Skip to content
OpenAdvisories
Critical ICSA-23-234-01 6 CVEs

Hitachi Energy AFF66x

Published Aug 22, 2023 · Updated Aug 22, 2023

Vendor: Hitachi Energy Product: AFF660/665

Summary

Successful exploitation of these vulnerabilities could allow an attacker to compromise availability, integrity, and confidentiality of the targeted devices.

Vulnerabilities 6

  • Critical 9.6
    CVE-2021-43523

    In uClibc and uClibc-ng before 1.0.39, incorrect handling of special characters in domain names returned by DNS servers…

    uclibc uclibc-ng Debian Azure Linux
  • High 7.5
    CVE-2018-18066

    snmp_oid_compare in snmplib/snmp_api.c in Net-SNMP before 5.8 has a NULL Pointer Exception bug that can be used by an u…

    net-snmp Debian
  • High 7.5
    CVE-2019-11477 Public exploit EPSS 99%

    Integer overflow in TCP_SKB_CB(skb)->tcp_gso_segs

    Jonathan Looney discovered that the TCP_SKB_CB(skb)->tcp_gso_segs value was subject to an integer overflow in the Linux kernel when handling TCP Selective Acknowledgments (SACKs). A remote attacker could use this to cause a denial of service. This has been fi…

    Linux linux_kernel linux-raspi2 linux-hwe Linux Debian Ubuntu
  • High 7.5
    CVE-2022-3204

    NRDelegation Attack

    A vulnerability named 'Non-Responsive Delegation Attack' (NRDelegation Attack) has been discovered in various DNS resolving software. The NRDelegation Attack works by having a malicious delegation with a considerable number of non responsive nameservers. The …

    NLnet Labs Unbound unbound unbound Debian Ubuntu Azure Linux Alpine
  • Medium 5.9
    CVE-2020-11868

    ntpd in ntp before 4.2.8p14 and 4.3.x before 4.3.100 allows an off-path attacker to block unauthenticated synchronizati…

    ntp ntp Debian Ubuntu
  • Medium 5.9
    CVE-2020-13817

    ntpd in ntp before 4.2.8p14 and 4.3.x before 4.3.100 allows remote attackers to cause a denial of service (daemon exit …

    ntp ntp Debian Ubuntu

Revision history

  1. #1

    Initial Publication

References