Netapp Ontap 9 vulnerabilities

• es iperf3, netapp hci compute node, ontap 9 +2 more iperf v3.17.1 was discovered to contain a segmentation violation via the... CVE-2024-53580 Fix available 7.5 HighDecember 18, 2024
• netapp 500f firmware, a250 firmware, active iq unified manager +22 more +24 more Possible denial of service in X.509 name checks CVE-2024-6119 Fix available EPSS 66.6% 7.5 HighSeptember 3, 2024
• apache http server, netapp ontap 9, sonicwall sma 200 firmware +4 more +6 more Apache HTTP Server weakness in mod_rewrite when first segment of substitution matches filesystem path. CVE-2024-38475 In KEVPublic exploitFix available EPSS 100.0% 9.1 CriticalJuly 1, 2024
• openssl, debian linux, netapp 500f firmware +79 more +81 more Unbounded memory growth with session handling in TLSv1.3 CVE-2024-2511 Fix available EPSS 59.3% 5.9 MediumApril 8, 2024
• mit kerberos 5, netapp active iq unified manager, cloud volumes ontap mediator +6 more +8 more Kerberos 5 (aka krb5) 1.21.2 contains a memory leak vulnerability in /krb5/src/lib/gssapi/krb5... CVE-2024-26461 Fix available 7.5 HighFebruary 26, 2024
• mit kerberos 5, netapp active iq unified manager, cloud volumes ontap mediator +6 more +8 more Kerberos 5 (aka krb5) 1.21.2 contains a memory leak in /krb5/src/lib/rpc/pmap_rmt.c. CVE-2024-26458 Fix available 5.3 MediumFebruary 26, 2024
• haxx libcurl, debian linux, fedoraproject fedora +10 more +12 more An authentication bypass vulnerability exists in libcurl <8.0.0 in the FTP connection reuse... CVE-2023-27535 Fix available 5.9 MediumMarch 20, 2023
• netapp altavault ost plug-in, fas\/aff baseboard management controller, hci baseboard management controller +4 more +6 more X.509 Policy Constraints Double Locking CVE-2022-3996 Fix available 7.5 HighDecember 13, 2022
• haxx curl, apple macos, fedoraproject fedora +9 more +11 more curl before 7.86.0 has a double free. If curl is told to use an HTTP proxy for a transfer with a... CVE-2022-42915 Fix available 8.1 HighOctober 26, 2022
• haxx curl, netapp clustered data ontap, h300s firmware +12 more +14 more The curl URL parser wrongly accepts percent-encoded URL separators like '/'when decoding the host... CVE-2022-27780 Fix available 7.5 HighMay 11, 2022