Skip to contentNetapp Ontap vulnerabilities
- libssh2, debian linux, fedoraproject fedora +5 more +7 moreAn out of bounds read flaw was discovered in libssh2 before 1.8.1 in the way...CVE-2019-3862Fix available7.3 High
- libssh2, debian linux, netapp ontap select deploy administration utility +4 more +6 moreAn out of bounds read flaw was discovered in libssh2 before 1.8.1 in the way SSH packets with a...CVE-2019-3861Fix available5.0 Medium
- libssh2, debian linux, netapp ontap select deploy administration utility +4 more +6 moreAn out of bounds read flaw was discovered in libssh2 before 1.8.1 in the way SFTP packets with...CVE-2019-3860Fix available5.0 Medium
- libssh2, debian linux, fedoraproject fedora +5 more +7 moreAn out of bounds read flaw was discovered in libssh2 before 1.8.1 in the _libssh2_packet_require...CVE-2019-3859Fix available5.0 Medium
- libssh2, debian linux, fedoraproject fedora +5 more +7 moreAn out of bounds read flaw was discovered in libssh2 before 1.8.1 when a specially crafted SFTP...CVE-2019-3858Fix available5.0 Medium
- libssh2, debian linux, fedoraproject fedora +13 more +15 moreAn integer overflow flaw which could lead to an out of bounds write was discovered in libssh2...CVE-2019-3857Fix available7.5 High
- libssh2, debian linux, fedoraproject fedora +13 more +15 moreAn integer overflow flaw, which could lead to an out of bounds write, was discovered in libssh2...CVE-2019-3856Fix available7.5 High
- libssh2, apple xcode, debian linux +14 more +16 moreAn integer overflow flaw which could lead to an out of bounds write was discovered in libssh2...CVE-2019-3855Fix available7.5 High
- netapp clustered data ontapClustered Data ONTAP versions prior to 9.1P15 and 9.3 prior to 9.3P7 are susceptible to a...CVE-2019-54917.5 High
- gnu glibc, canonical ubuntu linux, mcafee web gateway +6 more +8 moreIn the GNU C Library (aka glibc or libc6) through 2.29, proceed_next_node in posix/regexec.c has...CVE-2019-9169Fix available9.8 Critical
- gnu glibc, netapp cloud backup, ontap select deploy administration utility +1 more +3 moreIn the GNU C Library (aka glibc or libc6) through 2.29, check_dst_limits_calc_pos_1 in posix...CVE-2018-20796Fix available7.5 High
- gnu glibc, netapp cloud backup, ontap select deploy administration utility +1 more +3 moreIn the GNU C Library (aka glibc or libc6) before 2.28, parse_reg_exp in posix/regcomp.c misparses...CVE-2009-5155Fix available7.5 High
- openssl, canonical ubuntu linux, debian linux +79 more +81 more0-byte record padding oracleCVE-2019-1559Fix availableEPSS 17.1%5.9 Medium
- curl, haxx libcurl, canonical ubuntu linux +5 more +7 morelibcurl versions from 7.34.0 to before 7.64.0 are vulnerable to a heap out-of-bounds read in the...CVE-2019-3823Fix available4.3 Medium
- curl, haxx libcurl, oracle http server +14 more +16 morelibcurl versions from 7.36.0 to before 7.64.0 are vulnerable to a stack-based buffer overflow....CVE-2019-3822Fix availableEPSS 12.9%7.1 High
- curl, haxx libcurl, canonical ubuntu linux +8 more +10 morelibcurl versions from 7.36.0 to before 7.64.0 is vulnerable to a heap buffer out-of-bounds read....CVE-2018-16890Public exploitFix available5.4 Medium
- netapp clustered data ontapClustered Data ONTAP versions 9.0 through 9.4 are susceptible to a vulnerability which allows...CVE-2018-54984.4 Medium
- netapp clustered data ontapClustered Data ONTAP versions prior to 9.1P16, 9.3P10 and 9.4P5 are susceptible to a...CVE-2018-54974.4 Medium
- openbsd openssh, netapp element software, ontap select deploy +7 more +9 moreIn OpenSSH 7.9, due to accepting and displaying arbitrary stderr output from the server, a...CVE-2019-6110Public exploitEPSS 24.9%6.8 Medium
- isc bind, bind 9, netapp cloud backup +1 more +3 moreBIND 9.12's serve-stale implementation can cause an assertion failure in rbtdb.c or other undesirable behavior, even if serve-stale is not enabled.CVE-2018-5737Fix availableEPSS 10.6%5.9 Medium
- isc bind, netapp cloud backup, data ontap edge +2 moreAn error in zone database reference counting can lead to an assertion failure if a server which...CVE-2018-5736Public exploitFix availableEPSS 18.0%5.3 Medium
- isc bind, bind 9, netapp data ontap edge +1 more +3 moreA malformed request can trigger an assertion failure in badcache.cCVE-2018-57347.5 High
- isc bind, bind 9, netapp data ontap edge +2 more +4 moreAn error processing RPZ rules can cause named to loop endlessly after handling a queryCVE-2017-3140Fix availableEPSS 12.2%3.7 Low
- openbsd openssh, canonical ubuntu linux, debian linux +20 more +22 moreAn issue was discovered in OpenSSH 7.9. Due to missing character encoding in the progress display...CVE-2019-6109Fix available6.8 Medium
- openbsd openssh, canonical ubuntu linux, debian linux +19 more +21 moreIn OpenSSH 7.9, scp.c in the scp client allows remote SSH servers to bypass intended access...CVE-2018-20685Fix available5.3 Medium
- netapp data ontap operating in 7-mode, data ontap +1 moreData ONTAP operating in 7-Mode versions prior to 8.2.5P2 are susceptible to a vulnerability which...CVE-2018-54964.4 Medium
- gnu binutils, debian linux, netapp data ontap +2 moreAn issue was discovered in elf_link_input_bfd in elflink.c in the Binary File Descriptor (BFD)...CVE-2018-18607Fix available5.5 Medium
- gnu binutils, debian linux, netapp data ontap +2 moreAn issue was discovered in the merge_strings function in merge.c in the Binary File Descriptor ...CVE-2018-18606Fix available5.5 Medium
- gnu binutils, debian linux, netapp data ontap +2 moreA heap-based buffer over-read issue was discovered in the function sec_merge_hash_lookup in merge...CVE-2018-18605Fix available5.5 Medium
- net-snmp, netapp cloud backup, data ontap +4 more +6 moresnmp_oid_compare in snmplib/snmp_api.c in Net-SNMP before 5.8 has a NULL Pointer Exception bug...CVE-2018-18066Fix available7.5 High
- net-snmp, canonical ubuntu linux, debian linux +7 more +9 more_set_key in agent/helpers/table_container.c in Net-SNMP before 5.8 has a NULL Pointer Exception...CVE-2018-18065Public exploitFix availableEPSS 17.5%6.5 Medium
- openbsd openssh, netapp cloud backup, cn1610 firmware +3 more +5 moreRemotely observable behaviour in auth-gss2.c in OpenSSH through 7.8 could be used by remote...CVE-2018-15919Fix available5.3 Medium
- palletsprojects flask, netapp active iq, hyper converged infrastructure +1 more +3 moreFlask is vulnerable to Denial of Service via incorrect encoding of JSON dataCVE-2018-1000656Fix available7.5 High
- openbsd openssh, canonical ubuntu linux, debian linux +19 more +21 moreOpenSSH through 7.7 is prone to a user enumeration vulnerability due to not delaying bailout for...CVE-2018-15473Public exploitFix availableEPSS 98.7%5.3 Medium
- isc bind, bind 9, canonical ubuntu linux +9 more +11 moreA flaw in the "deny-answer-aliases" feature can cause an assertion failure in namedCVE-2018-5740Public exploitFix availableEPSS 60.2%7.5 High
- netapp clustered data ontapRead-Only export policy rules are not correctly enforced in Clustered Data ONTAP 8.3 Release...CVE-2018-54908.8 High
- oracle corporation java, hp xp7 command view, netapp active iq unified manager +18 more +20 moreVulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: JSSE)....CVE-2018-2973Fix available5.9 Medium
- oracle corporation java, netapp active iq unified manager, cloud backup +13 more +15 moreVulnerability in the Java SE component of Oracle Java SE (subcomponent: Deployment). Supported...CVE-2018-29648.3 High
- oracle corporation java, netapp active iq unified manager, cloud backup +13 more +15 moreVulnerability in the Java SE component of Oracle Java SE (subcomponent: Windows DLL). Supported...CVE-2018-29428.3 High
- oracle corporation java, netapp active iq unified manager, cloud backup +13 more +15 moreVulnerability in the Java SE component of Oracle Java SE (subcomponent: JavaFX). Supported...CVE-2018-2941Fix available8.3 High
- oracle corporation java, hp xp7 command view, netapp active iq unified manager +18 more +20 moreVulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent:...CVE-2018-2940Fix available4.3 Medium
- oracle corporation java, netapp active iq unified manager, cloud backup +13 more +15 moreVulnerability in the Java SE component of Oracle Java SE (subcomponent: Java DB). Supported...CVE-2018-2938Fix available9.0 Critical
- oracle jrockit, oracle corporation java, canonical ubuntu linux +24 more +26 moreVulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent...CVE-2018-2952Fix available3.7 Low
- perl, apple mac os x, archive\ \ +6 more +8 moreIn Perl through 5.26.2, the Archive::Tar module allows remote attackers to bypass a directory...CVE-2018-12015Fix available7.5 High
- gnu glibc, canonical ubuntu linux, netapp data ontap edge +7 more +9 moreAn AVX-512-optimized implementation of the mempcpy function in the GNU C Library (aka glibc or...CVE-2018-11237Fix available7.8 High
- gnu glibc, netapp data ontap edge, element software management +6 more +8 morestdlib/canonicalize.c in the GNU C Library (aka glibc or libc6) 2.27 and earlier, when processing...CVE-2018-11236Fix available9.8 Critical
- apache http server, canonical ubuntu linux, debian linux +10 more +12 moreIn Apache httpd 2.2.0 to 2.4.29, when generating an HTTP Digest authentication challenge, the...CVE-2018-1312Fix availableEPSS 15.8%9.8 Critical
- apache http server, canonical ubuntu linux, debian linux +4 more +6 moreA specially crafted HTTP request header could have crashed the Apache HTTP Server prior to...CVE-2018-1303Fix availableEPSS 69.8%7.5 High
- apache http server, canonical ubuntu linux, netapp clustered data ontap +3 more +5 moreWhen an HTTP/2 stream was destroyed after being handled, the Apache HTTP Server prior to version...CVE-2018-1302Fix availableEPSS 12.9%5.9 Medium
- apache http server, canonical ubuntu linux, debian linux +5 more +7 moreA specially crafted request could have crashed the Apache HTTP Server prior to version 2.4.30,...CVE-2018-1301Fix availableEPSS 14.5%5.9 Medium
- Show moreLoading…