A220 vulnerabilitiesAnd the versions its exploited flaws hit.

Product1 known exploited0 versions
The short answer

A220 is made by Netapp. We track 9 published vulnerabilities listed under that exact name, across 0 versions. 1 of them is on the list of flaws known to be exploited, the newest added on 3 November 2021. Netapp lists newer releases under their own names, such as A220 Firmware, so check those pages too.

Check your version

The most recent A220 flaw added to the known-exploited list is CVE-2019-2215, on 3 November 2021. We keep watching the known-exploited list.

Other names

Is A220 listed under other names? Yes.

Netapp also lists A220 under more specific names, such as A220 Firmware. Flaws listed only under those names are counted on their own pages, not here. If you run one of these, open its page for its own exploited flaws.

Versions

Which versions of A220 do the exploited flaws hit?

Each exploited flaw lists the versions it affects, as published by the vendor. Find your version, then patch.

Known exploited

Which A220 vulnerabilities are being exploited?

1 flaw is on the government list of vulnerabilities known to be exploited. These are the ones criminals are using now, so they go first, whatever their severity score says.

  1. 7.8
    CVE-2019-2215HighKnown exploited
    Android Kernel Use-After-Free Vulnerability

    Android Kernel contains a use-after-free vulnerability in binder.c that allows for privilege escalation from an application to the Linux Kernel.

    Chance of use72%Known exploited since3 Nov 2021
Exploit likelihood

Which A220 flaws are most likely to be used?

Ranked by the latest exploit-likelihood forecast: the chance each flaw is used in an attack in the next 30 days. A high severity score on its own doesn't tell you that. Flaws shared by many other makers' products are left out.

50% or more10% to 49%Under 10%
  1. >99%

    A security regression (CVE-2006-5051) was discovered in OpenSSH's server (sshd).

    CVSS8.1Published1 Jul 2024
  2. 72%
    CVE-2019-2215HighKnown exploited

    A use-after-free in binder.c allows an elevation of privilege from an application to the Linux Kernel.

    CVSS7.8Published11 Oct 2019
  3. 17%

    If an application encounters a fatal protocol error and then calls SSL_shutdown() twice (once to send a close_notify, and once to receive one) then OpenSSL can respond differently to the calling application if a 0...

    CVSS5.9Published27 Feb 2019
  4. 0.9%

    There is heap-based buffer overflow in kernel, all versions up to, excluding 5.3, in the marvell wifi chip driver in Linux kernel, that allows local users to cause a denial of service(system crash) or possibly...

    CVSS7.8Published20 Sep 2019
  5. 0.9%

    There is heap-based buffer overflow in Linux kernel, all versions up to, excluding 5.3, in the marvell wifi chip driver in Linux kernel, that allows local users to cause a denial of service(system crash) or possibly...

    CVSS7.8Published20 Sep 2019
  6. 0.3%

    In the Linux kernel, the following vulnerability has been resolved: ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim() syzbot pointed out [1] that NEXTHDR_FRAGMENT handling is broken.

    CVSS5.5Published18 Mar 2024
  7. 0.2%

    In the Linux kernel, the following vulnerability has been resolved: ip6_tunnel: make sure to pull inner header in __ip6_tnl_rcv() syzbot found __ip6_tnl_rcv() could access unitiliazed data [1].

    CVSS5.5Published18 Mar 2024
EdgeProtect

Running A220? We'll keep checking.

Looking flaws up one at a time doesn't scale. Tell us what you run once, and we tell you which flaws matter to you, in what order, and keep watching for new ones.

  1. Tell us what you runPick your software from a list, or let us work it out from your website.
  2. We match it to every flawOver 400,000 published flaws, checked against your list.
  3. Ranked by real-world riskA 0 to 100 score, led by evidence criminals are using it.
  4. Told as soon as we knowAn alert by email, in the app or by webhook to your own tools.

Free plan, no card needed. Nothing to install.

FAQ

Common questions, answered plainly.

Something else? Talk to the team →

We track 9 published vulnerabilities listed under the name A220, across 0 versions. The most recent A220 flaw added to the known-exploited list is CVE-2019-2215, on 3 November 2021.

1 is on the list of flaws known to be exploited. The most recently added is CVE-2019-2215.

Netapp also lists A220 under more specific names, such as A220 Firmware. Flaws listed only under those names are counted on their own pages, not here. Open the release you run to see its own list.

Create a EdgeProtect account and track A220. We match it against every published flaw, give each one a risk score from 0 to 100 and keep watching, so you hear about new ones as soon as we know, by email, in the app or by webhook.