Skip to content
OpenAdvisories
High WID-SEC-2025-2844 10 CVEs

HPE ProLiant: Mehrere Schwachstellen

Published Dec 14, 2025 · Updated Dec 14, 2025 · de-DE

Summary

Ein Angreifer kann mehrere Schwachstellen in HPE ProLiant und HPE Synergy ausnutzen, um seine Privilegien zu erhöhen, um einen Denial of Service Angriff durchzuführen, und um Informationen offenzulegen..

Product

ProLiant ist eine Serverfamilie von Hewlett Packard Enterprise.
Synergy ist eine kombinierbare Blade-Infrastruktur, die Workloads in einer Hybrid Cloud-Umgebung unterstützt.

Vulnerabilities 10

  • High 8.8

    Improper input validation for some Intel QuickAssist Technology before version 2.6.0 within Ring 3: User Applications m…

  • High 7.8

    Out-of-bounds write for some Intel(R) QAT Windows software before version 2.6.0. within Ring 3: User Applications may a…

  • Medium 6.6

    Buffer overflow for some Intel(R) QAT Windows software before version 2.6.0. within Ring 3: User Applications may allow…

  • Medium 6.5

    Buffer overflow for some Intel(R) QAT Windows software before version 2.6.0. within Ring 3: User Applications may allow…

  • Medium 6.5

    Untrusted pointer dereference for some Intel(R) QAT Windows software before version 2.6.0. within Ring 3: User Applicat…

  • Medium 6.5

    Untrusted pointer dereference for some Intel QuickAssist Technology software before version 2.6.0 within Ring 3: User A…

  • Medium 5.6

    Out-of-bounds read for some Intel(R) QAT Windows software before version 2.6.0. within Ring 3: User Applications may al…

  • Medium 5.5

    Null pointer dereference for some Intel(R) QAT Windows software before version 2.6.0. within Ring 3: User Applications …

  • Low 3.8

    Improper input validation for some Intel QuickAssist Technology software before version 2.6.0 within Ring 3: User Appli…

  • Low 3.3

    Improper conditions check for some Intel(R) QAT Windows software before version 2.6.0. within Ring 3: User Applications…

Revision history

  1. #1

    Initiale Fassung

References