netapp solidfire element os management node vulnerabilities

Latest netapp solidfire element os management node CVEs

Newest publication first

1. CVE-2018-5734 A malformed request can trigger an assertion failure in badcache.c

   Published 2019-01-16

   High·CVSS 7.5 EPSS 6.4%

   While handling a particular type of malformed packet BIND erroneously selects a SERVFAIL rcode instead of a FORMERR rcode. If the receiving view has the SERVFAIL cache feature enabled, this can trigger an assertion failure in badcache.c when the request doesn't contain all of the...

2. CVE-2016-9778 An error handling certain queries using the nxdomain-redirect feature could cause a REQUIRE assertion failure in db.c

   Published 2019-01-16

   Medium·CVSS 5.9 EPSS 6.8%

   An error in handling certain queries can cause an assertion failure when a server is using the nxdomain-redirect feature to cover a zone for which it is also providing authoritative service. A vulnerable server could be intentionally stopped by an attacker if it was using a confi...

3. CVE-2018-3693 Systems with microprocessors utilizing speculative execution and branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a speculative buffer overf...

   Published 2018-07-10

   Medium·CVSS 5.6 EPSS 8.6%

   Systems with microprocessors utilizing speculative execution and branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a speculative buffer overflow and side-channel analysis.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.