Mdadm Project Mdadm — known CVE vulnerabilities

Every CVE whose affected-product data names Mdadm Project Mdadm, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (3)

• CVE-2014-5220 — CVSS 7.8 (high): The mdcheck script of the mdadm package for openSUSE 13.2 prior to version 3.3.1-5.14.1 does not properly sanitize device names, which…
• CVE-2023-28736 — CVSS 5.7 (medium): Buffer overflow in some Intel(R) SSD Tools software before version mdadm-4.2-rc2 may allow a privileged user to potentially enable…
• CVE-2023-28938 — CVSS 3.4 (low): Uncontrolled resource consumption in some Intel(R) SSD Tools software before version mdadm-4.2-rc2 may allow a priviledged user to…