Low WID-SEC-2025-0300 4 CVEs

NetApp ActiveIQ Unified Manager: Mehrere Schwachstellen ermöglichen Denial of Service

Published Feb 9, 2025 · Updated Feb 9, 2025 · de-DE

Vendor: NETAPP Product: ActiveIQ Unified Manager Platform: Linux

Summary

Ein lokaler Angreifer kann mehrere Schwachstellen in NetApp ActiveIQ Unified Manager ausnutzen, um einen Denial of Service Angriff durchzuführen.

Product

ActiveIQ Unified Manager ist eine Managementlösung für NetApp Storage Produkte.

Vulnerabilities 4

Unscored —

CVE-2021-36084

The CIL compiler in SELinux 3.2 has a use-after-free in __cil_verify_classperms (called from __cil_verify_classpermissi…

libsepol libsepol Debian Ubuntu

Jul 1, 2021
Unscored —

CVE-2021-36085

The CIL compiler in SELinux 3.2 has a use-after-free in __cil_verify_classperms (called from __verify_map_perm_classper…

libsepol libsepol Debian Ubuntu

Jul 1, 2021
Unscored —

CVE-2021-36086

The CIL compiler in SELinux 3.2 has a use-after-free in cil_reset_classpermission (called from cil_reset_classperms_set…

libsepol libsepol Debian Ubuntu

Jul 1, 2021
Unscored —

CVE-2021-36087

The CIL compiler in SELinux 3.2 has a heap-based buffer over-read in ebitmap_match_any (called indirectly from cil_chec…

libsepol libsepol Debian Ubuntu

Jul 1, 2021

Revision history

2025-02-09 #1
Initiale Fassung

References

NetApp Security Advisory NTAP-20250207-0004 vom 2025-02-09
https://security.netapp.com/advisory/ntap-20250207-0004/