Latest netapp hci Vulnerabilities

● CVE-2023-36054

lib/kadm5/kadm_rpc_xdr.c in MIT Kerberos 5 (aka krb5) before 1.20.2 and 1.21.x before 1.21.1 frees an uninitialized pointer. A remote authenticated user can trigger a kadmind crash. This occurs becaus...

MIT Kerberos 5<1.20.2

MIT Kerberos 5=1.21

MIT Kerberos 5=1.21-beta1

Debian Debian Linux=10.0

Netapp Active Iq Unified Manager Vmware Vsphere

NetApp Clustered Data ONTAP=9.0

and 3 more

● CVE-2023-32250

Linux Kernel ksmbd Session Race Condition Remote Code Execution Vulnerability

Linux Linux kernel<6.4

Linux kernel

redhat/kernel<6.4

ubuntu/linux-nvidia<6.4~

ubuntu/linux-nvidia<5.15.0-1044.44

ubuntu/linux-gkeop-5.15<6.4~

and 131 more

● CVE-2022-45061

A vulnerability was discovered in Python. A quadratic algorithm exists when processing inputs to the IDNA (RFC 3490) decoder, such that a crafted unreasonably long name being presented to the decoder ...

redhat/python3<0:3.6.8-48.el8_7.1

redhat/python3.9<0:3.9.14-1.el9_1.2

IBM Cloud Pak for Security<=1.10.0.0 - 1.10.11.0

IBM QRadar Suite Software<=1.10.12.0 - 1.10.16.0

redhat/python<3.11.1

redhat/python<3.10.9

and 51 more

● CVE-2022-37434

A security vulnerability was found in zlib. The flaw triggered a heap-based buffer in inflate in the inflate.c function via a large gzip header extra field. This flaw is only applicable in the call in...

redhat/zlib<0:1.2.7-21.el7_9

redhat/zlib<0:1.2.11-19.el8_6

redhat/rsync<0:3.1.3-19.el8

redhat/zlib<0:1.2.11-32.el9_0

redhat/rsync<0:3.2.3-18.el9

debian/zlib<=1:1.2.11.dfsg-1<=1:1.2.11.dfsg-4<=1:1.2.11.dfsg-2+deb11u1

and 63 more

● CVE-2021-42340

Apache Tomcat is vulnerable to a denial of service, caused by a memory leak flaw in WebSocket connections. By sending a specially-crafted request using OutOfMemoryError, a remote attacker could exploi...

redhat/pki-servlet-engine<1:9.0.50-1.el9

redhat/jws5-tomcat<0:9.0.50-3.redhat_00004.1.el7

redhat/jws5-tomcat-native<0:1.2.30-3.redhat_3.el7

redhat/jws5-tomcat-vault<0:1.1.8-4.Final_redhat_00004.1.el7

redhat/jws5-tomcat<0:9.0.50-3.redhat_00004.1.el8

redhat/jws5-tomcat-native<0:1.2.30-3.redhat_3.el8

and 47 more

● CVE-2021-3737

A flaw was found in python. An improperly handled HTTP response in the HTTP client code of python may allow a remote attacker, who controls the HTTP server, to make the client script enter an infinite...

redhat/python3<0:3.6.8-45.el8

redhat/python27-python<0:2.7.18-4.el7

IBM Cloud Pak for Security<=1.10.0.0 - 1.10.11.0

IBM QRadar Suite Software<=1.10.12.0 - 1.10.16.0

redhat/python<3.6.14

redhat/python<3.7.11

and 41 more

● CVE-2021-28169

Eclipse Jetty could allow a remote attacker to obtain sensitive information, caused by a flaw in the ConcatServlet. By sending a specially-crafted request using a doubly encoded path, an attacker coul...

redhat/jenkins<0:2.289.3.1630554997-1.el8

IBM Cognos Command Center<=10.2.4.1

debian/jetty9

redhat/jetty<9.4.41

redhat/jetty<10.0.3

redhat/jetty<11.0.3

and 12 more

● CVE-2021-22118

In Spring Framework, versions 5.2.x prior to 5.2.15 and versions 5.3.x prior to 5.3.7, a WebFlux application is vulnerable to a privilege escalation: by (re)creating the temporary storage directory, a...

maven/org.springframework:spring-web>=5.3.0<=5.3.6

maven/org.springframework:spring-web>=5.2.0<=5.2.14

IBM DRM<=2.0.6

redhat/spring-framework<5.3.7

redhat/spring-framework<5.2.15

VMware Spring Framework>=5.2.0<5.2.15

and 48 more

● CVE-2022-0391

Python could provide weaker than expected security, cause by a improper input validation by the urllib.parse module. By sending a specially-crafted request using \r and \n characters in the URL path. ...

redhat/python3<0:3.6.8-47.el8_6

redhat/rh-python38-babel<0:2.7.0-12.el7

redhat/rh-python38-python<0:3.8.11-2.el7

redhat/rh-python38-python-cryptography<0:2.8-5.el7

redhat/rh-python38-python-jinja2<0:2.10.3-6.el7

redhat/rh-python38-python-lxml<0:4.4.1-7.el7

and 31 more

● CVE-2020-27223

Eclipse Jetty is vulnerable to a denial of service, caused by an error when handling a request containing multiple Accept headers with a large number of quality parameters. By sending a specially-craf...

redhat/jenkins<0:2.289.1.1624365627-1.el7

redhat/jenkins<0:2.277.3.1623846768-1.el7

redhat/jenkins<0:2.277.3.1623853726-1.el8

debian/jetty9

redhat/jetty-9.4.37.v20210219 jetty-10.0.1 jetty<11.0.1

IBM Secure Proxy<=6.0.2

and 25 more

● CVE-2020-8582

Element Software versions prior to 12.2 and HCI versions prior to 1.8P1 are susceptible to a vulnerability which could allow an authenticated user to view sensitive information.

Netapp Hci<=1.8

Netapp Element Os>=10.0<12.2

● CVE-2020-8583

Element Software versions prior to 12.2 and HCI versions prior to 1.8P1 are susceptible to a vulnerability which could allow an attacker to discover sensitive information by intercepting its transmiss...

Netapp Hci<=1.8

Netapp Element Os>=10.0<12.2

● CVE-2019-14815

A vulnerability was found in Linux Kernel, where a Heap Overflow was found in mwifiex_set_wmm_params() function of Marvell Wifi Driver.

redhat/kernel-rt<0:3.10.0-1127.rt56.1093.el7

redhat/kernel-alt<0:4.14.0-115.17.1.el7a

redhat/kernel<0:3.10.0-1127.el7

redhat/kernel-rt<0:4.18.0-147.5.1.rt24.98.el8_1

redhat/kernel<0:4.18.0-147.5.1.el8_1

ubuntu/linux<4.15.0-66.75

and 99 more

Latest netapp hci Vulnerabilities

Company

Resources

Contact