Skip to contentNetapp Ontap vulnerabilities
- debian linux, linux kernel, canonical ubuntu linux +12 more +14 moreThe Linux kernel through 5.7.11 allows remote attackers to make observations that help to obtain...CVE-2020-16166Fix available3.7 Low
- python, canonical ubuntu linux, debian linux +8 more +10 moreIn Lib/tarfile.py in Python through 3.8.3, an attacker is able to craft a TAR archive leading to...CVE-2019-20907Fix available7.5 High
- openbsd openssh, netapp active iq unified manager, aff a700s firmware +9 more +11 moreThe client side in OpenSSH 5.7 through 8.3 has an Observable Discrepancy leading to an...CVE-2020-14145Fix available5.9 Medium
- pcre, apple macos, gitlab +12 more +14 morelibpcre in PCRE before 8.44 allows an integer overflow via a large number after a (?C substring.CVE-2020-14155Fix available5.3 Medium
- freebsd, netapp clustered data ontap +1 moreIn FreeBSD 12.1-STABLE before r361918, 12.1-RELEASE before p6, 11.4-STABLE before r361919, 11.3...CVE-2020-74566.8 Medium
- sqlite, debian linux, fedoraproject fedora +12 more +14 moreSQLite 3.32.2 has a use-after-free in resetAccumulator in select.c because the parse tree rewrite...CVE-2020-13871Fix available7.5 High
- ntp, fujitsu m10-1 firmware, m10-4 firmware +22 more +24 morentpd in ntp before 4.2.8p14 and 4.3.x before 4.3.100 allows remote attackers to cause a denial of...CVE-2020-13817Fix available5.9 Medium
- freebsd, netapp clustered data ontap +1 moreIn FreeBSD 12.1-STABLE before r356035, 12.1-RELEASE before 12.1-RELEASE-p4, 11.3-STABLE before...CVE-2019-56149.8 Critical
- freebsd, netapp clustered data ontap +1 moreIn FreeBSD 12.1-STABLE before r356035, 12.1-RELEASE before 12.1-RELEASE-p4, 11.3-STABLE before...CVE-2019-158749.8 Critical
- ntp, debian linux, netapp all flash fabric-attached storage 8300 firmware +14 more +16 morentpd in ntp before 4.2.8p14 and 4.3.x before 4.3.100 allows an off-path attacker to block...CVE-2020-11868Fix available5.9 Medium
- sqlite, canonical ubuntu linux, debian linux +18 more +20 moreSQLite through 3.31.1 allows attackers to cause a denial of service (segmentation fault) via a...CVE-2020-11655Fix available7.5 High
- sqlite, netapp ontap select deploy administration utility, oracle communications messaging server +12 more +14 moreIn SQLite through 3.31.1, the ALTER TABLE implementation has a use-after-free, as demonstrated by...CVE-2020-11656Fix available9.8 Critical
- xmlsoft libxml2, canonical ubuntu linux, debian linux +24 more +26 morelibxml as used in Nokogiri has an infinite loop in a certain end-of-file situationCVE-2020-7595Fix available7.5 High
- xmlsoft libxml2, debian linux, fedoraproject fedora +24 more +26 morexmlSchemaPreRun in xmlschemas.c in libxml2 2.9.10 allows an xmlSchemaValidateStream memory leak.CVE-2019-20388Fix available7.5 High
- xmlsoft libxml2, canonical ubuntu linux, debian linux +12 more +14 morexmlParseBalancedChunkMemoryRecover in parser.c in libxml2 before 2.9.10 has a memory leak related...CVE-2019-19956Fix available7.5 High
- sqlite, apache guacamole, netapp cloud backup +6 more +8 moreSQLite 3.30.1, during handling of CREATE TABLE and CREATE VIEW statements, does not consider...CVE-2019-19603Fix availableEPSS 11.0%7.5 High
- sqlite, netapp cloud backup, ontap select deploy administration utility +6 more +8 morepragma.c in SQLite through 3.30.1 mishandles NOT NULL in an integrity_check PRAGMA command in...CVE-2019-19646Fix available9.8 Critical
- sqlite, netapp cloud backup, ontap select deploy administration utility +6 more +8 morealter.c in SQLite through 3.30.1 allows attackers to trigger infinite recursion via certain types...CVE-2019-19645Fix available5.5 Medium
- sqlite, netapp cloud backup, ontap select deploy administration utility +5 more +7 morelookupName in resolve.c in SQLite 3.30.1 omits bits from the colUsed bitmask in the case of a...CVE-2019-193179.8 Critical
- netapp ontap select deploy administration utilityAll versions of ONTAP Select Deploy administration utility are susceptible to a vulnerability...CVE-2019-172727.2 High
- netapp ontap select deploy administration utilityONTAP Select Deploy administration utility versions 2.11.2 through 2.12.2 are susceptible to a...CVE-2019-55099.8 Critical
- netapp clustered data ontapClustered Data ONTAP versions 9.2 through 9.6 are susceptible to a vulnerability which allows an...CVE-2019-55087.5 High
- libssh2, debian linux, fedoraproject fedora +10 more +12 moreIn libssh2 v1.9.0 and earlier versions, the SSH_MSG_DISCONNECT logic in packet.c has an integer...CVE-2019-17498Public exploitFix available8.1 High
- netapp clustered data ontapClustered Data ONTAP versions 9.0 and higher do not enforce hostname verification under certain...CVE-2019-55065.9 Medium
- netapp ontap select deploy administration utilityONTAP Select Deploy administration utility versions 2.2 through 2.12.1 transmit credentials in...CVE-2019-55059.8 Critical
- netapp ontap select deploy administration utilityONTAP Select Deploy administration utility versions 2.12 & 2.12.1 ship with an HTTP service bound...CVE-2019-55049.8 Critical
- sqlite, canonical ubuntu linux, debian linux +20 more +22 moreIn SQLite through 3.29.0, whereLoopAddBtreeIndex in sqlite3.c can crash a browser or other...CVE-2019-16168Fix available6.5 Medium
- freebsd, netapp clustered data ontap +1 moreIn FreeBSD 12.0-STABLE before r351264, 12.0-RELEASE before 12.0-RELEASE-p10, 11.3-STABLE before...CVE-2019-56127.5 High
- freebsd, netapp clustered data ontap +1 moreIn FreeBSD 12.0-STABLE before r350648, 12.0-RELEASE before 12.0-RELEASE-p9, 11.3-STABLE before...CVE-2019-56089.8 Critical
- freebsd, netapp clustered data ontap +1 moreIn FreeBSD 12.0-STABLE before r350828, 12.0-RELEASE before 12.0-RELEASE-p10, 11.3-STABLE before...CVE-2019-56117.5 High
- freebsd, netapp clustered data ontap +1 moreIn FreeBSD 12.0-STABLE before r350637, 12.0-RELEASE before 12.0-RELEASE-p9, 11.3-STABLE before...CVE-2019-56107.5 High
- apache http server, canonical ubuntu linux, debian linux +7 more +9 moreIn Apache HTTP Server 2.4.0-2.4.39, a limited cross-site scripting issue was reported affecting...CVE-2019-10092Public exploitFix availableEPSS 81.5%6.1 Medium
- apache http server, traffic server, apple swiftnio +20 more +22 moreSome HTTP/2 implementations are vulnerable to unconstrained interal data buffering, potentially leading to a denial of serviceCVE-2019-9517Fix availableEPSS 27.0%7.5 High
- netapp data ontap operating in 7-mode, data ontap +1 moreSMB in Data ONTAP operating in 7-Mode versions prior to 8.2.5P3 has weak cryptography which when...CVE-2019-55029.1 Critical
- netapp data ontap operating in 7-mode, data ontap +1 moreData ONTAP operating in 7-Mode versions prior to 8.2.5P3 may disclose sensitive LDAP account...CVE-2019-55017.5 High
- netapp data ontap operating in 7-mode, data ontap +1 moreData ONTAP operating in 7-Mode versions prior to 8.2.5P3 are susceptible to a vulnerability which...CVE-2019-54937.5 High
- libssh2, debian linux, f5 traffix systems signaling delivery controller +4 more +6 moreIn libssh2 before 1.9.0, kex_method_diffie_hellman_group_exchange_sha256_key_exchange in kex.c...CVE-2019-13115Public exploitFix availableEPSS 11.7%8.1 High
- netapp aff a700s baseboard management controller, aff a700s firmware, clustered data ontap +2 moreNetApp AFF A700s Baseboard Management Controller (BMC) firmware versions 1.22 and higher were...CVE-2019-54979.8 Critical
- xmlsoft libxslt, apple icloud, iphone os +22 more +24 morelibxslt Type Confusion vulnerability that affects NokogiriCVE-2019-13118Fix available5.3 Medium
- debian linux, linux kernel, canonical ubuntu linux +11 more +13 moreAn issue was discovered in rds_tcp_kill_sock in net/rds/tcp.c in the Linux kernel before 5.0.8....CVE-2019-11815Fix available8.1 High
- debian linux, linux kernel, canonical ubuntu linux +10 more +12 moreAn issue was discovered in the Linux kernel before 4.20. There is a race condition in...CVE-2018-20836Fix available8.1 High
- debian linux, linux kernel, canonical ubuntu linux +11 more +13 moreAn infinite loop issue was found in the vhost_net kernel module in Linux Kernel up to and...CVE-2019-3900Fix available6.3 Medium
- debian linux, linux kernel, canonical ubuntu linux +10 more +12 moreA flaw was found in the Linux kernel's vfio interface implementation that permits violation of...CVE-2019-3882Fix available4.7 Medium
- debian linux, linux kernel, netapp active iq +7 more +9 moreThe Siemens R3964 line discipline driver in drivers/tty/n_r3964.c in the Linux kernel before 5.0...CVE-2019-11486Fix available7.0 High
- eclipse jetty, the eclipse foundation eclipse jetty, debian linux +24 more +26 moreInstallation information leak in Eclipse JettyCVE-2019-10247Fix available5.3 Medium
- eclipse jetty, the eclipse foundation eclipse jetty, netapp element +23 more +25 moreInformation Exposure vulnerability in Eclipse JettyCVE-2019-10246Fix available5.3 Medium
- linux kernel, debian linux, netapp active iq unified manager for vmware vsphere +7 more +9 moreA race condition in perf_event_open() allows local attackers to leak sensitive data from setuid...CVE-2019-3901Fix available5.6 Medium
- apache http server, canonical ubuntu linux, debian linux +10 more +12 moreIn Apache HTTP Server 2.4 release 2.4.38 and prior, a race condition in mod_auth_digest when...CVE-2019-0217Public exploitFix availableEPSS 16.4%7.5 High
- ntp, fedoraproject fedora, hpe hpux-ntp +3 more +5 moreNTP through 4.2.8p12 has a NULL Pointer Dereference.CVE-2019-8936Public exploitFix available7.5 High
- libssh2, debian linux, netapp ontap select deploy administration utility +10 more +12 moreA flaw was found in libssh2 before 1.8.1. A server could send a multiple keyboard interactive...CVE-2019-3863Fix available7.5 High
- Show moreLoading…