Skip to contentNetapp Ontap vulnerabilities
- debian linux, linux kernel, netapp 9500 firmware +17 more +19 moreip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()CVE-2024-26633Fix available5.5 Medium
- apache cxf, netapp oncommand workflow automation, ontap tools +2 moreApache CXF SSRF Vulnerability using the Aegis databindingCVE-2024-28752Public exploitFix available9.3 Critical
- libexpat project libexpat, fedoraproject fedora, netapp active iq unified manager +17 more +19 morelibexpat through 2.6.1 allows an XML Entity Expansion attack when there is isolated use of...CVE-2024-28757Public exploitFix available7.5 High
- mongodb, mongodb inc server, mongodb, inc. mongodb server +2 more +4 moreMongoDB Server may allow successful untrusted connectionCVE-2024-1351Fix available8.8 High
- mit kerberos 5, netapp active iq unified manager, cloud volumes ontap mediator +5 more +7 moreKerberos 5 (aka krb5) 1.21.2 contains a memory leak vulnerability in /krb5/src/kdc/ndr.c.CVE-2024-26462Fix available5.5 Medium
- mit kerberos 5, netapp active iq unified manager, cloud volumes ontap mediator +6 more +8 moreKerberos 5 (aka krb5) 1.21.2 contains a memory leak vulnerability in /krb5/src/lib/gssapi/krb5...CVE-2024-26461Fix available7.5 High
- mit kerberos 5, netapp active iq unified manager, cloud volumes ontap mediator +6 more +8 moreKerberos 5 (aka krb5) 1.21.2 contains a memory leak in /krb5/src/lib/rpc/pmap_rmt.c.CVE-2024-26458Fix available5.3 Medium
- linux, linux kernel, netapp ontap tools +2 morenetfilter: nft_set_rbtree: skip sync GC for new elements in this transactionCVE-2023-52433Fix available7.8 High
- isc bind, bind 9, fedoraproject fedora +1 more +3 moreParsing large DNS messages may cause excessive CPU loadCVE-2023-4408Fix available7.5 High
- netapp ontap 9, clustered data ontap +1 morePrivilege Escalation Vulnerability in ONTAP 9CVE-2024-219857.6 High
- linux kernel, netapp ontap tools, red hat enterprise linux 6 +8 more +10 moreKernel: cifs filesystem decryption improper input validation remote code execution vulnerability in function receive_encrypted_standard of clientCVE-2024-0565Fix available6.8 Medium
- openssl, netapp 500f firmware, 8300 firmware +31 more +33 moreExcessive time spent checking invalid RSA public keysCVE-2023-6237Fix available5.9 Medium
- netapp ontap 9, clustered data ontap +1 moreCVE-2024-21982 Information Disclosure Vulnerability in ONTAP 9CVE-2024-219824.8 Medium
- netapp ontap mediatorCVE-2023-27319 Information Disclosure Vulnerability in ONTAP MediatorCVE-2023-273195.3 Medium
- netapp ontap, ontap 9 +1 moreInformation Disclosure Vulnerability in ONTAP 9CVE-2023-273174.3 Medium
- netapp ontap 9, clustered data ontap +1 moreDenial of Service Vulnerability in ONTAP 9CVE-2023-273147.5 High
- gnu glibc, c library, canonical ubuntu linux +48 more +50 moreGlibc: buffer overflow in ld.so leading to privilege escalationCVE-2023-4911In KEVPublic exploitFix availableEPSS 63.8%7.8 High
- vmware tools, debian linux, fedoraproject fedora +2 more +4 moreVMware Tools contains a SAML token signature bypass vulnerability. A malicious actor with man-in...CVE-2023-20900Fix available7.1 High
- gnu binutils, fedoraproject fedora, netapp ontap select deploy administration utility +2 moreGNU Binutils before 2.40 was discovered to contain a memory leak vulnerability var the function...CVE-2022-48065Fix available5.5 Medium
- gnu binutils, fedoraproject fedora, netapp ontap select deploy administration utility +2 moreGNU Binutils before 2.40 was discovered to contain an excessive memory consumption vulnerability...CVE-2022-48064Fix available5.5 Medium
- mit kerberos 5, debian linux, netapp active iq unified manager +4 more +6 morelib/kadm5/kadm_rpc_xdr.c in MIT Kerberos 5 (aka krb5) before 1.20.2 and 1.21.x before 1.21.1...CVE-2023-36054Fix available6.5 Medium
- freebsd, netapp clustered data ontap +1 moreRemote denial of service in IPv6 fragment reassemblyCVE-2023-31077.5 High
- certifi, certifi python-certifi, fedoraproject fedora +6 more +8 moreCertifi's removal of e-Tugra root certificateCVE-2023-37920Fix available7.5 High
- es iperf3, apple macos, debian linux +3 more +5 moreiperf3 before 3.14 allows peers to cause an integer overflow and heap corruption via a crafted...CVE-2023-38403Fix available7.5 High
- openssl, netapp management services for element software and netapp hci, ontap select deploy administration utility +2 moreAES-SIV implementation ignores empty associated data entriesCVE-2023-2975Fix available5.3 Medium
- openldap, apple macos, netapp active iq unified manager +11 more +13 moreA vulnerability was found in openldap. This security flaw causes a null pointer dereference in...CVE-2023-2953Fix available7.5 High
- haxx curl, apple macos, netapp clustered data ontap +5 more +7 moreA denial of service vulnerability exists in curl <v8.1.0 in the way libcurl provides several...CVE-2023-28320Fix available5.9 Medium
- haxx curl, apple macos, fedoraproject fedora +6 more +8 moreAn information disclosure vulnerability exists in curl <v8.1.0 when doing HTTP(S) transfers,...CVE-2023-28322Fix available3.7 Low
- haxx curl, apple macos, debian linux +7 more +9 moreAn improper certificate validation vulnerability exists in curl <v8.1.0 in the way it supports...CVE-2023-28321Fix available5.9 Medium
- haxx curl, apple macos, netapp clustered data ontap +5 more +7 moreA use after free vulnerability exists in curl <v8.1.0 in the way libcurl offers a feature to...CVE-2023-28319Fix available7.5 High
- f5 nginx api connectivity manager, nginx instance manager, nginx security monitoring +2 more +4 moreNGINX Management Suite vulnerabilityCVE-2023-286568.1 High
- python, fedoraproject fedora, netapp active iq unified manager +12 more +14 moreThe e-mail module of Python 0 - 2.7.18, 3.x - 3.11 incorrectly parses e-mail addresses which...CVE-2023-27043Fix available5.3 Medium
- haxx libcurl, broadcom brocade fabric operating system firmware, netapp active iq unified manager +9 more +11 moreA double free vulnerability exists in libcurl <8.0.0 when sharing HSTS data between separate ...CVE-2023-27537Fix available5.9 Medium
- haxx libcurl, broadcom brocade fabric operating system firmware, debian linux +11 more +13 moreAn authentication bypass vulnerability exists in libcurl v8.0.0 where it reuses a previously...CVE-2023-27538Fix available5.5 Medium
- haxx libcurl, debian linux, fedoraproject fedora +10 more +12 moreAn authentication bypass vulnerability exists libcurl <8.0.0 in the connection reuse feature...CVE-2023-27536Fix available5.9 Medium
- haxx libcurl, debian linux, fedoraproject fedora +10 more +12 moreAn authentication bypass vulnerability exists in libcurl <8.0.0 in the FTP connection reuse...CVE-2023-27535Fix available5.9 Medium
- haxx curl, fedoraproject fedora, netapp active iq unified manager +9 more +11 moreA vulnerability in input validation exists in curl <8.0 during communication using the TELNET...CVE-2023-27533Fix available8.8 High
- python, fedoraproject fedora, netapp active iq unified manager +6 more +8 moreAn issue in the urllib.parse component of Python before v3.11 allows attackers to bypass...CVE-2023-24329Public exploitFix availableEPSS 20.5%7.5 High
- haxx curl, debian linux, fedoraproject fedora +9 more +11 moreAn allocation of resources without limits or throttling vulnerability exists in curl <v7.88.0...CVE-2023-23916Fix available6.5 Medium
- haxx curl, netapp active iq unified manager, clustered data ontap +8 more +10 moreA cleartext transmission of sensitive information vulnerability exists in curl <v7.88.0 that...CVE-2023-23915Fix available6.5 Medium
- haxx curl, netapp active iq unified manager, clustered data ontap +8 more +10 moreA cleartext transmission of sensitive information vulnerability exists in curl <v7.88.0 that...CVE-2023-23914Fix available9.1 Critical
- gnu gnutls, debian linux, fedoraproject fedora +7 more +9 moreA timing side-channel in the handling of RSA ClientKeyExchange messages was discovered in GnuTLS....CVE-2023-0361Fix available7.4 High
- openbsd openssh, fedoraproject fedora, netapp 500f firmware +6 more +8 moreOpenSSH server (sshd) 9.1 introduced a double-free vulnerability during options.kex_algorithms...CVE-2023-25136Public exploitFix availableEPSS 89.8%6.5 Medium
- netapp altavault ost plug-in, fas\/aff baseboard management controller, hci baseboard management controller +4 more +6 moreX.509 Policy Constraints Double LockingCVE-2022-3996Fix available7.5 High
- vim, vim vim/vim, netapp ontap select deploy administration utility +2 moreUse After Free in vim/vimCVE-2022-4292Fix available7.8 High
- python, fedoraproject fedora, netapp active iq unified manager +9 more +11 moreAn issue was discovered in Python before 3.11.1. An unnecessary quadratic algorithm exists in one...CVE-2022-45061Fix available7.5 High
- openssl, fedoraproject fedora, netapp clustered data ontap +10 more +12 moreX.509 Email Address 4-byte Buffer OverflowCVE-2022-3602Public exploitFix availableEPSS 90.8%7.5 High
- haxx curl, apple macos, netapp clustered data ontap +8 more +10 morecurl can be told to parse a `.netrc` file for credentials. If that file endsin a line with 4095...CVE-2022-35260Fix available6.5 Medium
- haxx curl, apple macos, fedoraproject fedora +9 more +11 morecurl before 7.86.0 has a double free. If curl is told to use an HTTP proxy for a transfer with a...CVE-2022-42915Fix available8.1 High
- haxx curl, apple macos, debian linux +9 more +11 moreWhen doing HTTP(S) transfers, libcurl might erroneously use the read callback (...CVE-2022-32221Fix available9.8 Critical
- Show moreLoading…