[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$ftttQ978mdHOllKFW2l2OwHcXC0sTHv6dOfRjJGpTIOg":3,"g5a-ex:netapp\u002Fhci_compute_node_firmware@*":96,"g5a-family:netapp\u002Fhci_compute_node_firmware":98},{"success":4,"data":5},true,{"product":6,"versions":14,"topVulnerabilitiesByEpss":15,"kevVulnerabilities":73,"seoMetadata":74,"meta":93},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":9,"lastCveUpdate":11,"versions":12,"description":13},"netapp","hci_compute_node_firmware",0,34,"2025-01-20",[],"Hci Compute Node Firmware by Netapp is a technology product and 34 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[],[16,25,31,37,44,48,53,57,62,67],{"cveId":17,"description":18,"publishedDate":19,"cvssScore":20,"cvssVersion":21,"severity":22,"isKev":23,"epssScore":24},"CVE-2021-22901","curl 7.75.0 through 7.76.1 suffers from a use-after-free vulnerability resulting in already freed memory being used when a TLS 1.3 session ticket arrives over a connection. A malicious server can use this in rare unfortunate circumstances to potentially reach remote code execution in the client. When libcurl at run-time sets up support for TLS 1.3 session tickets on a connection using OpenSSL, it stores pointers to the transfer in-memory object for later retrieval when a session ticket arrives. If the connection is used by multiple transfers (like with a reused HTTP\u002F1.1 connection or multiplexed HTTP\u002F2 connection) that first transfer object might be freed before the new session is established on that connection and then the function will access a memory buffer that might be freed. When using that memory, libcurl might even call a function pointer in the object, making it possible for a remote code execution if the server could somehow manage to get crafted memory content into the correct place in memory.","2021-06-11",8.1,"v3.1","High",false,0.60122,{"cveId":26,"description":27,"publishedDate":28,"cvssScore":29,"cvssVersion":21,"severity":22,"isKev":23,"epssScore":30},"CVE-2021-20322","A flaw in the processing of received ICMP errors (ICMP fragment needed and ICMP redirect) in the Linux kernel functionality was found to allow the ability to quickly scan open UDP ports. This flaw allows an off-path remote user to effectively bypass the source port UDP randomization. The highest threat from this vulnerability is to confidentiality and possibly integrity, because software that relies on UDP source port randomization are indirectly affected as well.","2022-02-18",7.4,0.06846,{"cveId":32,"description":33,"publishedDate":34,"cvssScore":35,"cvssVersion":21,"severity":22,"isKev":23,"epssScore":36},"CVE-2019-19052","A memory leak in the gs_can_open() function in drivers\u002Fnet\u002Fcan\u002Fusb\u002Fgs_usb.c in the Linux kernel before 5.3.11 allows attackers to cause a denial of service (memory consumption) by triggering usb_submit_urb() failures, aka CID-fb5be6a7b486.","2019-11-18",7.5,0.05376,{"cveId":38,"description":39,"publishedDate":40,"cvssScore":41,"cvssVersion":21,"severity":42,"isKev":23,"epssScore":43},"CVE-2021-3733","There's a flaw in urllib's AbstractBasicAuthHandler class. An attacker who controls a malicious HTTP server that an HTTP client (such as web browser) connects to, could trigger a Regular Expression Denial of Service (ReDOS) during an authentication request with a specially crafted payload that is sent by the server to the client. The greatest threat that this flaw poses is to application availability.","2022-03-10",6.5,"Medium",0.04675,{"cveId":45,"description":46,"publishedDate":34,"cvssScore":35,"cvssVersion":21,"severity":22,"isKev":23,"epssScore":47},"CVE-2019-19044","Two memory leaks in the v3d_submit_cl_ioctl() function in drivers\u002Fgpu\u002Fdrm\u002Fv3d\u002Fv3d_gem.c in the Linux kernel before 5.3.11 allow attackers to cause a denial of service (memory consumption) by triggering kcalloc() or v3d_job_init() failures, aka CID-29cd13cfd762.",0.04146,{"cveId":49,"description":50,"publishedDate":51,"cvssScore":29,"cvssVersion":21,"severity":22,"isKev":23,"epssScore":52},"CVE-2020-13817","ntpd in ntp before 4.2.8p14 and 4.3.x before 4.3.100 allows remote attackers to cause a denial of service (daemon exit or system time change) by predicting transmit timestamps for use in spoofed packets. The victim must be relying on unauthenticated IPv4 time sources. There must be an off-path attacker who can query time from the victim's ntpd instance.","2020-06-04",0.04071,{"cveId":54,"description":55,"publishedDate":34,"cvssScore":35,"cvssVersion":21,"severity":22,"isKev":23,"epssScore":56},"CVE-2019-19060","A memory leak in the adis_update_scan_mode() function in drivers\u002Fiio\u002Fimu\u002Fadis_buffer.c in the Linux kernel before 5.3.9 allows attackers to cause a denial of service (memory consumption), aka CID-ab612b1daf41.",0.03755,{"cveId":58,"description":59,"publishedDate":60,"cvssScore":35,"cvssVersion":21,"severity":22,"isKev":23,"epssScore":61},"CVE-2021-45485","In the IPv6 implementation in the Linux kernel before 5.13.3, net\u002Fipv6\u002Foutput_core.c has an information leak because of certain use of a hash table which, although big, doesn't properly consider that IPv6-based attackers can typically choose among many IPv6 source addresses.","2021-12-25",0.03585,{"cveId":63,"description":64,"publishedDate":65,"cvssScore":20,"cvssVersion":21,"severity":22,"isKev":23,"epssScore":66},"CVE-2022-27778","A use of incorrectly resolved name vulnerability fixed in 7.83.1 might remove the wrong file when `--no-clobber` is used together with `--remove-on-error`.","2022-06-02",0.03453,{"cveId":68,"description":69,"publishedDate":70,"cvssScore":71,"cvssVersion":21,"severity":22,"isKev":23,"epssScore":72},"CVE-2021-28041","ssh-agent in OpenSSH before 8.5 has a double free that may be relevant in a few less-common scenarios, such as unconstrained agent-socket access on a legacy operating system, or the forwarding of an agent to an attacker-controlled host.","2021-03-05",7.1,0.03422,[],{"title":75,"metaDescription":76,"keywords":77,"structuredData":78},"Hci Compute Node Firmware by Netapp - Security Vulnerabilities & Analysis | EdgeProtect","Comprehensive security analysis for Hci Compute Node Firmware by Netapp with 34 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Hci Compute Node Firmware vulnerabilities, Hci Compute Node Firmware security, Hci Compute Node Firmware CVE, Netapp Hci Compute Node Firmware, Hci Compute Node Firmware threat intelligence, Netapp security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":79,"@type":80,"name":81,"description":76,"url":82,"manufacturer":83,"applicationCategory":87,"softwareVersion":88,"mainEntity":89},"https:\u002F\u002Fschema.org","SoftwareApplication","Hci Compute Node Firmware","https:\u002F\u002Fedgeprotect.io\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fnetapp\u002Fhci_compute_node_firmware",{"@type":84,"name":85,"url":86},"Organization","Netapp","https:\u002F\u002Fedgeprotect.io\u002Fvendors\u002Fnetapp","Security Software","Multiple versions",{"@type":90,"name":91,"description":92,"vulnerabilityCount":10,"dateModified":11},"SecurityVulnerability","Hci Compute Node Firmware Security Vulnerabilities","Security vulnerabilities affecting Hci Compute Node Firmware by Netapp",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":9,"lastUpdated":11,"generatedAt":94,"apiVersion":95},"2026-10-28T17:12:14.379Z","3.0",{"rows":97,"total":9,"capped":23,"failed":9},[],[]]