SB
Product
Solidfire Baseboard Management Controller Firmware
On CISA KEVExploited in the wild
71
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 3High 40Medium 26Low 2
Watch
Add Solidfire Baseboard Management Controller Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-28972 | 6.7 | Mar 22 | In drivers/pci/hotplug/rpadlpar_sysfs.c in the Linux kernel through 5.11.8, the RPA PCI Hotplug driver has a user-tolerable buffer overflow when writing a new device name to the… Affected: All versions, or not specified |
| CVE-2020-36158 | 6.7 | Jan 5 | mwifiex_cmd_802_11_ad_hoc_start in drivers/net/wireless/marvell/mwifiex/join.c in the Linux kernel through 5.10.4 might allow remote attackers to execute arbitrary code via a long… Affected: All versions, or not specified |
| CVE-2020-15436 | 6.7 | Nov 23 | Use-after-free vulnerability in fs/block_dev.c in the Linux kernel before 5.8 allows local users to gain privileges or cause a denial of service by leveraging improper access to a… Affected: All versions, or not specified |
| CVE-2021-28039 | 6.5 | Mar 5 | An issue was discovered in the Linux kernel 5.9.x through 5.11.3, as used with Xen Affected: All versions, or not specified |
| CVE-2021-28038 | 6.5 | Mar 5 | An issue was discovered in the Linux kernel through 5.11.3, as used with Xen PV Affected: All versions, or not specified |
| CVE-2020-13143 | 6.5 | May 18 | gadget_dev_desc_UDC_store in drivers/usb/gadget/configfs.c in the Linux kernel 3.16 through 5.6.13 relies on kstrdup without considering the possibility of an internal '\0' value,… Affected: All versions, or not specified |
| CVE-2021-22947 | 5.9 | Sep 29 | When curl >= 7.20.0 and <= 7.78.0 connects to an IMAP or POP3 server to retrieve data using STARTTLS to upgrade to TLS security, the server can respond and send back multiple… Affected: All versions, or not specified |
| CVE-2020-27825 | 5.7 | Dec 11 | A use-after-free flaw was found in kernel/trace/ring_buffer.c in Linux kernel (before 5.10-rc1) Affected: All versions, or not specified |
| CVE-2020-27350 | 5.7 | Dec 10 | APT had several integer overflows and underflows while parsing .deb packages, aka GHSL-2020-168 GHSL-2020-169, in files apt-pkg/contrib/extracttar.cc, apt-pkg/deb/debfile.cc, and… Affected: All versions, or not specified |
| CVE-2020-25673 | 5.5 | May 26 | A vulnerability was found in Linux kernel where non-blocking socket in llcp_sock_connect() leads to leak and eventually hanging-up the system Affected: All versions, or not specified |
| CVE-2021-28971 | 5.5 | Mar 22 | In intel_pmu_drain_pebs_nhm in arch/x86/events/intel/ds.c in the Linux kernel through 5.11.8 on some Haswell CPUs, userspace applications (such as perf-fuzzer) can cause a system… Affected: All versions, or not specified |
| CVE-2021-28951 | 5.5 | Mar 20 | An issue was discovered in fs/io_uring.c in the Linux kernel through 5.11.8 Affected: All versions, or not specified |
| CVE-2020-8832 | 5.5 | Apr 10 | The fix for the Linux kernel in Ubuntu 18.04 LTS for CVE-2019-14615 ("The Linux kernel did not properly clear data structures on context switches for certain Intel graphics… Affected: All versions, or not specified |
| CVE-2019-14591 | 5.5 | Nov 14 | Improper input validation in the API for Intel(R) Graphics Driver versions before 26.20.100.7209 may allow an authenticated user to potentially enable denial of service via local… Affected: All versions, or not specified |
| CVE-2019-14590 | 5.5 | Nov 14 | Improper access control in the API for the Intel(R) Graphics Driver versions before 26.20.100.7209 may allow an authenticated user to potentially enable information disclosure via… Affected: All versions, or not specified |
| CVE-2019-14574 | 5.5 | Nov 14 | Out of bounds read in a subsystem for Intel(R) Graphics Driver versions before 26.20.100.7209 may allow an authenticated user to potentially enable denial of service via local… Affected: All versions, or not specified |
| CVE-2019-11089 | 5.5 | Nov 14 | Insufficient input validation in Kernel Mode module for Intel(R) Graphics Driver before version 25.20.100.6519 may allow an authenticated user to potentially enable denial of… Affected: All versions, or not specified |
| CVE-2019-15118 | 5.5 | Aug 16 | check_input_term in sound/usb/mixer.c in the Linux kernel through 5.2.9 mishandles recursion, leading to kernel stack exhaustion Affected: All versions, or not specified |
| CVE-2021-22897 | 5.3 | Jun 11 | curl 7.61.0 through 7.76.1 suffers from exposure of data element to wrong session due to a mistake in the code for CURLOPT_SSL_CIPHER_LIST when libcurl is built to use the… Affected: All versions, or not specified |
| CVE-2020-12888 | 5.3 | May 15 | The VFIO PCI driver in the Linux kernel through 5.6.13 mishandles attempts to access disabled memory space Affected: All versions, or not specified |
| CVE-2021-28964 | 4.7 | Mar 22 | A race condition was discovered in get_old_root in fs/btrfs/ctree.c in the Linux kernel through 5.11.8 Affected: All versions, or not specified |
| CVE-2019-19054 | 4.7 | Nov 18 | A memory leak in the cx23888_ir_probe() function in drivers/media/pci/cx23885/cx23888-ir.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service (memory… Affected: All versions, or not specified |
| CVE-2019-19063 | 4.6 | Nov 18 | Two memory leaks in the rtl_usb_probe() function in drivers/net/wireless/realtek/rtlwifi/usb.c in the Linux kernel through 5.3.11 allow attackers to cause a denial of service… Affected: All versions, or not specified |
| CVE-2021-27363 | 4.4 | Mar 7 | An issue was discovered in the Linux kernel through 5.11.3 Affected: All versions, or not specified |
| CVE-2020-29660 | 4.4 | Dec 9 | A locking inconsistency issue was discovered in the tty subsystem of the Linux kernel through 5.9.13 Affected: All versions, or not specified |
| CVE-2019-11113 | 4.4 | Nov 14 | Buffer overflow in Kernel Mode module for Intel(R) Graphics Driver before version 25.20.100.6618 (DCH) or 21.20.x.5077 (aka15.45.5077) may allow a privileged user to potentially… Affected: All versions, or not specified |
Showing 26
