Netapp Data Ontap vulnerabilities

• apache http server, netapp clustered data ontap +1 more Apache HTTP Server: Crash resulting in Denial of Service in mod_proxy via a malicious request CVE-2024-38477 Fix available 7.5 HighJuly 1, 2024
• apache http server, netapp clustered data ontap +1 more Apache HTTP Server may use exploitable/malicious backend application output to run local handlers via internal redirect CVE-2024-38476 Public exploitFix available EPSS 41.6% 9.8 CriticalJuly 1, 2024
• apache http server, netapp clustered data ontap +1 more Apache HTTP Server weakness with encoded question marks in backreferences CVE-2024-38474 Fix available 9.8 CriticalJuly 1, 2024
• netapp ontap select deploy administration utility, clustered data ontap +1 more Default Privileged Account Credentials Vulnerability in ONTAP Select Deploy administration utility CVE-2024-21990 5.4 MediumApril 17, 2024
• netapp ontap 9, clustered data ontap +1 more Privilege Escalation Vulnerability in ONTAP 9 CVE-2024-21985 7.6 HighJanuary 26, 2024
• netapp ontap 9, clustered data ontap +1 more CVE-2024-21982 Information Disclosure Vulnerability in ONTAP 9 CVE-2024-21982 4.8 MediumJanuary 11, 2024
• netapp ontap 9, clustered data ontap +1 more Denial of Service Vulnerability in ONTAP 9 CVE-2023-27314 7.5 HighOctober 12, 2023
• mit kerberos 5, debian linux, netapp active iq unified manager +4 more +6 more lib/kadm5/kadm_rpc_xdr.c in MIT Kerberos 5 (aka krb5) before 1.20.2 and 1.21.x before 1.21.1... CVE-2023-36054 Fix available 6.5 MediumAugust 7, 2023
• freebsd, netapp clustered data ontap +1 more Remote denial of service in IPv6 fragment reassembly CVE-2023-3107 7.5 HighAugust 1, 2023
• es iperf3, apple macos, debian linux +3 more +5 more iperf3 before 3.14 allows peers to cause an integer overflow and heap corruption via a crafted... CVE-2023-38403 Fix available 7.5 HighJuly 17, 2023
• openldap, apple macos, netapp active iq unified manager +11 more +13 more A vulnerability was found in openldap. This security flaw causes a null pointer dereference in... CVE-2023-2953 Fix available 7.5 HighMay 30, 2023
• haxx curl, apple macos, netapp clustered data ontap +5 more +7 more A denial of service vulnerability exists in curl <v8.1.0 in the way libcurl provides several... CVE-2023-28320 Fix available 5.9 MediumMay 17, 2023
• haxx curl, apple macos, fedoraproject fedora +6 more +8 more An information disclosure vulnerability exists in curl <v8.1.0 when doing HTTP(S) transfers,... CVE-2023-28322 Fix available 3.7 LowMay 17, 2023
• haxx curl, apple macos, debian linux +7 more +9 more An improper certificate validation vulnerability exists in curl <v8.1.0 in the way it supports... CVE-2023-28321 Fix available 5.9 MediumMay 17, 2023
• haxx curl, apple macos, netapp clustered data ontap +5 more +7 more A use after free vulnerability exists in curl <v8.1.0 in the way libcurl offers a feature to... CVE-2023-28319 Fix available 7.5 HighMay 17, 2023
• haxx libcurl, broadcom brocade fabric operating system firmware, netapp active iq unified manager +9 more +11 more A double free vulnerability exists in libcurl <8.0.0 when sharing HSTS data between separate ... CVE-2023-27537 Fix available 5.9 MediumMarch 20, 2023
• haxx libcurl, broadcom brocade fabric operating system firmware, debian linux +11 more +13 more An authentication bypass vulnerability exists in libcurl v8.0.0 where it reuses a previously... CVE-2023-27538 Fix available 5.5 MediumMarch 20, 2023
• haxx curl, fedoraproject fedora, netapp active iq unified manager +9 more +11 more A vulnerability in input validation exists in curl <8.0 during communication using the TELNET... CVE-2023-27533 Fix available 8.8 HighMarch 20, 2023
• haxx curl, debian linux, fedoraproject fedora +9 more +11 more An allocation of resources without limits or throttling vulnerability exists in curl <v7.88.0... CVE-2023-23916 Fix available 6.5 MediumFebruary 15, 2023
• haxx curl, netapp active iq unified manager, clustered data ontap +8 more +10 more A cleartext transmission of sensitive information vulnerability exists in curl <v7.88.0 that... CVE-2023-23915 Fix available 6.5 MediumFebruary 15, 2023
• haxx curl, netapp active iq unified manager, clustered data ontap +8 more +10 more A cleartext transmission of sensitive information vulnerability exists in curl <v7.88.0 that... CVE-2023-23914 Fix available 9.1 CriticalFebruary 15, 2023
• openssl, fedoraproject fedora, netapp clustered data ontap +10 more +12 more X.509 Email Address 4-byte Buffer Overflow CVE-2022-3602 Public exploitFix available EPSS 90.8% 7.5 HighNovember 1, 2022
• haxx curl, apple macos, netapp clustered data ontap +8 more +10 more curl can be told to parse a `.netrc` file for credentials. If that file endsin a line with 4095... CVE-2022-35260 Fix available 6.5 MediumOctober 26, 2022
• haxx curl, apple macos, debian linux +9 more +11 more When doing HTTP(S) transfers, libcurl might erroneously use the read callback (... CVE-2022-32221 Fix available 9.8 CriticalOctober 26, 2022
• xmlsoft libxml2, apple ipados, iphone os +17 more +19 more An issue was discovered in libxml2 before 2.10.3. Certain invalid XML entity definitions can... CVE-2022-40304 Fix available 7.8 HighOctober 21, 2022
• xmlsoft libxml2, apple ipados, iphone os +17 more +19 more An issue was discovered in libxml2 before 2.10.3. When parsing a multi-gigabyte XML document with... CVE-2022-40303 Fix available EPSS 41.4% 7.5 HighOctober 21, 2022
• netapp clustered data ontap Clustered Data ONTAP versions 9.11.1 through 9.11.1P2 with SnapLock configured FlexGroups are... CVE-2022-23241 8.1 HighOctober 19, 2022
• haxx curl, apple macos, debian linux +14 more +16 more When curl is used to retrieve and parse cookies from a HTTP(S) server, itaccepts cookies using... CVE-2022-35252 Fix available 3.7 LowAugust 31, 2022
• openssl, debian linux, fedoraproject fedora +20 more +22 more AES OCB fails to encrypt some bytes CVE-2022-2097 Public exploitFix available 5.3 MediumJuly 5, 2022
• haxx curl, apple macos, debian linux +15 more +17 more When curl < 7.84.0 does FTP transfers secured by krb5, it handles message verification failures... CVE-2022-32208 Fix available 5.9 MediumJune 27, 2022
• haxx curl, apple macos, debian linux +15 more +17 more When curl < 7.84.0 saves cookies, alt-svc and hsts data to local files, it makes the operation... CVE-2022-32207 Fix available EPSS 12.3% 9.8 CriticalJune 27, 2022
• haxx curl, debian linux, fedoraproject fedora +20 more +22 more curl < 7.84.0 supports "chained" HTTP compression algorithms, meaning that a serverresponse can... CVE-2022-32206 Fix available EPSS 36.3% 6.5 MediumJune 27, 2022
• haxx curl, apple macos, debian linux +20 more +22 more A malicious server can serve excessive amounts of `Set-Cookie:` headers in a HTTP response to... CVE-2022-32205 Fix available EPSS 31.5% 4.3 MediumJune 27, 2022
• apache http server, fedoraproject fedora, netapp clustered data ontap +2 more mod_proxy X-Forwarded-For dropped by hop-by-hop mechanism CVE-2022-31813 Public exploitFix available 9.8 CriticalJune 8, 2022
• apache http server, fedoraproject fedora, netapp clustered data ontap +2 more Information Disclosure in mod_lua with websockets CVE-2022-30556 Fix available 7.5 HighJune 8, 2022
• apache http server, fedoraproject fedora, netapp clustered data ontap +2 more mod_sed denial of service CVE-2022-30522 Fix available EPSS 89.9% 7.5 HighJune 8, 2022
• apache http server, fedoraproject fedora, netapp clustered data ontap +2 more Denial of service in mod_lua r:parsebody CVE-2022-29404 Fix available 7.5 HighJune 8, 2022
• apache http server, fedoraproject fedora, netapp clustered data ontap +2 more Read beyond bounds in ap_strcmp_match() CVE-2022-28615 Fix available 9.1 CriticalJune 8, 2022
• apache http server, fedoraproject fedora, netapp clustered data ontap +2 more read beyond bounds via ap_rwrite() CVE-2022-28614 Fix available 5.3 MediumJune 8, 2022
• apache http server, fedoraproject fedora, netapp clustered data ontap +2 more mod_proxy_ajp: Possible request smuggling CVE-2022-26377 Public exploitFix available EPSS 21.1% 7.5 HighJune 8, 2022
• haxx curl, netapp clustered data ontap, h300s firmware +10 more +12 more Using its HSTS support, curl can be instructed to use HTTPS directly insteadof using an insecure... CVE-2022-30115 Fix available 4.3 MediumMay 11, 2022
• haxx curl, netapp clustered data ontap, h300s firmware +11 more +13 more libcurl wrongly allows cookies to be set for Top Level Domains (TLDs) if thehost name is provided... CVE-2022-27779 Fix available 5.3 MediumMay 11, 2022
• haxx curl, netapp active iq unified manager, bh500s firmware +14 more +16 more A use of incorrectly resolved name vulnerability fixed in 7.83.1 might remove the wrong file when... CVE-2022-27778 Fix available 8.1 HighMay 11, 2022
• haxx curl, debian linux, netapp clustered data ontap +12 more +14 more libcurl provides the `CURLOPT_CERTINFO` option to allow applications torequest details to be... CVE-2022-27781 Fix available 7.5 HighMay 11, 2022
• haxx curl, netapp clustered data ontap, h300s firmware +12 more +14 more The curl URL parser wrongly accepts percent-encoded URL separators like '/'when decoding the host... CVE-2022-27780 Fix available 7.5 HighMay 11, 2022
• xmlsoft libxml2, libxslt, debian linux +19 more +21 more In libxml2 before 2.9.14, several buffer handling functions in buf.c (xmlBuf*) and tree.c ... CVE-2022-29824 Fix available 6.5 MediumMay 3, 2022
• openssl, netapp a250 firmware, a700s firmware +28 more +30 more Resource leakage when decoding certificates and keys CVE-2022-1473 Fix available 7.5 HighMay 3, 2022
• openssl, netapp a250 firmware, a700s firmware +27 more +29 more Incorrect MAC key used in the RC4-MD5 ciphersuite CVE-2022-1434 Fix available 5.9 MediumMay 3, 2022
• openssl, netapp a250 firmware, a700s firmware +28 more +30 more OCSP_basic_verify may incorrectly verify the response signing certificate CVE-2022-1343 Fix available 5.3 MediumMay 3, 2022
• openssl, debian linux, fedoraproject fedora +37 more +39 more The c_rehash script allows command injection CVE-2022-1292 Public exploitFix available EPSS 82.6% 7.3 HighMay 3, 2022
• Show olderLoading…