Netapp Cloud Insights Telegraf vulnerabilities

• go standard library encoding/xml, golang go, fedoraproject fedora +1 more +3 more Stack exhaustion from deeply nested XML documents in encoding/xml CVE-2022-28131 Fix available 7.5 HighJuly 16, 2022
• go standard library crypto/rand, golang go, netapp cloud insights telegraf agent +2 more Indefinite hang with large buffers on Windows in crypto/rand CVE-2022-30634 Fix available 7.5 HighJune 7, 2022
• golang go, netapp beegfs csi driver, cloud insights telegraf agent +2 more +4 more cmd/go in Go before 1.16.14 and 1.17.x before 1.17.7 can misinterpret branch names that falsely... CVE-2022-23773 Public exploitFix available 7.5 HighFebruary 11, 2022
• golang go, debian linux, netapp beegfs csi driver +3 more +5 more Rat.SetString in math/big in Go before 1.16.14 and 1.17.x before 1.17.7 has an overflow that can... CVE-2022-23772 Fix available 7.5 HighFebruary 11, 2022
• golang go, debian linux, netapp beegfs csi driver +3 more +5 more Curve.IsOnCurve in crypto/elliptic in Go before 1.16.14 and 1.17.x before 1.17.7 can incorrectly... CVE-2022-23806 Fix available 9.1 CriticalFebruary 11, 2022
• golang go, debian linux, netapp cloud insights telegraf +2 more golang.org/x/net/http2 allows uncontrolled memory consumption CVE-2021-44716 Fix available 7.5 HighDecember 15, 2021
• golang go, netapp cloud insights telegraf +1 more In archive/zip in Go before 1.16.8 and 1.17.x before 1.17.1, a crafted archive header (falsely... CVE-2021-39293 Fix available 7.5 HighOctober 6, 2021
• golang go, fedoraproject fedora, netapp cloud insights telegraf +3 more +5 more The crypto/tls package of Go through 1.16.5 does not properly assert that the type of public key... CVE-2021-34558 Public exploitFix available 6.5 MediumJuly 15, 2021
• golang go, netapp cloud insights telegraf agent +1 more Go before 1.15.12 and 1.16.x before 1.16.5 allows injection. CVE-2021-33195 Fix available 7.3 HighJune 28, 2021
• golang go, debian linux, fedoraproject fedora +2 more +4 more In Go before 1.14.14 and 1.15.x before 1.15.7, crypto/elliptic/p224.go can generate incorrect... CVE-2021-3114 Fix available 6.5 MediumJanuary 26, 2021
• golang go, fedoraproject fedora, netapp cloud insights telegraf agent +1 more +3 more Go before 1.14.14 and 1.15.x before 1.15.7 on Windows is vulnerable to Command Injection and... CVE-2021-3115 Fix available 7.5 HighJanuary 26, 2021
• golang go, fedoraproject fedora, netapp cloud insights telegraf agent +1 more +3 more Go before 1.14.12 and 1.15.x before 1.15.4 allows Denial of Service. CVE-2020-28362 Fix available 7.5 HighNovember 18, 2020
• go toolchain cmd/cgo, cmd/go, golang go +3 more +5 more Arbitrary code execution in go command with cgo in cmd/go and cmd/cgo CVE-2020-28366 Fix available 7.5 HighNovember 18, 2020
• golang go, debian linux, fedoraproject fedora +1 more +3 more Helm uses crypto package vulnerable to panic from malformed X.509 certificate CVE-2020-7919 Fix available 7.5 HighMarch 16, 2020
• golang go, debian linux, fedoraproject fedora +6 more +8 more Go before 1.12.10 and 1.13.x before 1.13.1 allow HTTP Request Smuggling. CVE-2019-16276 Fix available 7.5 HighSeptember 27, 2019