[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$ftBAZtzHNb-FzJk8_RVhhDix-xQgXhhL9SXARrsJHXSM":3,"g5a-family:netapp\u002Faff_a250_firmware":105,"g5a-ex:netapp\u002Faff_a250_firmware@*":106},{"success":4,"data":5},true,{"product":6,"versions":15,"topVulnerabilitiesByEpss":16,"kevVulnerabilities":77,"seoMetadata":83,"meta":102},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":14},"netapp","aff_a250_firmware",0,11,1,"2022-08-18",[],"Aff A250 Firmware by Netapp is a technology product and 11 known security vulnerabilities including 1 CISA Known Exploited Vulnerability. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[],[17,26,33,40,45,51,56,62,67,72],{"cveId":18,"description":19,"publishedDate":20,"cvssScore":21,"cvssVersion":22,"severity":23,"isKev":24,"epssScore":25},"CVE-2021-25216","In BIND 9.5.0 -> 9.11.29, 9.12.0 -> 9.16.13, and versions BIND 9.11.3-S1 -> 9.11.29-S1 and 9.16.8-S1 -> 9.16.13-S1 of BIND Supported Preview Edition, as well as release versions 9.17.0 -> 9.17.1 of the BIND 9.17 development branch, BIND servers are vulnerable if they are running an affected version and are configured to use GSS-TSIG features. In a configuration which uses BIND's default settings the vulnerable code path is not exposed, but a server can be rendered vulnerable by explicitly setting values for the tkey-gssapi-keytab or tkey-gssapi-credential configuration options. Although the default configuration is not vulnerable, GSS-TSIG is frequently used in networks where BIND is integrated with Samba, as well as in mixed-server environments that combine BIND servers with Active Directory domain controllers. For servers that meet these conditions, the ISC SPNEGO implementation is vulnerable to various attacks, depending on the CPU architecture for which BIND was built: For named binaries compiled for 64-bit platforms, this flaw can be used to trigger a buffer over-read, leading to a server crash. For named binaries compiled for 32-bit platforms, this flaw can be used to trigger a server crash due to a buffer overflow and possibly also to achieve remote code execution. We have determined that standard SPNEGO implementations are available in the MIT and Heimdal Kerberos libraries, which support a broad range of operating systems, rendering the ISC implementation unnecessary and obsolete. Therefore, to reduce the attack surface for BIND users, we will be removing the ISC SPNEGO implementation in the April releases of BIND 9.11 and 9.16 (it had already been dropped from BIND 9.17). We would not normally remove something from a stable ESV (Extended Support Version) of BIND, but since system libraries can replace the ISC SPNEGO implementation, we have made an exception in this case for reasons of stability and security.","2021-04-29",9.8,"v3.1","Critical",false,0.82367,{"cveId":27,"description":28,"publishedDate":29,"cvssScore":30,"cvssVersion":22,"severity":31,"isKev":4,"epssScore":32},"CVE-2021-22555","A heap out-of-bounds write affecting Linux since v2.6.19-rc1 was discovered in net\u002Fnetfilter\u002Fx_tables.c. This allows an attacker to gain privileges or cause a DoS (via heap memory corruption) through user name space","2021-07-07",7.8,"High",0.78684,{"cveId":34,"description":35,"publishedDate":36,"cvssScore":37,"cvssVersion":22,"severity":38,"isKev":24,"epssScore":39},"CVE-2020-1971","The X.509 GeneralName type is a generic type for representing different types of names. One of those name types is known as EDIPartyName. OpenSSL provides a function GENERAL_NAME_cmp which compares different instances of a GENERAL_NAME to see if they are equal or not. This function behaves incorrectly when both GENERAL_NAMEs contain an EDIPARTYNAME. A NULL pointer dereference and a crash may occur leading to a possible denial of service attack. OpenSSL itself uses the GENERAL_NAME_cmp function for two purposes: 1) Comparing CRL distribution point names between an available CRL and a CRL distribution point embedded in an X509 certificate 2) When verifying that a timestamp response token signer matches the timestamp authority name (exposed via the API functions TS_RESP_verify_response and TS_RESP_verify_token) If an attacker can control both items being compared then that attacker could trigger a crash. For example if the attacker can trick a client or server into checking a malicious certificate against a malicious CRL then this may occur. Note that some applications automatically download CRLs based on a URL embedded in a certificate. This checking happens prior to the signatures on the certificate and CRL being verified. OpenSSL's s_server, s_client and verify tools have support for the \"-crl_download\" option which implements automatic CRL downloading and this attack has been demonstrated to work against those tools. Note that an unrelated bug means that affected versions of OpenSSL cannot parse or construct correct encodings of EDIPARTYNAME. However it is possible to construct a malformed EDIPARTYNAME that OpenSSL's parser will accept and hence trigger this attack. All OpenSSL 1.1.1 and 1.0.2 versions are affected by this issue. Other OpenSSL releases are out of support and have not been checked. Fixed in OpenSSL 1.1.1i (Affected 1.1.1-1.1.1h). Fixed in OpenSSL 1.0.2x (Affected 1.0.2-1.0.2w).","2020-12-08",5.9,"Medium",0.07051,{"cveId":41,"description":42,"publishedDate":20,"cvssScore":43,"cvssVersion":22,"severity":38,"isKev":24,"epssScore":44},"CVE-2021-25214","In BIND 9.8.5 -> 9.8.8, 9.9.3 -> 9.11.29, 9.12.0 -> 9.16.13, and versions BIND 9.9.3-S1 -> 9.11.29-S1 and 9.16.8-S1 -> 9.16.13-S1 of BIND 9 Supported Preview Edition, as well as release versions 9.17.0 -> 9.17.11 of the BIND 9.17 development branch, when a vulnerable version of named receives a malformed IXFR triggering the flaw described above, the named process will terminate due to a failed assertion the next time the transferred secondary zone is refreshed.",6.5,0.05989,{"cveId":46,"description":47,"publishedDate":48,"cvssScore":49,"cvssVersion":22,"severity":31,"isKev":24,"epssScore":50},"CVE-2021-41617","sshd in OpenSSH 6.2 through 8.x before 8.8, when certain non-default configurations are used, allows privilege escalation because supplemental groups are not initialized as expected. Helper programs for AuthorizedKeysCommand and AuthorizedPrincipalsCommand may run with privileges associated with group memberships of the sshd process, if the configuration specifies running the command as a different user.","2021-09-26",7,0.02545,{"cveId":52,"description":53,"publishedDate":54,"cvssScore":30,"cvssVersion":22,"severity":31,"isKev":24,"epssScore":55},"CVE-2020-27815","A flaw was found in the JFS filesystem code in the Linux Kernel which allows a local attacker with the ability to set extended attributes to panic the system, causing memory corruption or escalating privileges. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.","2021-05-26",0.00788,{"cveId":57,"description":58,"publishedDate":59,"cvssScore":60,"cvssVersion":22,"severity":38,"isKev":24,"epssScore":61},"CVE-2021-28971","In intel_pmu_drain_pebs_nhm in arch\u002Fx86\u002Fevents\u002Fintel\u002Fds.c in the Linux kernel through 5.11.8 on some Haswell CPUs, userspace applications (such as perf-fuzzer) can cause a system crash because the PEBS status in a PEBS record is mishandled, aka CID-d88d05a9e0b6.","2021-03-22",5.5,0.00385,{"cveId":63,"description":64,"publishedDate":65,"cvssScore":60,"cvssVersion":22,"severity":38,"isKev":24,"epssScore":66},"CVE-2022-36879","An issue was discovered in the Linux kernel through 5.18.14. xfrm_expand_policies in net\u002Fxfrm\u002Fxfrm_policy.c can cause a refcount to be dropped twice.","2022-07-27",0.00319,{"cveId":68,"description":69,"publishedDate":70,"cvssScore":49,"cvssVersion":22,"severity":31,"isKev":24,"epssScore":71},"CVE-2021-40490","A race condition was discovered in ext4_write_inline_data_end in fs\u002Fext4\u002Finline.c in the ext4 subsystem in the Linux kernel through 5.13.13.","2021-09-03",0.00306,{"cveId":73,"description":74,"publishedDate":59,"cvssScore":75,"cvssVersion":22,"severity":38,"isKev":24,"epssScore":76},"CVE-2021-28964","A race condition was discovered in get_old_root in fs\u002Fbtrfs\u002Fctree.c in the Linux kernel through 5.11.8. It allows attackers to cause a denial of service (BUG) because of a lack of locking on an extent buffer before a cloning operation, aka CID-dbcc7d57bffc.",4.7,0.00267,[78],{"cveId":27,"description":28,"publishedDate":29,"cvssScore":30,"severity":31,"isKev":4,"epssScore":32,"cisaVulnName":79,"cisaDateAdded":80,"cisaShortDescription":81,"cisaRequiredAction":82},"Linux Kernel Heap Out-of-Bounds Write Vulnerability","2025-10-06","Linux Kernel contains a heap out-of-bounds write vulnerability that could allow an attacker to gain privileges or cause a DoS (via heap memory corruption) through user name space.","Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.",{"title":84,"metaDescription":85,"keywords":86,"structuredData":87},"Aff A250 Firmware by Netapp - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Aff A250 Firmware by Netapp with 11 tracked vulnerabilities including 0 critical and 1 high-severity issues and 1 CISA KEV vulnerability. Real-time threat intelligence, CVE tracking, and security recommendations.","Aff A250 Firmware vulnerabilities, Aff A250 Firmware security, Aff A250 Firmware CVE, Netapp Aff A250 Firmware, Aff A250 Firmware threat intelligence, Netapp security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking, Aff A250 Firmware KEV, Aff A250 Firmware exploited vulnerabilities",{"@context":88,"@type":89,"name":90,"description":85,"url":91,"manufacturer":92,"applicationCategory":96,"softwareVersion":97,"mainEntity":98},"https:\u002F\u002Fschema.org","SoftwareApplication","Aff A250 Firmware","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fnetapp\u002Faff_a250_firmware",{"@type":93,"name":94,"url":95},"Organization","Netapp","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fnetapp","Security Software","Multiple versions",{"@type":99,"name":100,"description":101,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Aff A250 Firmware Security Vulnerabilities","Security vulnerabilities affecting Aff A250 Firmware by Netapp",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":103,"apiVersion":104},"2026-10-17T15:10:14.950Z","3.0",[],{"rows":107,"total":11,"capped":24,"failed":9},[108],{"cveId":27,"name":79,"severity":31,"cvss":30,"added":80,"epss":32,"published":109,"ranges":110,"checked":4,"hits":111,"covers":24},"2021-07-07T12:15:08.453",[],[]]