[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fCgWuJZ6aMv2b7b6HiSElOJ5H--5m3qfcSKkSxvZ1IXQ":3,"g5a-family:netapp\u002Faff_a400_firmware":101,"g5a-ex:netapp\u002Faff_a400_firmware@*":102},{"success":4,"data":5},true,{"product":6,"versions":15,"topVulnerabilitiesByEpss":16,"kevVulnerabilities":73,"seoMetadata":79,"meta":98},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":14},"netapp","aff_a400_firmware",0,21,1,"2022-08-18",[],"Aff A400 Firmware by Netapp is a technology product and 21 known security vulnerabilities including 1 CISA Known Exploited Vulnerability. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[],[17,26,31,37,43,47,52,59,63,68],{"cveId":18,"description":19,"publishedDate":20,"cvssScore":21,"cvssVersion":22,"severity":23,"isKev":24,"epssScore":25},"CVE-2022-2068","In addition to the c_rehash shell command injection identified in CVE-2022-1292, further circumstances where the c_rehash script does not properly sanitise shell metacharacters to prevent command injection were found by code review. When the CVE-2022-1292 was fixed it was not discovered that there are other places in the script where the file names of certificates being hashed were possibly passed to a command executed through the shell. This script is distributed by some operating systems in a manner where it is automatically executed. On such operating systems, an attacker could execute arbitrary commands with the privileges of the script. Use of the c_rehash script is considered obsolete and should be replaced by the OpenSSL rehash command line tool. Fixed in OpenSSL 3.0.4 (Affected 3.0.0,3.0.1,3.0.2,3.0.3). Fixed in OpenSSL 1.1.1p (Affected 1.1.1-1.1.1o). Fixed in OpenSSL 1.0.2zf (Affected 1.0.2-1.0.2ze).","2022-06-21",7.3,"v3.1","High",false,0.96391,{"cveId":27,"description":28,"publishedDate":29,"cvssScore":21,"cvssVersion":22,"severity":23,"isKev":24,"epssScore":30},"CVE-2022-1292","The c_rehash script does not properly sanitise shell metacharacters to prevent command injection. This script is distributed by some operating systems in a manner where it is automatically executed. On such operating systems, an attacker could execute arbitrary commands with the privileges of the script. Use of the c_rehash script is considered obsolete and should be replaced by the OpenSSL rehash command line tool. Fixed in OpenSSL 3.0.3 (Affected 3.0.0,3.0.1,3.0.2). Fixed in OpenSSL 1.1.1o (Affected 1.1.1-1.1.1n). Fixed in OpenSSL 1.0.2ze (Affected 1.0.2-1.0.2zd).","2022-05-03",0.82612,{"cveId":32,"description":33,"publishedDate":34,"cvssScore":35,"cvssVersion":22,"severity":23,"isKev":4,"epssScore":36},"CVE-2021-22555","A heap out-of-bounds write affecting Linux since v2.6.19-rc1 was discovered in net\u002Fnetfilter\u002Fx_tables.c. This allows an attacker to gain privileges or cause a DoS (via heap memory corruption) through user name space","2021-07-07",7.8,0.78684,{"cveId":38,"description":39,"publishedDate":40,"cvssScore":41,"cvssVersion":22,"severity":23,"isKev":24,"epssScore":42},"CVE-2019-19050","A memory leak in the crypto_reportstat() function in crypto\u002Fcrypto_user_stat.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service (memory consumption) by triggering crypto_reportstat_alg() failures, aka CID-c03b04dcdba1.","2019-11-18",7.5,0.05077,{"cveId":44,"description":45,"publishedDate":29,"cvssScore":41,"cvssVersion":22,"severity":23,"isKev":24,"epssScore":46},"CVE-2022-1473","The OPENSSL_LH_flush() function, which empties a hash table, contains a bug that breaks reuse of the memory occuppied by the removed hash table entries. This function is used when decoding certificates or keys. If a long lived process periodically decodes certificates or keys its memory usage will expand without bounds and the process might be terminated by the operating system causing a denial of service. Also traversing the empty hash table entries will take increasingly more time. Typically such long lived processes might be TLS clients or TLS servers configured to accept client certificate authentication. The function was added in the OpenSSL 3.0 version thus older releases are not affected by the issue. Fixed in OpenSSL 3.0.3 (Affected 3.0.0,3.0.1,3.0.2).",0.04583,{"cveId":48,"description":49,"publishedDate":50,"cvssScore":41,"cvssVersion":22,"severity":23,"isKev":24,"epssScore":51},"CVE-2021-45485","In the IPv6 implementation in the Linux kernel before 5.13.3, net\u002Fipv6\u002Foutput_core.c has an information leak because of certain use of a hash table which, although big, doesn't properly consider that IPv6-based attackers can typically choose among many IPv6 source addresses.","2021-12-25",0.03615,{"cveId":53,"description":54,"publishedDate":55,"cvssScore":56,"cvssVersion":22,"severity":57,"isKev":24,"epssScore":58},"CVE-2019-18805","An issue was discovered in net\u002Fipv4\u002Fsysctl_net_ipv4.c in the Linux kernel before 5.0.11. There is a net\u002Fipv4\u002Ftcp_input.c signed integer overflow in tcp_ack_update_rtt() when userspace writes a very large integer to \u002Fproc\u002Fsys\u002Fnet\u002Fipv4\u002Ftcp_min_rtt_wlen, leading to a denial of service or possibly unspecified other impact, aka CID-19fad20d15a6.","2019-11-07",9.8,"Critical",0.03474,{"cveId":60,"description":61,"publishedDate":40,"cvssScore":41,"cvssVersion":22,"severity":23,"isKev":24,"epssScore":62},"CVE-2019-19069","A memory leak in the fastrpc_dma_buf_attach() function in drivers\u002Fmisc\u002Ffastrpc.c in the Linux kernel before 5.3.9 allows attackers to cause a denial of service (memory consumption) by triggering dma_get_sgtable() failures, aka CID-fc739a058d99.",0.03465,{"cveId":64,"description":65,"publishedDate":66,"cvssScore":35,"cvssVersion":22,"severity":23,"isKev":24,"epssScore":67},"CVE-2019-19816","In the Linux kernel 5.0.21, mounting a crafted btrfs filesystem image and performing some operations can cause slab-out-of-bounds write access in __btrfs_map_block in fs\u002Fbtrfs\u002Fvolumes.c, because a value of 1 for the number of data stripes is mishandled.","2019-12-17",0.03293,{"cveId":69,"description":70,"publishedDate":71,"cvssScore":35,"cvssVersion":22,"severity":23,"isKev":24,"epssScore":72},"CVE-2019-19448","In the Linux kernel 5.0.21 and 5.3.11, mounting a crafted btrfs filesystem image, performing some operations, and then making a syncfs system call can lead to a use-after-free in try_merge_free_space in fs\u002Fbtrfs\u002Ffree-space-cache.c because the pointer to a left data structure can be the same as the pointer to a right data structure.","2019-12-08",0.02143,[74],{"cveId":32,"description":33,"publishedDate":34,"cvssScore":35,"severity":23,"isKev":4,"epssScore":36,"cisaVulnName":75,"cisaDateAdded":76,"cisaShortDescription":77,"cisaRequiredAction":78},"Linux Kernel Heap Out-of-Bounds Write Vulnerability","2025-10-06","Linux Kernel contains a heap out-of-bounds write vulnerability that could allow an attacker to gain privileges or cause a DoS (via heap memory corruption) through user name space.","Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.",{"title":80,"metaDescription":81,"keywords":82,"structuredData":83},"Aff A400 Firmware by Netapp - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Aff A400 Firmware by Netapp with 21 tracked vulnerabilities including 0 critical and 1 high-severity issues and 1 CISA KEV vulnerability. Real-time threat intelligence, CVE tracking, and security recommendations.","Aff A400 Firmware vulnerabilities, Aff A400 Firmware security, Aff A400 Firmware CVE, Netapp Aff A400 Firmware, Aff A400 Firmware threat intelligence, Netapp security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking, Aff A400 Firmware KEV, Aff A400 Firmware exploited vulnerabilities",{"@context":84,"@type":85,"name":86,"description":81,"url":87,"manufacturer":88,"applicationCategory":92,"softwareVersion":93,"mainEntity":94},"https:\u002F\u002Fschema.org","SoftwareApplication","Aff A400 Firmware","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fnetapp\u002Faff_a400_firmware",{"@type":89,"name":90,"url":91},"Organization","Netapp","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fnetapp","Security Software","Multiple versions",{"@type":95,"name":96,"description":97,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Aff A400 Firmware Security Vulnerabilities","Security vulnerabilities affecting Aff A400 Firmware by Netapp",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":99,"apiVersion":100},"2026-10-17T14:25:42.498Z","3.0",[],{"rows":103,"total":11,"capped":24,"failed":11},[104],{"cveId":32,"name":75,"severity":23,"cvss":35,"added":76,"epss":36,"published":34,"ranges":105,"hits":106,"checked":24,"covers":24},[],[]]