CVE-2021-26996 — Out-of-bounds Write in E-series Santricity OS Controller

CWE-787 — Out-of-bounds Write4 documents4 sources
Severity
7.5HIGHNVD
EPSS
0.4%
top 42.27%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Netapp E-series Santricity OS Controller
Timeline
PublishedJun 11
Latest updateMay 21

Description

E-Series SANtricity OS Controller Software 11.x versions prior to 11.70.1 are susceptible to a vulnerability which when successfully exploited could allow a remote attacker to discover system configuration and application information which may aid in crafting more complex attacks.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:NExploitability: 3.9 | Impact: 3.6

Affected Packages1 packages

🔴Vulnerability Details

2
GHSA
GHSA-28w9-vf5c-mw9p: E-Series SANtricity OS Controller Software 11↗2022-05-24
▶
CVEList
CVE-2021-26996: E-Series SANtricity OS Controller Software 11↗2021-06-11
▶

📋Vendor Advisories

1
Red Hat
kernel: tracing: Correct the length check which causes memory corruption↗2024-05-21
▶
CVE-2021-26996 — Out-of-bounds Write | cvebase