Netapp Data Ontap Edge vulnerabilities

• isc bind, bind 9, netapp cloud backup +1 more +3 more BIND 9.12's serve-stale implementation can cause an assertion failure in rbtdb.c or other undesirable behavior, even if serve-stale is not enabled. CVE-2018-5737 Fix available EPSS 10.6% 5.9 MediumJanuary 16, 2019
• isc bind, netapp cloud backup, data ontap edge +2 more An error in zone database reference counting can lead to an assertion failure if a server which... CVE-2018-5736 Public exploitFix available EPSS 18.0% 5.3 MediumJanuary 16, 2019
• isc bind, bind 9, netapp data ontap edge +1 more +3 more A malformed request can trigger an assertion failure in badcache.c CVE-2018-5734 7.5 HighJanuary 16, 2019
• isc bind, bind 9, netapp data ontap edge +2 more +4 more An error processing RPZ rules can cause named to loop endlessly after handling a query CVE-2017-3140 Fix available EPSS 12.2% 3.7 LowJanuary 16, 2019
• openbsd openssh, netapp cloud backup, cn1610 firmware +3 more +5 more Remotely observable behaviour in auth-gss2.c in OpenSSH through 7.8 could be used by remote... CVE-2018-15919 Fix available 5.3 MediumAugust 28, 2018
• openbsd openssh, canonical ubuntu linux, debian linux +19 more +21 more OpenSSH through 7.7 is prone to a user enumeration vulnerability due to not delaying bailout for... CVE-2018-15473 Public exploitFix available EPSS 98.7% 5.3 MediumAugust 17, 2018
• isc bind, bind 9, canonical ubuntu linux +9 more +11 more A flaw in the "deny-answer-aliases" feature can cause an assertion failure in named CVE-2018-5740 Public exploitFix available EPSS 60.2% 7.5 HighAugust 9, 2018
• perl, apple mac os x, archive\ \ +6 more +8 more In Perl through 5.26.2, the Archive::Tar module allows remote attackers to bypass a directory... CVE-2018-12015 Fix available 7.5 HighJune 7, 2018
• gnu glibc, canonical ubuntu linux, netapp data ontap edge +7 more +9 more An AVX-512-optimized implementation of the mempcpy function in the GNU C Library (aka glibc or... CVE-2018-11237 Fix available 7.8 HighMay 18, 2018
• gnu glibc, netapp data ontap edge, element software management +6 more +8 more stdlib/canonicalize.c in the GNU C Library (aka glibc or libc6) 2.27 and earlier, when processing... CVE-2018-11236 Fix available 9.8 CriticalMay 18, 2018
• gnu glibc, netapp cloud backup, data ontap edge +12 more +14 more An integer overflow in the implementation of the posix_memalign in memalign functions in the GNU... CVE-2018-6485 Fix available 9.8 CriticalFebruary 1, 2018
• openbsd openssh, canonical ubuntu linux, debian linux +9 more +11 more sshd in OpenSSH before 7.4 allows remote attackers to cause a denial of service (NULL pointer... CVE-2016-10708 Public exploitFix available EPSS 15.7% 7.5 HighJanuary 21, 2018
• isc bind, bind 9, debian linux +8 more +10 more Improper fetch cleanup sequencing in the resolver can cause named to crash CVE-2017-3145 Fix available EPSS 27.7% 7.5 HighJanuary 16, 2018
• isc bind, bind 9, netapp data ontap edge +1 more +3 more An error handling certain queries using the nxdomain-redirect feature could cause a REQUIRE assertion failure in db.c CVE-2016-9778 7.5 HighDecember 31, 2017
• openbsd openssh, debian linux, netapp active iq unified manager +18 more +20 more The process_open function in sftp-server.c in OpenSSH before 7.6 does not properly prevent write... CVE-2017-15906 Fix available 5.3 MediumOctober 25, 2017
• isc bind, bind 9, debian linux +3 more +5 more named exits with a REQUIRE assertion failure if it receives a null command string on its control channel CVE-2017-3138 Fix available 6.5 MediumApril 12, 2017
• isc bind, bind 9, debian linux +9 more +11 more A response packet can cause a resolver to terminate when processing an answer containing a CNAME or DNAME CVE-2017-3137 Fix available 7.5 HighApril 12, 2017
• isc bind, bind 9, debian linux +9 more +11 more An error handling synthesized records could cause an assertion failure when using DNS64 with "break-dnssec yes;" CVE-2017-3136 Fix available EPSS 11.1% 5.9 MediumApril 12, 2017
• isc bind, bind 9, debian linux +8 more +10 more Combination of DNS64 and RPZ Can Lead to Crash CVE-2017-3135 Fix available EPSS 17.1% 7.5 HighFebruary 9, 2017
• isc bind, debian linux, netapp data ontap edge +9 more +11 more named in ISC BIND 9.x before 9.9.9-P5, 9.10.x before 9.10.4-P5, and 9.11.x before 9.11.0-P2... CVE-2016-9131 Fix available EPSS 40.6% 7.5 HighJanuary 11, 2017
• isc bind, debian linux, netapp data ontap edge +8 more +10 more named in ISC BIND 9.x before 9.9.9-P4, 9.10.x before 9.10.4-P4, and 9.11.x before 9.11.0-P1... CVE-2016-8864 Fix available EPSS 38.7% 7.5 HighNovember 1, 2016
• openssl, debian linux, fujitsu m10-1 firmware +42 more +44 more A denial of service flaw was found in OpenSSL 0.9.8, 1.0.1, 1.0.2 through 1.0.2h, and 1.1.0 in... CVE-2016-8610 Public exploitFix available EPSS 39.9% 7.5 HighOctober 24, 2016
• ietf transport layer security, netapp clustered data ontap antivirus connector, data ontap edge +10 more +12 more The TLS protocol 1.2 and earlier supports the rsa_fixed_dh, dss_fixed_dh, rsa_fixed_ecdh, and... CVE-2015-8960 8.1 HighSeptember 21, 2016