Latest netapp hyper converged infrastructure Vulnerabilities

● CVE-2019-1559

OpenSSL could allow a remote attacker to obtain sensitive information, caused by the failure to immediately close the TCP connection after the hosts encounter a zero-length record with valid padding. ...

redhat/openssl<0:1.0.1e-58.el6_10

redhat/openssl<1:1.0.2k-19.el7

redhat/jws5-ecj<0:4.12.0-1.redhat_1.1.el6

redhat/jws5-javapackages-tools<0:3.4.1-5.15.11.el6

redhat/jws5-jboss-logging<0:3.3.2-1.Final_redhat_00001.1.el6

redhat/jws5-tomcat<0:9.0.21-10.redhat_4.1.el6

and 226 more

● CVE-2018-18066

snmp_oid_compare in snmplib/snmp_api.c in Net-SNMP before 5.8 has a NULL Pointer Exception bug that can be used by an unauthenticated attacker to remotely cause the instance to crash via a crafted UDP...

Net-snmp Net-snmp<5.8

Netapp Cloud Backup

Netapp Hyper Converged Infrastructure

NetApp StorageGRID Webscale

NetApp Data ONTAP

NetApp E-Series SANtricity OS Controller>=11.0<=11.5

and 1 more

● CVE-2018-18065

_set_key in agent/helpers/table_container.c in Net-SNMP before 5.8 has a NULL Pointer Exception bug that can be used by an authenticated attacker to remotely cause the instance to crash via a crafted ...

debian/net-snmp

ubuntu/net-snmp<5.7.2~dfsg-8.1ubuntu3.3

ubuntu/net-snmp<5.7.3+dfsg-1ubuntu4.2

ubuntu/net-snmp<5.7.3+dfsg-1.8ubuntu3.1

ubuntu/net-snmp<5.7.3+dfsg-1.8ubuntu3.18.10.1

Net-snmp Net-snmp<5.8

and 15 more

● CVE-2018-1000656

The Pallets Project flask version Before 0.12.3 contains a CWE-20: Improper Input Validation vulnerability in flask that can result in Large amount of memory usage possibly leading to denial of servic...

pip/flask<0.12.3

Palletsprojects Flask<0.12.3

Netapp Active Iq

Netapp Hyper Converged Infrastructure

Netapp Ontap Select Deploy Utility

ubuntu/flask<0.12.2-3ubuntu0.1

and 4 more

● CVE-2018-12538

In Eclipse Jetty versions 9.4.0 through 9.4.8, when using the optional Jetty provided FileSessionDataStore for persistent storage of HttpSession details, it is possible for a malicious user to access/...

Eclipse Jetty>=9.4.0<=9.4.8

Netapp E-series Santricity Management Plug-ins

NetApp E-Series SANtricity OS Controller>=11.0<=11.40

Netapp E-series Santricity Web Services Proxy

Netapp Element Software

Netapp Hyper Converged Infrastructure

and 6 more

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.