HCI Management Node

DATE	CVE	VULNERABILITY TITLE	RISK
2021-11-15	CVE-2021-42374	Out-of-bounds Read vulnerability in multiple products An out-of-bounds heap read in Busybox's unlzma applet leads to information leak and denial of service when crafted LZMA-compressed input is decompressed. local high complexity busybox fedoraproject netapp CWE-125	5.3
2021-11-15	CVE-2021-42375	An incorrect handling of a special element in Busybox's ash applet leads to denial of service when processing a crafted shell command, due to the shell mistaking specific characters for reserved characters. local low complexity busybox fedoraproject netapp	5.5
2021-11-15	CVE-2021-42376	NULL Pointer Dereference vulnerability in multiple products A NULL pointer dereference in Busybox's hush applet leads to denial of service when processing a crafted shell command, due to missing validation after a \x03 delimiter character. local low complexity busybox fedoraproject netapp CWE-476	5.5
2021-11-15	CVE-2021-42377	Release of Invalid Pointer or Reference vulnerability in multiple products An attacker-controlled pointer free in Busybox's hush applet leads to denial of service and possible code execution when processing a crafted shell command, due to the shell mishandling the &&& string. network low complexity busybox fedoraproject netapp CWE-763 critical	9.8
2021-10-20	CVE-2021-35603	Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). network high complexity oracle netapp debian fedoraproject	3.7
2021-10-20	CVE-2021-35550	Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). network high complexity oracle netapp fedoraproject debian	5.9
2021-10-20	CVE-2021-35556	Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Swing). network low complexity oracle netapp debian fedoraproject	5.3
2021-10-20	CVE-2021-35559	Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Swing). network low complexity oracle netapp debian fedoraproject	5.3
2021-10-20	CVE-2021-35561	Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Utility). network low complexity oracle netapp fedoraproject debian	5.3
2021-10-20	CVE-2021-35564	Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Keytool). network low complexity oracle netapp fedoraproject debian	5.3