Yüksek CVSS 7.3 PoC var
CVE-2025-0725: Hci Baseboard Management Controller: arabellek taşması
Açıklama (NVD)
When libcurl is asked to perform automatic gzip decompression of content-encoded HTTP responses with the `CURLOPT_ACCEPT_ENCODING` option, **using zlib 1.2.0.3 or older**, an attacker-controlled integer overflow would make libcurl perform a buffer overflow.
Özet bilgiler
- Ürün
- Netapp Hci Baseboard Management Controller
- CVSS v3.1
- 7.3
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L - EPSS
- %1,80 (yüzdelik 79)
- CWE
- CWE-120
- Yama
- Mevcut
Etkilenen sürümler
| Ürün | Başlangıç | Bitiş | Düzeltildi |
|---|---|---|---|
| netapp-hci-baseboard-management-controller | — | — | — |
| netapp-hci-h610s-firmware | — | — | — |
| netapp-hci-h610c-firmware | — | — | — |
| netapp-hci-h615c-firmware | — | — | — |
| netapp-solidfire-hci-management-node | — | — | — |
| netapp-solidfire-hci-storage-node | — | — | — |
| haxx-curl | 7.10.5 | — | 8.12.0 |
| haxx-libcurl | 7.10.5 | — | 8.12.0 |