Skip to contentNetapp Ontap vulnerabilities
- simplesystems libtiff, debian linux, netapp ontap select deploy administration utility +2 moreBuffer Overflow in LibTiff v4.0.10 allows attackers to cause a denial of service via the 'in...CVE-2020-19144Fix available6.5 Medium
- vim, vim vim/vim, fedoraproject fedora +1 more +3 moreHeap-based Buffer Overflow in vim/vimCVE-2021-3770Fix available8.6 High
- fedoraproject extra packages for enterprise linux, fedora, netapp hci compute node firmware +20 more +22 moreThere's a flaw in urllib's AbstractBasicAuthHandler class. An attacker who controls a malicious...CVE-2021-3733Fix available6.5 Medium
- python, canonical ubuntu linux, fedoraproject fedora +17 more +19 moreA flaw was found in python. An improperly handled HTTP response in the HTTP client code of python...CVE-2021-3737Fix availableEPSS 13.2%7.5 High
- openssl, debian linux, mcafee epolicy orchestrator +238 more +240 moreRead buffer overruns processing ASN.1 stringsCVE-2021-3712Public exploitFix availableEPSS 48.1%7.4 High
- openssl, debian linux, netapp active iq unified manager +28 more +30 moreSM2 Decryption Buffer OverflowCVE-2021-3711Public exploitFix availableEPSS 87.8%9.8 Critical
- redhat libvirt, debian linux, netapp ontap select deploy administration utility +1 more +3 moreAn improper locking issue was found in the virStoragePoolLookupByTargetPath API of libvirt. It...CVE-2021-3667Fix available6.5 Medium
- kernel util-linux, netapp ontap select deploy administration utility, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +2 more +4 moreAn integer overflow in util-linux through 2.37.1 can potentially cause a buffer overflow if an...CVE-2021-37600Fix availableDisputed5.5 Medium
- redhat libvirt, netapp ontap select deploy administration utility, redhat enterprise linux +1 more +3 moreA flaw was found in libvirt while it generates SELinux MCS category pairs for VMs' dynamic labels...CVE-2021-3631Fix available6.3 Medium
- haxx curl, netapp active iq unified manager, clustered data ontap +19 more +21 morelibcurl-using applications can ask for a specific client certificate to be used in a transfer....CVE-2021-22926Fix availableEPSS 15.1%7.5 High
- haxx curl, fedoraproject fedora, netapp cloud backup +16 more +18 moreWhen curl is instructed to get content using the metalink feature, and a user name and password...CVE-2021-22923Fix available5.3 Medium
- haxx curl, fedoraproject fedora, netapp cloud backup +16 more +18 moreWhen curl is instructed to download content using the metalink feature, thecontents is verified...CVE-2021-22922Fix available6.5 Medium
- haxx curl, apple mac os x, macos +20 more +22 morecurl supports the `-t` command line option, known as `CURLOPT_TELNETOPTIONS`in libcurl. This...CVE-2021-22925Fix available5.3 Medium
- haxx libcurl, debian linux, fedoraproject fedora +33 more +35 morelibcurl keeps previously used connections in a connection pool for subsequenttransfers to reuse,...CVE-2021-22924Public exploitFix available3.7 Low
- gnu glibc, debian linux, netapp active iq unified manager +7 more +9 moreThe wordexp function in the GNU C Library (aka glibc) through 2.33 may crash or read arbitrary...CVE-2021-35942Fix available9.1 Critical
- php, netapp clustered data ontap, oracle sd-wan aware +2 moreIncorrect URL validation in FILTER_VALIDATE_URLCVE-2021-21705Fix available4.3 Medium
- php, netapp clustered data ontap +1 moreMultiple vulnerabilities in Firebird client extensionCVE-2021-21704Fix available5.0 Medium
- [unknown] nettle, debian linux, netapp ontap select deploy administration utility +4 more +6 moreA flaw was found in the way nettle's RSA decryption functions handled specially crafted...CVE-2021-3580Fix available7.5 High
- freebsd, netapp clustered data ontap +1 moreIn FreeBSD 12.2-STABLE before r367402, 11.4-STABLE before r368202, 12.2-RELEASE before p1, 12.1...CVE-2020-74697.5 High
- netapp clustered data ontapClustered Data ONTAP versions prior to 9.7P13 and 9.8P3 are susceptible to a vulnerability which...CVE-2021-269946.5 Medium
- gnu binutils, netapp ontap select deploy administration utility +1 moreA flaw was discovered in GNU libiberty within demangle_path() in rust-demangle.c, as distributed...CVE-2021-3530Fix available7.5 High
- isc dhcp, debian linux, fedoraproject fedora +13 more +15 moreA buffer overrun in lease file parsing code can be used to exploit a common vulnerability shared by dhcpd and dhclientCVE-2021-25217Fix available7.4 High
- f5 nginx, fedoraproject fedora, netapp ontap select deploy administration utility +10 more +12 moreA security issue in nginx resolver was identified, which might allow an attacker who is able to...CVE-2021-23017Public exploitFix availableEPSS 53.5%7.7 High
- redhat libvirt, netapp ontap select deploy administration utility +1 moreA flaw was found in libvirt in the virConnectListAllNodeDevices API in versions before 7.0.0. It...CVE-2021-35596.5 Medium
- gnome libxml2, netapp active iq unified manager, cloud backup +19 more +21 moreA flaw was found in libxml2. Exponential entity expansion attack its possible bypassing all...CVE-2021-3541Fix available6.5 Medium
- gnome libxml2, debian linux, fedoraproject fedora +19 more +21 moreNokogiri Implements libxml2 version vulnerable to null pointer dereferencingCVE-2021-3537Fix available5.9 Medium
- gnome libxml2, debian linux, fedoraproject fedora +18 more +20 moreNokogiri Implements libxml2 version vulnerable to use-after-freeCVE-2021-3518Fix availableEPSS 21.9%8.8 High
- gnome libxml2, debian linux, fedoraproject fedora +28 more +30 moreNokogiri contains libxml Out-of-bounds Write vulnerabilityCVE-2021-3517Fix availableEPSS 17.0%8.6 High
- gnome libxml2, xmlsoft xmllint, debian linux +10 more +12 moreThere's a flaw in libxml2's xmllint in versions before 2.9.11. An attacker who is able to submit...CVE-2021-3516Fix available7.8 High
- lz4 project lz4, netapp active iq unified manager, cloud backup +7 more +9 moreThere's a flaw in lz4. An attacker who submits a crafted file to an application linked with lz4...CVE-2021-3520Fix available9.8 Critical
- gnu wget, broadcom brocade fabric operating system firmware, netapp 500f firmware +3 more +5 moreGNU Wget through 1.21.1 does not omit the Authorization header upon a redirect to a different...CVE-2021-31879Fix available6.1 Medium
- [unknown] nettle, debian linux, fedoraproject fedora +6 more +8 moreA flaw was found in Nettle in versions before 3.7.2, where several Nettle signature verification...CVE-2021-20305Fix available8.1 High
- python, debian linux, fedoraproject fedora +10 more +12 moreThere's a flaw in Python 3's pydoc. A local or adjacent attacker who discovers or is able to...CVE-2021-3426Fix available5.7 Medium
- eclipse jetty, the eclipse foundation eclipse jetty, jenkins +19 more +21 moreJetty vulnerable to incorrect handling of invalid large TLS frame, exhausting CPU resourcesCVE-2021-28165Public exploitFix availableEPSS 53.9%7.5 High
- eclipse jetty, the eclipse foundation eclipse jetty, netapp cloud manager +15 more +17 moreAuthorization Before Parsing and Canonicalization in jettyCVE-2021-28164Public exploitFix availableEPSS 82.4%5.3 Medium
- eclipse jetty, the eclipse foundation eclipse jetty, apache ignite +21 more +23 moreDirectory exposure in jettyCVE-2021-28163Fix available2.7 Low
- gnu binutils, broadcom brocade fabric operating system firmware, netapp cloud backup +3 more +5 moreThere is an open race window when writing output in the following utilities in GNU binutils...CVE-2021-20197Fix available6.3 Medium
- gnu binutils, netapp cloud backup, ontap select deploy administration utility +2 moreA flaw was found in GNU Binutils 2.35.1, where there is a heap-based buffer overflow in...CVE-2021-20284Fix available5.5 Medium
- openssl, fedoraproject fedora, freebsd +30 more +32 moreCA certificate check bypass with X509_V_FLAG_X509_STRICTCVE-2021-3450Public exploitFix availableEPSS 18.3%7.4 High
- openssl, checkpoint multi-domain management firmware, quantum security gateway firmware +103 more +105 moreNULL pointer deref in signature_algorithms processingCVE-2021-3449Public exploitFix availableEPSS 63.5%5.9 Medium
- netapp data ontapClustered Data ONTAP versions prior to 9.3P21, 9.5P16, 9.6P12, 9.7P9 and 9.8 are susceptible to a...CVE-2021-269896.5 Medium
- netapp data ontapClustered Data ONTAP versions prior to 9.3P21, 9.5P16, 9.6P12, 9.7P8 and 9.8 are susceptible to a...CVE-2021-269883.5 Low
- libtiff, fedoraproject fedora, netapp ontap select deploy administration utility +1 more +3 moreIn LibTIFF, there is a memory malloc failure in tif_pixarlog.c. A crafted TIFF document can lead...CVE-2020-35522Fix available5.5 Medium
- libtiff, fedoraproject fedora, netapp ontap select deploy administration utility +1 more +3 moreA flaw was found in libtiff. Due to a memory allocation failure in tif_read.c, a crafted TIFF...CVE-2020-35521Fix available5.5 Medium
- gnu grub2, fedoraproject fedora, netapp ontap select deploy administration utility +5 more +7 moreA flaw was found in grub2 in versions prior to 2.06. Setparam_prefix() in the menu rendering code...CVE-2021-20233Public exploitFix available8.2 High
- gnu grub2, fedoraproject fedora, netapp ontap select deploy administration utility +5 more +7 moreA flaw was found in grub2 in versions prior to 2.06. The option parser allows an attacker to...CVE-2021-20225Fix available6.7 Medium
- gnu grub2, fedoraproject fedora, netapp ontap select deploy administration utility +5 more +7 moreA flaw was found in grub2 in versions prior to 2.06. The cutmem command does not honor secure...CVE-2020-27779Fix available7.5 High
- gnu grub2, fedoraproject fedora, netapp ontap select deploy administration utility +5 more +7 moreA flaw was found in grub2 in versions prior to 2.06. Variable names present are expanded in the...CVE-2020-27749Fix available6.7 Medium
- gnu grub2, fedoraproject fedora, netapp ontap select deploy administration utility +5 more +7 moreA flaw was found in grub2 in versions prior to 2.06. During USB device initialization,...CVE-2020-25647Fix available7.6 High
- gnu grub2, fedoraproject fedora, netapp ontap select deploy administration utility +5 more +7 moreA flaw was found in grub2 in versions prior to 2.06. The rmmod implementation allows the...CVE-2020-25632Public exploitFix available8.2 High
- Show moreLoading…