Latest netapp clustered data ontap antivirus connector Vulnerabilities

● CVE-2022-40303

A flaw was found in libxml2. Parsing a XML document with the XML_PARSE_HUGE option enabled can result in an integer overflow because safety checks were missing in some functions. Also, the xmlParseEnt...

redhat/libxml2<0:2.9.7-15.el8_7.1

redhat/libxml2<0:2.9.13-3.el9_1

Apple tvOS<16.2

Apple watchOS<9.2

Apple macOS Big Sur<11.7.2

Apple macOS Monterey<12.6.2

and 29 more

● CVE-2022-40304

A flaw was found in libxml2. When a reference cycle is detected in the XML entity cleanup function the XML entity data can be stored in a dictionary. In this case, the dictionary becomes corrupted res...

redhat/libxml2<0:2.9.7-15.el8_7.1

redhat/libxml2<0:2.9.13-3.el9_1

redhat/libxml2<2.10.3

Apple macOS Ventura<13.0.1

Apple iOS<16.1.1

Apple iPadOS<16.1.1

and 29 more

● CVE-2022-2097

AES OCB mode for 32-bit x86 platforms using the AES-NI assembly optimised implementation will not encrypt the entirety of the data under some circumstances. This could reveal sixteen bytes of data tha...

redhat/openssl<1:1.1.1k-7.el8_6

redhat/openssl<1:3.0.1-41.el9_0

OpenSSL OpenSSL>=1.1.1<1.1.1q

OpenSSL OpenSSL>=3.0.0<3.0.5

Fedoraproject Fedora=35

Fedoraproject Fedora=36

and 40 more

● CVE-2022-1434

The OpenSSL 3.0 implementation of the RC4-MD5 ciphersuite incorrectly uses the AAD data as the MAC key. This makes the MAC key trivially predictable. An attacker could exploit this issue by performing...

OpenSSL OpenSSL>=3.0.0<3.0.3

Netapp Active Iq Unified Manager

NetApp Clustered Data ONTAP

Netapp Clustered Data Ontap Antivirus Connector

Netapp Santricity Smi-s Provider

Netapp Smi-s Provider

and 77 more

● CVE-2022-1473

A memory leak flaw was found in OpenSSL, resulting in TLS servers and clients being halted by out-of-memory conditions, leading to a denial of service. An attacker needs to repeat actions continuously...

rust/openssl-src>=300.0.0<300.0.6

redhat/openssl<1:3.0.1-41.el9_0

OpenSSL OpenSSL>=3.0.0<3.0.3

Netapp Active Iq Unified Manager

NetApp Clustered Data ONTAP

Netapp Clustered Data Ontap Antivirus Connector

and 80 more

● CVE-2022-1292

The c_rehash script does not properly sanitise shell metacharacters to prevent command injection. This script is distributed by some operating systems in a manner where it is automatically executed. O...

redhat/jbcs-httpd24-openssl<1:1.1.1k-13.el8

redhat/jbcs-httpd24-openssl<1:1.1.1k-13.el7

redhat/openssl<1:1.1.1k-7.el8_6

redhat/openssl<1:3.0.1-41.el9_0

redhat/jws5-tomcat-native<0:1.2.31-11.redhat_11.el7

redhat/jws5-tomcat-native<0:1.2.31-11.redhat_11.el8

and 108 more

● CVE-2022-29824

In libxml2 before 2.9.14, several buffer handling functions in buf.c (xmlBuf*) and tree.c (xmlBuffer*) don't check for integer overflows. This can result in out-of-bounds memory writes. Exploitation r...

redhat/libxml2<0:2.9.7-13.el8_6.1

redhat/libxml2<0:2.9.13-1.el9_0.1

debian/libxml2<=2.9.10+dfsg-6.7<=2.9.10+dfsg-6.7+deb11u1<=2.9.4+dfsg1-7+deb10u3<=2.9.13+dfsg-1<=2.9.4+dfsg1-7

debian/libxml2

redhat/libxml2<2.9.14

Xmlsoft Libxml2<2.9.14

and 27 more

● CVE-2022-1343

The function `OCSP_basic_verify` verifies the signer certificate on an OCSP response. In the case where the (non-default) flag OCSP_NOCHECKS is used then the response will be positive (meaning a succe...

redhat/openssl<1:3.0.1-41.el9_0

OpenSSL OpenSSL>=3.0.0<3.0.3

Netapp Active Iq Unified Manager

NetApp Clustered Data ONTAP

Netapp Clustered Data Ontap Antivirus Connector

Netapp Santricity Smi-s Provider

and 79 more

● CVE-2022-0778

A flaw was found in OpenSSL. It is possible to trigger an infinite loop by crafting a certificate that has invalid elliptic curve parameters. Since certificate parsing happens before verification of t...

redhat/jbcs-httpd24-apr-util<0:1.6.1-91.el8

redhat/jbcs-httpd24-curl<0:7.78.0-3.el8

redhat/jbcs-httpd24-httpd<0:2.4.37-80.el8

redhat/jbcs-httpd24-nghttp2<0:1.39.2-41.el8

redhat/jbcs-httpd24-openssl<1:1.1.1g-11.el8

redhat/jbcs-httpd24-openssl-chil<0:1.0.0-11.el8

and 83 more

● CVE-2022-23308

A flaw was found in libxml2. A call to the xmlGetID function can return a pointer already freed when parsing an XML document with the XML_PARSE_DTDVALID option and without the XML_PARSE_NOENT option, ...

redhat/jbcs-httpd24-apr-util<0:1.6.1-91.el8

redhat/jbcs-httpd24-curl<0:7.78.0-3.el8

redhat/jbcs-httpd24-httpd<0:2.4.37-80.el8

redhat/jbcs-httpd24-nghttp2<0:1.39.2-41.el8

redhat/jbcs-httpd24-openssl<1:1.1.1g-11.el8

redhat/jbcs-httpd24-openssl-chil<0:1.0.0-11.el8

and 75 more

● CVE-2021-3712

OpenSSL could allow a remote attacker to obtain sensitive information, caused by an out-of-bounds read when processing ASN.1 strings. By sending specially crafted data, an attacker could exploit this ...

redhat/jbcs-httpd24-apr<0:1.6.3-107.el8

redhat/jbcs-httpd24-apr-util<0:1.6.1-84.el8

redhat/jbcs-httpd24-curl<0:7.78.0-2.el8

redhat/jbcs-httpd24-httpd<0:2.4.37-78.el8

redhat/jbcs-httpd24-nghttp2<0:1.39.2-39.el8

redhat/jbcs-httpd24-openssl<1:1.1.1g-8.el8

and 79 more

● CVE-2021-3711

OpenSSL is vulnerable to a buffer overflow, caused by improper bounds checking by the EVP_PKEY_decrypt() function within implementation of the SM2 decryption. By sending specially crafted SM2 content,...

debian/openssl

redhat/openssl<1.1.1

OpenSSL OpenSSL>=1.1.1<1.1.1l

Debian Debian Linux=10.0

Debian Debian Linux=11.0

Apple iPadOS

and 41 more

● CVE-2021-3537

A NULL pointer dereference flaw was found in libxml2, where it did not propagate errors while parsing XML mixed content. This flaw causes the application to crash if an untrusted XML document is parse...

redhat/jbcs-httpd24-apr-util<0:1.6.1-91.el8

redhat/jbcs-httpd24-curl<0:7.78.0-3.el8

redhat/jbcs-httpd24-httpd<0:2.4.37-80.el8

redhat/jbcs-httpd24-nghttp2<0:1.39.2-41.el8

redhat/jbcs-httpd24-openssl<1:1.1.1g-11.el8

redhat/jbcs-httpd24-openssl-chil<0:1.0.0-11.el8

and 36 more

● CVE-2021-3518

libxml2. This issue was addressed with improved checks.

rubygems/nokogiri<1.11.4

redhat/libxml2<2.9.11

redhat/jbcs-httpd24-apr-util<0:1.6.1-91.el8

redhat/jbcs-httpd24-curl<0:7.78.0-3.el8

redhat/jbcs-httpd24-httpd<0:2.4.37-80.el8

redhat/jbcs-httpd24-nghttp2<0:1.39.2-41.el8

and 37 more

● CVE-2021-3517

A heap-based buffer overflow was found in libxml2 when processing truncated UTF-8 input. Reference: <a href="https://gitlab.gnome.org/GNOME/libxml2/-/issues/235">https://gitlab.gnome.org/GNOME/libxml...

rubygems/nokogiri<1.11.4

redhat/jbcs-httpd24-apr-util<0:1.6.1-91.el8

redhat/jbcs-httpd24-curl<0:7.78.0-3.el8

redhat/jbcs-httpd24-httpd<0:2.4.37-80.el8

redhat/jbcs-httpd24-nghttp2<0:1.39.2-41.el8

redhat/jbcs-httpd24-openssl<1:1.1.1g-11.el8

and 46 more

● CVE-2021-3516

libxml2 could allow a remote attacker to execute arbitrary code on the system, caused by a use-after-free in xmlEncodeEntitiesInternal() in entities.c. By persuading a victim to open a specially craft...

redhat/jbcs-httpd24-apr-util<0:1.6.1-91.el8

redhat/jbcs-httpd24-curl<0:7.78.0-3.el8

redhat/jbcs-httpd24-httpd<0:2.4.37-80.el8

redhat/jbcs-httpd24-nghttp2<0:1.39.2-41.el8

redhat/jbcs-httpd24-openssl<1:1.1.1g-11.el8

redhat/jbcs-httpd24-openssl-chil<0:1.0.0-11.el8

and 22 more

● CVE-2021-3541

GNOME libxml2 is vulnerable to a denial of service, caused by an exponential entity expansion attack which bypasses all existing protection mechanisms. A remote authenticated attacker could exploit th...

redhat/jbcs-httpd24-apr-util<0:1.6.1-91.el8

redhat/jbcs-httpd24-curl<0:7.78.0-3.el8

redhat/jbcs-httpd24-httpd<0:2.4.37-80.el8

redhat/jbcs-httpd24-nghttp2<0:1.39.2-41.el8

redhat/jbcs-httpd24-openssl<1:1.1.1g-11.el8

redhat/jbcs-httpd24-openssl-chil<0:1.0.0-11.el8

and 37 more

● CVE-2020-1971

A null pointer dereference flaw was found in openssl. A remote attacker, able to control the arguments of the GENERAL_NAME_cmp function, could cause the application, compiled with openssl to crash res...

redhat/jbcs-httpd24-brotli<0:1.0.6-40.jbcs.el7

redhat/jbcs-httpd24-httpd<0:2.4.37-66.jbcs.el7

redhat/jbcs-httpd24-nghttp2<0:1.39.2-35.jbcs.el7

redhat/jbcs-httpd24-openssl<1:1.1.1g-3.jbcs.el7

redhat/jbcs-httpd24-openssl-chil<0:1.0.0-3.jbcs.el7

redhat/jbcs-httpd24-openssl-pkcs11<0:0.4.10-18.jbcs.el7

and 95 more

● CVE-2020-24977

GNOME libxml2 is vulnerable to a buffer overflow, caused by improper bounds checking by the xmlEncodeEntitiesInternal function in libxml2/entities.c. By persuading a victim to open a specially-crafted...

IBM Security Verify Access<=10.0.0

Xmlsoft Libxml2=2.9.10

Debian Debian Linux=9.0

Fedoraproject Fedora=31

Fedoraproject Fedora=32

Fedoraproject Fedora=33

and 22 more

● CVE-2019-19956

libxml2 is vulnerable to a denial of service, caused by a memory leak in xmlParseBalancedChunkMemoryRecover in parser.c. By persuading a victim to open a specially crafted file, a remote attacker coul...

ubuntu/libxml2<2.9.4+dfsg1-6.1ubuntu1.3

ubuntu/libxml2<2.9.4+dfsg1-7ubuntu3.1

ubuntu/libxml2<2.9.10+dfsg-1ubuntu2

ubuntu/libxml2<2.9.1+dfsg1-3ubuntu4.13+

ubuntu/libxml2<2.9.10

ubuntu/libxml2<2.9.3+dfsg1-1ubuntu0.7

and 53 more

● CVE-2019-1559

OpenSSL could allow a remote attacker to obtain sensitive information, caused by the failure to immediately close the TCP connection after the hosts encounter a zero-length record with valid padding. ...

redhat/openssl<0:1.0.1e-58.el6_10

redhat/openssl<1:1.0.2k-19.el7

redhat/jws5-ecj<0:4.12.0-1.redhat_1.1.el6

redhat/jws5-javapackages-tools<0:3.4.1-5.15.11.el6

redhat/jws5-jboss-logging<0:3.3.2-1.Final_redhat_00001.1.el6

redhat/jws5-tomcat<0:9.0.21-10.redhat_4.1.el6

and 226 more

Latest netapp clustered data ontap antivirus connector Vulnerabilities

Company

Resources

Contact