Skip to contentNetapp Data Ontap vulnerabilities
- curl, haxx libcurl, canonical ubuntu linux +5 more +7 morelibcurl versions from 7.34.0 to before 7.64.0 are vulnerable to a heap out-of-bounds read in the...CVE-2019-3823Fix available4.3 Medium
- curl, haxx libcurl, oracle http server +14 more +16 morelibcurl versions from 7.36.0 to before 7.64.0 are vulnerable to a stack-based buffer overflow....CVE-2019-3822Fix availableEPSS 12.9%7.1 High
- curl, haxx libcurl, canonical ubuntu linux +8 more +10 morelibcurl versions from 7.36.0 to before 7.64.0 is vulnerable to a heap buffer out-of-bounds read....CVE-2018-16890Public exploitFix available5.4 Medium
- netapp clustered data ontapClustered Data ONTAP versions 9.0 through 9.4 are susceptible to a vulnerability which allows...CVE-2018-54984.4 Medium
- netapp clustered data ontapClustered Data ONTAP versions prior to 9.1P16, 9.3P10 and 9.4P5 are susceptible to a...CVE-2018-54974.4 Medium
- isc bind, bind 9, netapp cloud backup +1 more +3 moreBIND 9.12's serve-stale implementation can cause an assertion failure in rbtdb.c or other undesirable behavior, even if serve-stale is not enabled.CVE-2018-5737Fix availableEPSS 10.6%5.9 Medium
- isc bind, netapp cloud backup, data ontap edge +2 moreAn error in zone database reference counting can lead to an assertion failure if a server which...CVE-2018-5736Public exploitFix availableEPSS 18.0%5.3 Medium
- isc bind, bind 9, netapp data ontap edge +1 more +3 moreA malformed request can trigger an assertion failure in badcache.cCVE-2018-57347.5 High
- isc bind, bind 9, netapp data ontap edge +2 more +4 moreAn error processing RPZ rules can cause named to loop endlessly after handling a queryCVE-2017-3140Fix availableEPSS 12.2%3.7 Low
- netapp data ontap operating in 7-mode, data ontap +1 moreData ONTAP operating in 7-Mode versions prior to 8.2.5P2 are susceptible to a vulnerability which...CVE-2018-54964.4 Medium
- gnu binutils, debian linux, netapp data ontap +2 moreAn issue was discovered in elf_link_input_bfd in elflink.c in the Binary File Descriptor (BFD)...CVE-2018-18607Fix available5.5 Medium
- gnu binutils, debian linux, netapp data ontap +2 moreAn issue was discovered in the merge_strings function in merge.c in the Binary File Descriptor ...CVE-2018-18606Fix available5.5 Medium
- gnu binutils, debian linux, netapp data ontap +2 moreA heap-based buffer over-read issue was discovered in the function sec_merge_hash_lookup in merge...CVE-2018-18605Fix available5.5 Medium
- net-snmp, netapp cloud backup, data ontap +4 more +6 moresnmp_oid_compare in snmplib/snmp_api.c in Net-SNMP before 5.8 has a NULL Pointer Exception bug...CVE-2018-18066Fix available7.5 High
- net-snmp, canonical ubuntu linux, debian linux +7 more +9 more_set_key in agent/helpers/table_container.c in Net-SNMP before 5.8 has a NULL Pointer Exception...CVE-2018-18065Public exploitFix availableEPSS 17.5%6.5 Medium
- openbsd openssh, netapp cloud backup, cn1610 firmware +3 more +5 moreRemotely observable behaviour in auth-gss2.c in OpenSSH through 7.8 could be used by remote...CVE-2018-15919Fix available5.3 Medium
- openbsd openssh, canonical ubuntu linux, debian linux +19 more +21 moreOpenSSH through 7.7 is prone to a user enumeration vulnerability due to not delaying bailout for...CVE-2018-15473Public exploitFix availableEPSS 98.7%5.3 Medium
- isc bind, bind 9, canonical ubuntu linux +9 more +11 moreA flaw in the "deny-answer-aliases" feature can cause an assertion failure in namedCVE-2018-5740Public exploitFix availableEPSS 60.2%7.5 High
- netapp clustered data ontapRead-Only export policy rules are not correctly enforced in Clustered Data ONTAP 8.3 Release...CVE-2018-54908.8 High
- oracle corporation java, hp xp7 command view, netapp active iq unified manager +18 more +20 moreVulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: JSSE)....CVE-2018-2973Fix available5.9 Medium
- oracle corporation java, netapp active iq unified manager, cloud backup +13 more +15 moreVulnerability in the Java SE component of Oracle Java SE (subcomponent: Deployment). Supported...CVE-2018-29648.3 High
- oracle corporation java, netapp active iq unified manager, cloud backup +13 more +15 moreVulnerability in the Java SE component of Oracle Java SE (subcomponent: Windows DLL). Supported...CVE-2018-29428.3 High
- oracle corporation java, netapp active iq unified manager, cloud backup +13 more +15 moreVulnerability in the Java SE component of Oracle Java SE (subcomponent: JavaFX). Supported...CVE-2018-2941Fix available8.3 High
- oracle corporation java, hp xp7 command view, netapp active iq unified manager +18 more +20 moreVulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent:...CVE-2018-2940Fix available4.3 Medium
- oracle corporation java, netapp active iq unified manager, cloud backup +13 more +15 moreVulnerability in the Java SE component of Oracle Java SE (subcomponent: Java DB). Supported...CVE-2018-2938Fix available9.0 Critical
- oracle jrockit, oracle corporation java, canonical ubuntu linux +24 more +26 moreVulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent...CVE-2018-2952Fix available3.7 Low
- perl, apple mac os x, archive\ \ +6 more +8 moreIn Perl through 5.26.2, the Archive::Tar module allows remote attackers to bypass a directory...CVE-2018-12015Fix available7.5 High
- gnu glibc, canonical ubuntu linux, netapp data ontap edge +7 more +9 moreAn AVX-512-optimized implementation of the mempcpy function in the GNU C Library (aka glibc or...CVE-2018-11237Fix available7.8 High
- gnu glibc, netapp data ontap edge, element software management +6 more +8 morestdlib/canonicalize.c in the GNU C Library (aka glibc or libc6) 2.27 and earlier, when processing...CVE-2018-11236Fix available9.8 Critical
- apache http server, canonical ubuntu linux, debian linux +10 more +12 moreIn Apache httpd 2.2.0 to 2.4.29, when generating an HTTP Digest authentication challenge, the...CVE-2018-1312Fix availableEPSS 15.8%9.8 Critical
- apache http server, canonical ubuntu linux, debian linux +4 more +6 moreA specially crafted HTTP request header could have crashed the Apache HTTP Server prior to...CVE-2018-1303Fix availableEPSS 69.8%7.5 High
- apache http server, canonical ubuntu linux, netapp clustered data ontap +3 more +5 moreWhen an HTTP/2 stream was destroyed after being handled, the Apache HTTP Server prior to version...CVE-2018-1302Fix availableEPSS 12.9%5.9 Medium
- apache http server, canonical ubuntu linux, debian linux +5 more +7 moreA specially crafted request could have crashed the Apache HTTP Server prior to version 2.4.30,...CVE-2018-1301Fix availableEPSS 14.5%5.9 Medium
- apache http server, canonical ubuntu linux, debian linux +5 more +7 moreIn Apache httpd 2.4.0 to 2.4.29, when mod_session is configured to forward its session data to...CVE-2018-1283Fix available5.3 Medium
- apache http server, canonical ubuntu linux, debian linux +5 more +7 moreIn Apache httpd 2.4.0 to 2.4.29, the expression specified in <FilesMatch> could match '$' to a...CVE-2017-15715Public exploitFix availableEPSS 86.2%8.1 High
- apache http server, canonical ubuntu linux, debian linux +5 more +7 moreIn Apache httpd 2.0.23 to 2.0.65, 2.2.0 to 2.2.34, and 2.4.0 to 2.4.29, mod_authnz_ldap, if...CVE-2017-15710Fix availableEPSS 17.5%7.5 High
- gnu glibc, netapp cloud backup, data ontap edge +12 more +14 moreAn integer overflow in the implementation of the posix_memalign in memalign functions in the GNU...CVE-2018-6485Fix available9.8 Critical
- openbsd openssh, canonical ubuntu linux, debian linux +9 more +11 moresshd in OpenSSH before 7.4 allows remote attackers to cause a denial of service (NULL pointer...CVE-2016-10708Public exploitFix availableEPSS 15.7%7.5 High
- oracle corporation java, netapp active iq unified manager, cloud backup +22 more +24 moreVulnerability in the Java SE component of Oracle Java SE (subcomponent: Deployment). Supported...CVE-2018-26388.3 High
- netapp active iq unified manager, cloud backup, e-series santricity management plug-ins +17 more +19 moreVulnerability in the Java SE component of Oracle Java SE (subcomponent: Installer). Supported...CVE-2018-26277.5 High
- netapp active iq unified manager, cloud backup, e-series santricity management plug-ins +17 more +19 moreVulnerability in the Java SE component of Oracle Java SE (subcomponent: JavaFX). Supported...CVE-2018-2581Fix available4.7 Medium
- isc bind, bind 9, debian linux +8 more +10 moreImproper fetch cleanup sequencing in the resolver can cause named to crashCVE-2017-3145Fix availableEPSS 27.7%7.5 High
- isc bind, bind 9, netapp data ontap edge +1 more +3 moreAn error handling certain queries using the nxdomain-redirect feature could cause a REQUIRE assertion failure in db.cCVE-2016-97787.5 High
- netapp clustered data ontapNetApp Clustered Data ONTAP versions 9.x prior to 9.1P10 and 9.2P2 are susceptible to a...CVE-2017-145836.5 Medium
- netapp clustered data ontapNetApp Clustered Data ONTAP before 8.3.2P8 and 9.0 before P2 allow remote authenticated users to...CVE-2017-52015.7 Medium
- php, canonical ubuntu linux, debian linux +2 more +4 moreIn PHP before 5.6.32, 7.x before 7.0.25, and 7.1.x before 7.1.11, an error in the date extension...CVE-2017-16642Public exploitFix availableEPSS 26.4%7.5 High
- openbsd openssh, debian linux, netapp active iq unified manager +18 more +20 moreThe process_open function in sftp-server.c in OpenSSH before 7.6 does not properly prevent write...CVE-2017-15906Fix available5.3 Medium
- oracle corporation java, netapp active iq unified manager, cloud backup +24 more +26 moreVulnerability in the Java SE component of Oracle Java SE (subcomponent: Deployment). Supported...CVE-2017-10309Public exploit7.1 High
- oracle corporation java, netapp active iq unified manager, cloud backup +19 more +21 moreVulnerability in the Java SE component of Oracle Java SE (subcomponent: Javadoc). Supported...CVE-2017-102936.1 Medium
- oracle corporation java, debian linux, netapp active iq unified manager +27 more +29 moreVulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent:...CVE-2017-10388Fix available7.5 High
- Show moreLoading…