fbpf\u002Fverifier.c) did not properly restrict the register bounds for 32-bit operations, leading to out-of-bounds reads and writes in kernel memory. The vulnerability also affects the Linux 5.4 stable series, starting with v5.4.7, as the introducing commit was backported to that branch. This vulnerability was fixed in 5.6.1, 5.5.14, and 5.4.29. (issue is aka ZDI-CAN-10780)","2020-04-02",0.0601,{"cveId":39,"description":40,"publishedDate":41,"cvssScore":21,"cvssVersion":22,"severity":23,"isKev":31,"epssScore":42},"CVE-2019-14816","There is heap-based buffer overflow in kernel, all versions up to, excluding 5.3, in the marvell wifi chip driver in Linux kernel, that allows local users to cause a denial of service(system crash) or possibly execute arbitrary code.","2019-09-20",0.00909,{"cveId":44,"description":45,"publishedDate":41,"cvssScore":21,"cvssVersion":22,"severity":23,"isKev":31,"epssScore":46},"CVE-2019-14814","There is heap-based buffer overflow in Linux kernel, all versions up to, excluding 5.3, in the marvell wifi chip driver in Linux kernel, that allows local users to cause a denial of service(system crash) or possibly execute arbitrary code.",0.00869,{"cveId":48,"description":49,"publishedDate":12,"cvssScore":50,"cvssVersion":22,"severity":30,"isKev":31,"epssScore":51},"CVE-2024-26733","In the Linux kernel, the following vulnerability has been resolved:\n\narp: Prevent overflow in arp_req_get().\n\nsyzkaller reported an overflown write in arp_req_get(). [0]\n\nWhen ioctl(SIOCGARP) is issued, arp_req_get() looks up an neighbour\nentry and copies neigh->ha to struct arpreq.arp_ha.sa_data.\n\nThe arp_ha here is struct sockaddr, not struct sockaddr_storage, so\nthe sa_data buffer is just 14 bytes.\n\nIn the splat below, 2 bytes are overflown to the next int field,\narp_flags.  We initialise the field just after the memcpy(), so it's\nnot a problem.\n\nHowever, when dev->addr_len is greater than 22 (e.g. MAX_ADDR_LEN),\narp_netmask is overwritten, which could be set as htonl(0xFFFFFFFFUL)\nin arp_ioctl() before calling arp_req_get().\n\nTo avoid the overflow, let's limit the max length of memcpy().\n\nNote that commit b5f0de6df6dc (\"net: dev: Convert sa_data to flexible\narray in struct sockaddr\") just silenced syzkaller.\n\n[0]:\nmemcpy: detected field-spanning write (size 16) of single field \"r->arp_ha.sa_data\" at net\u002Fipv4\u002Farp.c:1128 (size 14)\nWARNING: CPU: 0 PID: 144638 at net\u002Fipv4\u002Farp.c:1128 arp_req_get+0x411\u002F0x4a0 net\u002Fipv4\u002Farp.c:1128\nModules linked in:\nCPU: 0 PID: 144638 Comm: syz-executor.4 Not tainted 6.1.74 #31\nHardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.16.0-debian-1.16.0-5 04\u002F01\u002F2014\nRIP: 0010:arp_req_get+0x411\u002F0x4a0 net\u002Fipv4\u002Farp.c:1128\nCode: fd ff ff e8 41 42 de fb b9 0e 00 00 00 4c 89 fe 48 c7 c2 20 6d ab 87 48 c7 c7 80 6d ab 87 c6 05 25 af 72 04 01 e8 5f 8d ad fb \u003C0f> 0b e9 6c fd ff ff e8 13 42 de fb be 03 00 00 00 4c 89 e7 e8 a6\nRSP: 0018:ffffc900050b7998 EFLAGS: 00010286\nRAX: 0000000000000000 RBX: ffff88803a815000 RCX: 0000000000000000\nRDX: 0000000000000000 RSI: ffffffff8641a44a RDI: 0000000000000001\nRBP: ffffc900050b7a98 R08: 0000000000000001 R09: 0000000000000000\nR10: 0000000000000000 R11: 203a7970636d656d R12: ffff888039c54000\nR13: 1ffff92000a16f37 R14: ffff88803a815084 R15: 0000000000000010\nFS:  00007f172bf306c0(0000) GS:ffff88805aa00000(0000) knlGS:0000000000000000\nCS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033\nCR2: 00007f172b3569f0 CR3: 0000000057f12005 CR4: 0000000000770ef0\nDR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000\nDR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400\nPKRU: 55555554\nCall Trace:\n \u003CTASK>\n arp_ioctl+0x33f\u002F0x4b0 net\u002Fipv4\u002Farp.c:1261\n inet_ioctl+0x314\u002F0x3a0 net\u002Fipv4\u002Faf_inet.c:981\n sock_do_ioctl+0xdf\u002F0x260 net\u002Fsocket.c:1204\n sock_ioctl+0x3ef\u002F0x650 net\u002Fsocket.c:1321\n vfs_ioctl fs\u002Fioctl.c:51 [inline]\n __do_sys_ioctl fs\u002Fioctl.c:870 [inline]\n __se_sys_ioctl fs\u002Fioctl.c:856 [inline]\n __x64_sys_ioctl+0x18e\u002F0x220 fs\u002Fioctl.c:856\n do_syscall_x64 arch\u002Fx86\u002Fentry\u002Fcommon.c:51 [inline]\n do_syscall_64+0x37\u002F0x90 arch\u002Fx86\u002Fentry\u002Fcommon.c:81\n entry_SYSCALL_64_after_hwframe+0x64\u002F0xce\nRIP: 0033:0x7f172b262b8d\nCode: 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 f3 0f 1e fa 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 \u003C48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48\nRSP: 002b:00007f172bf300b8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010\nRAX: ffffffffffffffda RBX: 00007f172b3abf80 RCX: 00007f172b262b8d\nRDX: 0000000020000000 RSI: 0000000000008954 RDI: 0000000000000003\nRBP: 00007f172b2d3493 R08: 0000000000000000 R09: 0000000000000000\nR10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000\nR13: 000000000000000b R14: 00007f172b3abf80 R15: 00007f172bf10000\n \u003C\u002FTASK>",5.5,0.00256,[53],{"cveId":18,"description":19,"publishedDate":20,"cvssScore":21,"severity":23,"isKev":4,"epssScore":24,"cisaVulnName":54,"cisaDateAdded":55,"cisaShortDescription":56,"cisaRequiredAction":57},"Android Kernel Use-After-Free Vulnerability","2021-11-03","Android Kernel contains a use-after-free vulnerability in binder.c that allows for privilege escalation from an application to the Linux Kernel. This vulnerability was observed chained with CVE-2020-0041 and CVE-2020-0069 under exploit chain \"AbstractEmu.\"","Apply updates per vendor instructions.",{"title":59,"metaDescription":60,"keywords":61,"structuredData":62},"A320 Firmware by Netapp - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for A320 Firmware by Netapp with 6 tracked vulnerabilities including 0 critical and 1 high-severity issues and 1 CISA KEV vulnerability. Real-time threat intelligence, CVE tracking, and security recommendations.","A320 Firmware vulnerabilities, A320 Firmware security, A320 Firmware CVE, Netapp A320 Firmware, A320 Firmware threat intelligence, Netapp security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking, A320 Firmware KEV, A320 Firmware exploited vulnerabilities",{"@context":63,"@type":64,"name":65,"description":60,"url":66,"manufacturer":67,"applicationCategory":71,"softwareVersion":72,"mainEntity":73},"https:\u002F\u002Fschema.org","SoftwareApplication","A320 Firmware","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fnetapp\u002Fa320_firmware",{"@type":68,"name":69,"url":70},"Organization","Netapp","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fnetapp","Security Software","Multiple versions",{"@type":74,"name":75,"description":76,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","A320 Firmware Security Vulnerabilities","Security vulnerabilities affecting A320 Firmware by Netapp",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":78,"apiVersion":79},"2026-10-18T15:01:12.727Z","3.0",[],{"rows":82,"total":11,"capped":31,"failed":9},[83],{"cveId":18,"name":54,"severity":23,"cvss":21,"added":55,"epss":24,"published":84,"ranges":85,"checked":4,"hits":86,"covers":31},"2019-10-11T19:15:10.947",[],[]]