CVE-2017-12420: Buffer Overflow
Heap-based buffer overflow in the SMB implementation in NetApp Clustered Data ONTAP before 8.3.2P8 and 9.0 before P2 allows remote authenticated users to cause a denial of service or execute arbitrary code.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2017-12420?
CVE-2017-12420 is classified as a high severity vulnerability due to its potential to allow arbitrary code execution and denial of service.
How do I fix CVE-2017-12420?
To fix CVE-2017-12420, you should upgrade to Clustered Data ONTAP versions 8.3.2P8 or 9.0 P2 or later.
Who is affected by CVE-2017-12420?
CVE-2017-12420 affects remote authenticated users of NetApp Clustered Data ONTAP versions prior to 8.3.2P8 and 9.0 P2.
What is the impact of exploiting CVE-2017-12420?
Exploiting CVE-2017-12420 can lead to remote code execution or a denial of service in affected NetApp systems.
Is there a workaround for CVE-2017-12420?
There is no documented workaround for CVE-2017-12420; upgrading to a patched version is the recommended action.