Netapp Ontap Select Deploy Administration Utility vulnerabilities

• gnu binutils, netapp active iq unified manager, ontap select deploy administration utility +2 more GNU Binutils ld elflink.c _bfd_elf_gc_mark_rsec memory corruption CVE-2025-1181 Fix available 2.3 LowFebruary 11, 2025
• gnu binutils, netapp active iq unified manager, ontap select deploy administration utility +2 more GNU Binutils ld libbfd.c bfd_putl64 memory corruption CVE-2025-1178 Fix available 6.3 MediumFebruary 11, 2025
• curl, netapp bootstrap os, element software +32 more +34 more netrc and default credential leak CVE-2025-0167 Fix available 3.4 LowFebruary 5, 2025
• curl, netapp bootstrap os, h300s firmware +29 more +31 more netrc and redirect credential leak CVE-2024-11053 Fix available 3.4 LowDecember 11, 2024
• debian linux, netapp 500f firmware, a250 firmware +30 more +32 more Low-level invalid GF(2^m) parameters lead to OOB memory access CVE-2024-9143 Fix available EPSS 12.5% 8.8 HighOctober 16, 2024
• curl, debian linux, netapp active iq unified manager +26 more +28 more OCSP stapling bypass with GnuTLS CVE-2024-8096 Fix available 6.5 MediumSeptember 11, 2024
• netapp 500f firmware, a250 firmware, active iq unified manager +22 more +24 more Possible denial of service in X.509 name checks CVE-2024-6119 Fix available EPSS 66.6% 7.5 HighSeptember 3, 2024
• certifi, certifi python-certifi, netapp management services for element software and netapp hci +2 more +4 more Certifi removes GLOBALTRUST root certificate CVE-2024-39689 Public exploitFix available 7.5 HighJuly 5, 2024
• openbsd openssh, almalinux, amazon linux +71 more +73 more Openssh: regresshion - race condition in ssh allows rce/dos CVE-2024-6387 Public exploitFix available EPSS 99.5% 8.1 HighJuly 1, 2024
• openssl, debian linux, netapp 500f firmware +40 more +42 more SSL_select_next_proto buffer overread CVE-2024-5535 Public exploitFix available 9.1 CriticalJune 27, 2024
• openssl, debian linux, netapp 500f firmware +32 more +34 more Use After Free with SSL_free_buffers CVE-2024-4741 Fix available 9.8 CriticalMay 28, 2024
• openssl, netapp 500f firmware, 8300 firmware +19 more +21 more Excessive time spent checking DSA keys and parameters CVE-2024-4603 Fix available 5.3 MediumMay 16, 2024
• netapp ontap select deploy administration utility, clustered data ontap +1 more Default Privileged Account Credentials Vulnerability in ONTAP Select Deploy administration utility CVE-2024-21990 5.4 MediumApril 17, 2024
• netapp ontap select deploy administration utility Privilege Escalation Vulnerability in ONTAP Select Deploy administration utility CVE-2024-21989 8.1 HighApril 17, 2024
• debian linux, gnu glibc, netapp active iq unified manager +13 more +15 more The iconv() function in the GNU C Library versions 2.39 and older may overflow the output buffer... CVE-2024-2961 Public exploitFix available EPSS 88.3% 7.3 HighApril 17, 2024
• curl, apple macos, netapp active iq unified manager +14 more +16 more QUIC certificate check bypass with wolfSSL CVE-2024-2379 Fix available 6.3 MediumMarch 27, 2024
• curl, apple macos, fedoraproject fedora +16 more +18 more HTTP/2 push headers memory-leak CVE-2024-2398 Fix available EPSS 36.1% 8.6 HighMarch 27, 2024
• curl, apple macos, fedoraproject fedora +12 more +14 more Usage of disabled protocol CVE-2024-2004 Fix available 3.5 LowMarch 27, 2024
• debian linux, linux kernel, netapp a150 firmware +11 more +13 more ip6_tunnel: make sure to pull inner header in __ip6_tnl_rcv() CVE-2024-26641 Fix available 8.6 HighMarch 18, 2024
• debian linux, linux kernel, netapp 9500 firmware +17 more +19 more ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim() CVE-2024-26633 Fix available 5.5 MediumMarch 18, 2024
• mit kerberos 5, netapp active iq unified manager, cloud volumes ontap mediator +5 more +7 more Kerberos 5 (aka krb5) 1.21.2 contains a memory leak vulnerability in /krb5/src/kdc/ndr.c. CVE-2024-26462 Fix available 5.5 MediumFebruary 26, 2024
• mit kerberos 5, netapp active iq unified manager, cloud volumes ontap mediator +6 more +8 more Kerberos 5 (aka krb5) 1.21.2 contains a memory leak vulnerability in /krb5/src/lib/gssapi/krb5... CVE-2024-26461 Fix available 7.5 HighFebruary 26, 2024
• mit kerberos 5, netapp active iq unified manager, cloud volumes ontap mediator +6 more +8 more Kerberos 5 (aka krb5) 1.21.2 contains a memory leak in /krb5/src/lib/rpc/pmap_rmt.c. CVE-2024-26458 Fix available 5.3 MediumFebruary 26, 2024
• openssl, netapp 500f firmware, 8300 firmware +31 more +33 more Excessive time spent checking invalid RSA public keys CVE-2023-6237 Fix available 5.9 MediumJanuary 15, 2024
• gnu glibc, c library, canonical ubuntu linux +48 more +50 more Glibc: buffer overflow in ld.so leading to privilege escalation CVE-2023-4911 In KEVPublic exploitFix available EPSS 63.8% 7.8 HighOctober 3, 2023
• vmware tools, debian linux, fedoraproject fedora +2 more +4 more VMware Tools contains a SAML token signature bypass vulnerability. A malicious actor with man-in... CVE-2023-20900 Fix available 7.1 HighAugust 31, 2023
• gnu binutils, fedoraproject fedora, netapp ontap select deploy administration utility +2 more GNU Binutils before 2.40 was discovered to contain a memory leak vulnerability var the function... CVE-2022-48065 Fix available 5.5 MediumAugust 22, 2023
• gnu binutils, fedoraproject fedora, netapp ontap select deploy administration utility +2 more GNU Binutils before 2.40 was discovered to contain an excessive memory consumption vulnerability... CVE-2022-48064 Fix available 5.5 MediumAugust 22, 2023
• certifi, certifi python-certifi, fedoraproject fedora +6 more +8 more Certifi's removal of e-Tugra root certificate CVE-2023-37920 Fix available 7.5 HighJuly 25, 2023
• es iperf3, apple macos, debian linux +3 more +5 more iperf3 before 3.14 allows peers to cause an integer overflow and heap corruption via a crafted... CVE-2023-38403 Fix available 7.5 HighJuly 17, 2023
• openssl, netapp management services for element software and netapp hci, ontap select deploy administration utility +2 more AES-SIV implementation ignores empty associated data entries CVE-2023-2975 Fix available 5.3 MediumJuly 14, 2023
• python, fedoraproject fedora, netapp active iq unified manager +12 more +14 more The e-mail module of Python 0 - 2.7.18, 3.x - 3.11 incorrectly parses e-mail addresses which... CVE-2023-27043 Fix available 5.3 MediumApril 18, 2023
• python, fedoraproject fedora, netapp active iq unified manager +6 more +8 more An issue in the urllib.parse component of Python before v3.11 allows attackers to bypass... CVE-2023-24329 Public exploitFix available EPSS 20.5% 7.5 HighFebruary 17, 2023
• gnu gnutls, debian linux, fedoraproject fedora +7 more +9 more A timing side-channel in the handling of RSA ClientKeyExchange messages was discovered in GnuTLS.... CVE-2023-0361 Fix available 7.4 HighFebruary 14, 2023
• openbsd openssh, fedoraproject fedora, netapp 500f firmware +6 more +8 more OpenSSH server (sshd) 9.1 introduced a double-free vulnerability during options.kex_algorithms... CVE-2023-25136 Public exploitFix available EPSS 89.8% 6.5 MediumFebruary 3, 2023
• vim, vim vim/vim, netapp ontap select deploy administration utility +2 more Use After Free in vim/vim CVE-2022-4292 Fix available 7.8 HighDecember 5, 2022
• python, fedoraproject fedora, netapp active iq unified manager +9 more +11 more An issue was discovered in Python before 3.11.1. An unnecessary quadratic algorithm exists in one... CVE-2022-45061 Fix available 7.5 HighNovember 9, 2022
• xmlsoft libxml2, apple ipados, iphone os +17 more +19 more An issue was discovered in libxml2 before 2.10.3. When parsing a multi-gigabyte XML document with... CVE-2022-40303 Fix available EPSS 41.4% 7.5 HighOctober 21, 2022
• sqlite, netapp ontap select deploy administration utility, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +2 more +4 more In SQLite 3.31.1, there is an out of bounds access problem through ALTER TABLE for views that... CVE-2020-35527 Fix available 9.8 CriticalSeptember 1, 2022
• gnu glibc, netapp h300s firmware, h410c firmware +4 more +6 more An issue was discovered in the GNU C Library (glibc) 2.36. When the syslog function is passed a... CVE-2022-39046 Fix available 7.5 HighAugust 31, 2022
• libtiff, debian linux, netapp ontap select deploy administration utility +2 more LibTIFF 4.4.0 has an out-of-bounds read in extractImageSection in tools/tiffcrop.c:6905, allowing... CVE-2022-2953 Fix available 5.5 MediumAugust 29, 2022
• libpng, debian linux, netapp ontap select deploy administration utility +2 more A heap overflow flaw was found in libpngs' pngimage.c program. This flaw allows an attacker with... CVE-2021-4214 5.5 MediumAugust 24, 2022
• vmware tools, debian linux, fedoraproject fedora +1 more +3 more VMware Tools (12.0.0, 11.x.y and 10.x.y) contains a local privilege escalation vulnerability. A... CVE-2022-31676 Fix available 7.8 HighAugust 23, 2022
• zlib, apple ipados, iphone os +29 more +31 more zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c... CVE-2022-37434 Public exploitFix available EPSS 19.2% 9.8 CriticalAugust 5, 2022
• sqlite, netapp ontap select deploy administration utility, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +3 more +5 more `libsqlite3-sys` via C SQLite improperly validates array index CVE-2022-35737 Public exploitFix available EPSS 23.6% 7.5 HighAugust 3, 2022
• debian linux, fedoraproject fedora, libtiff +2 more +4 more A stack overflow was discovered in the _TIFFVGetField function of Tiffsplit v4.4.0. This... CVE-2022-34526 Fix available 6.5 MediumJuly 29, 2022
• openssl, debian linux, fedoraproject fedora +20 more +22 more AES OCB fails to encrypt some bytes CVE-2022-2097 Public exploitFix available 5.3 MediumJuly 5, 2022
• gnupg, debian linux, fedoraproject fedora +2 more +4 more GnuPG through 2.3.6, in unusual situations where an attacker possesses any secret-key information... CVE-2022-34903 Fix available 6.5 MediumJuly 1, 2022
• libtiff, debian linux, fedoraproject fedora +2 more +4 more A heap buffer overflow flaw was found in Libtiffs' tiffinfo.c in TIFFReadRawDataStriped()... CVE-2022-1354 Fix available 5.5 MediumJune 24, 2022
• openssl, broadcom sannav, debian linux +29 more +31 more The c_rehash script allows command injection CVE-2022-2068 Fix available EPSS 96.4% 7.3 HighJune 21, 2022
• Show olderLoading…