SP
Product
Service Processor
On CISA KEVExploited in the wild
13
CVEs
2
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 8Medium 4Low 0
Watch
Add Service Processor to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2019-2215 In wildKEV | 7.8 | Oct 11 | Android Kernel Use-After-Free Vulnerability Affected: All versions, or not specified |
| CVE-2019-13272 In wildKEV | 7.8 | Jul 17 | Linux Kernel Improper Privilege Management Vulnerability Affected: All versions, or not specified |
| CVE-2019-5490 | 9.8 | Mar 21 | Certain versions between 2.x to 5.x (refer to advisory) of the NetApp Service Processor firmware were shipped with a default account enabled that could allow unauthorized… Affected: 2.8; 3.7; 4.5; 5.5; 2.8; 3.7; +34 more |
| CVE-2019-14816 | 7.8 | Sep 20 | There is heap-based buffer overflow in kernel, all versions up to, excluding 5.3, in the marvell wifi chip driver in Linux kernel, that allows local users to cause a denial of… Affected: All versions, or not specified |
| CVE-2019-14814 | 7.8 | Sep 20 | There is heap-based buffer overflow in Linux kernel, all versions up to, excluding 5.3, in the marvell wifi chip driver in Linux kernel, that allows local users to cause a denial… Affected: All versions, or not specified |
| CVE-2019-14835 | 7.8 | Sep 17 | A buffer overflow flaw was found, in versions from 2.6.34 to 5.2.x, in the way Linux kernel's vhost functionality that translates virtqueue buffers to IOVs, logged the buffer… Affected: All versions, or not specified |
| CVE-2019-16995 | 7.5 | Sep 30 | In the Linux kernel before 5.0.3, a memory leak exits in hsr_dev_finalize() in net/hsr/hsr_device.c if hsr_add_port fails to add a port, which may cause denial of service, aka… Affected: All versions, or not specified |
| CVE-2016-10708 | 7.5 | Jan 21 | sshd in OpenSSH before 7.4 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via an out-of-sequence NEWKEYS message, as demonstrated… Affected: All versions, or not specified |
| CVE-2016-8610 | 7.5 | Nov 13 | A denial of service flaw was found in OpenSSL 0.9.8, 1.0.1, 1.0.2 through 1.0.2h, and 1.1.0 in the way the TLS/SSL protocol defined processing of ALERT packets during a connection… Affected: All versions, or not specified |
| CVE-2019-25013 | 5.9 | Jan 4 | The iconv feature in the GNU C Library (aka glibc or libc6) through 2.32, when processing invalid multi-byte input sequences in the EUC-KR encoding, may have a buffer over-read Affected: All versions, or not specified |
| CVE-2019-1559 | 5.9 | Feb 27 | 0-byte record padding oracle Affected: All versions, or not specified |
| CVE-2019-15902 | 5.6 | Sep 4 | A backporting error was discovered in the Linux stable/longterm kernel 4.4.x through 4.4.190, 4.9.x through 4.9.190, 4.14.x through 4.14.141, 4.19.x through 4.19.69, and 5.2.x… Affected: All versions, or not specified |
| CVE-2018-15473 | 5.3 | Aug 17 | OpenSSH through 7.7 is prone to a user enumeration vulnerability due to not delaying bailout for an invalid authenticating user until after the packet containing the request has… Affected: All versions, or not specified |
Showing 13
