[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fP2pH8v7T53w2dmNeV0G6ADKa76b4luvpL9rOyyqJRG4":3,"g5a-family:netapp\u002Fsnapprotect":107,"g5a-ex:netapp\u002Fsnapprotect@*":108},{"success":4,"data":5},true,{"product":6,"versions":15,"topVulnerabilitiesByEpss":16,"kevVulnerabilities":79,"seoMetadata":85,"meta":104},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":14},"netapp","snapprotect",0,17,1,"2019-05-17",[],"Snapprotect by Netapp is a technology product and 17 known security vulnerabilities including 1 CISA Known Exploited Vulnerability. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[],[17,25,33,40,46,52,57,63,68,73],{"cveId":18,"description":19,"publishedDate":20,"cvssScore":21,"cvssVersion":22,"severity":23,"isKev":4,"epssScore":24},"CVE-2016-5195","Race condition in mm\u002Fgup.c in the Linux kernel 2.x through 4.x before 4.8.3 allows local users to gain privileges by leveraging incorrect handling of a copy-on-write (COW) feature to write to a read-only memory mapping, as exploited in the wild in October 2016, aka \"Dirty COW.\"","2016-11-10",7,"v3.1","High",0.83524,{"cveId":26,"description":27,"publishedDate":28,"cvssScore":29,"cvssVersion":22,"severity":30,"isKev":31,"epssScore":32},"CVE-2019-1559","If an application encounters a fatal protocol error and then calls SSL_shutdown() twice (once to send a close_notify, and once to receive one) then OpenSSL can respond differently to the calling application if a 0 byte record is received with invalid padding compared to if a 0 byte record is received with an invalid MAC. If the application then behaves differently based on that in a way that is detectable to the remote peer, then this amounts to a padding oracle that could be used to decrypt data. In order for this to be exploitable \"non-stitched\" ciphersuites must be in use. Stitched ciphersuites are optimised implementations of certain commonly used ciphersuites. Also the application must call SSL_shutdown() twice even if a protocol error has occurred (applications should not do this but some do anyway). Fixed in OpenSSL 1.0.2r (Affected 1.0.2-1.0.2q).","2019-02-27",5.9,"Medium",false,0.17139,{"cveId":34,"description":35,"publishedDate":36,"cvssScore":37,"cvssVersion":22,"severity":38,"isKev":31,"epssScore":39},"CVE-2019-10125","An issue was discovered in aio_poll() in fs\u002Faio.c in the Linux kernel through 5.0.4. A file may be released by aio_poll_wake() if an expected event is triggered immediately (e.g., by the close of a pair of pipes) after the return of vfs_poll(), and this will cause a use-after-free.","2019-03-27",9.8,"Critical",0.05258,{"cveId":41,"description":42,"publishedDate":43,"cvssScore":44,"cvssVersion":22,"severity":23,"isKev":31,"epssScore":45},"CVE-2018-20836","An issue was discovered in the Linux kernel before 4.20. There is a race condition in smp_task_timedout() and smp_task_done() in drivers\u002Fscsi\u002Flibsas\u002Fsas_expander.c, leading to a use-after-free.","2019-05-07",8.1,0.05088,{"cveId":47,"description":48,"publishedDate":49,"cvssScore":50,"cvssVersion":22,"severity":23,"isKev":31,"epssScore":51},"CVE-2019-9003","In the Linux kernel before 4.20.5, attackers can trigger a drivers\u002Fchar\u002Fipmi\u002Fipmi_msghandler.c use-after-free and OOPS by arranging for certain simultaneous execution of the code, as demonstrated by a \"service ipmievd restart\" loop.","2019-02-22",7.5,0.0475,{"cveId":53,"description":54,"publishedDate":55,"cvssScore":44,"cvssVersion":22,"severity":23,"isKev":31,"epssScore":56},"CVE-2019-11815","An issue was discovered in rds_tcp_kill_sock in net\u002Frds\u002Ftcp.c in the Linux kernel before 5.0.8. There is a race condition leading to a use-after-free, related to net namespace cleanup.","2019-05-08",0.04438,{"cveId":58,"description":59,"publishedDate":60,"cvssScore":61,"cvssVersion":22,"severity":23,"isKev":31,"epssScore":62},"CVE-2019-3900","An infinite loop issue was found in the vhost_net kernel module in Linux Kernel up to and including v5.1-rc6, while handling incoming packets in handle_rx(). It could occur if one end sends packets faster than the other end can process them. A guest user, maybe remote one, could use this flaw to stall the vhost_net kernel thread, resulting in a DoS scenario.","2019-04-25",7.7,0.04345,{"cveId":64,"description":65,"publishedDate":12,"cvssScore":66,"cvssVersion":22,"severity":30,"isKev":31,"epssScore":67},"CVE-2018-20839","systemd 242 changes the VT1 mode upon a logout, which allows attackers to read cleartext passwords in certain circumstances, such as watching a shutdown, or using Ctrl-Alt-F1 and Ctrl-Alt-F2. This occurs because the KDGKBMODE (aka current keyboard mode) check is mishandled.",4.3,0.02478,{"cveId":69,"description":70,"publishedDate":71,"cvssScore":44,"cvssVersion":22,"severity":23,"isKev":31,"epssScore":72},"CVE-2015-8960","The TLS protocol 1.2 and earlier supports the rsa_fixed_dh, dss_fixed_dh, rsa_fixed_ecdh, and ecdsa_fixed_ecdh values for ClientCertificateType but does not directly document the ability to compute the master secret in certain situations with a client secret key and server public key but not a server secret key, which makes it easier for man-in-the-middle attackers to spoof TLS servers by leveraging knowledge of the secret key for an arbitrary installed client X.509 certificate, aka the \"Key Compromise Impersonation (KCI)\" issue.","2016-09-21",0.01947,{"cveId":74,"description":75,"publishedDate":76,"cvssScore":77,"cvssVersion":22,"severity":30,"isKev":31,"epssScore":78},"CVE-2019-3874","The SCTP socket buffer used by a userspace application is not accounted by the cgroups subsystem. An attacker can use this flaw to cause a denial of service attack. Kernel 3.10.x and 4.18.x branches are believed to be vulnerable.","2019-03-25",6.5,0.01771,[80],{"cveId":18,"description":19,"publishedDate":20,"cvssScore":21,"severity":23,"isKev":4,"epssScore":24,"cisaVulnName":81,"cisaDateAdded":82,"cisaShortDescription":83,"cisaRequiredAction":84},"Linux Kernel Race Condition Vulnerability","2022-03-03","Race condition in mm\u002Fgup.c in the Linux kernel allows local users to escalate privileges.","Apply updates per vendor instructions.",{"title":86,"metaDescription":87,"keywords":88,"structuredData":89},"Snapprotect by Netapp - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Snapprotect by Netapp with 17 tracked vulnerabilities including 0 critical and 1 high-severity issues and 1 CISA KEV vulnerability. Real-time threat intelligence, CVE tracking, and security recommendations.","Snapprotect vulnerabilities, Snapprotect security, Snapprotect CVE, Netapp Snapprotect, Snapprotect threat intelligence, Netapp security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking, Snapprotect KEV, Snapprotect exploited vulnerabilities",{"@context":90,"@type":91,"name":92,"description":87,"url":93,"manufacturer":94,"applicationCategory":98,"softwareVersion":99,"mainEntity":100},"https:\u002F\u002Fschema.org","SoftwareApplication","Snapprotect","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fnetapp\u002Fsnapprotect",{"@type":95,"name":96,"url":97},"Organization","Netapp","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fnetapp","Security Software","Multiple versions",{"@type":101,"name":102,"description":103,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Snapprotect Security Vulnerabilities","Security vulnerabilities affecting Snapprotect by Netapp",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":105,"apiVersion":106},"2026-10-17T15:26:24.376Z","3.0",[],{"rows":109,"total":11,"capped":31,"failed":9},[110],{"cveId":18,"name":81,"severity":23,"cvss":21,"added":82,"epss":24,"published":111,"ranges":112,"checked":4,"hits":113,"covers":31},"2016-11-10T21:59:00.197",[],[]]