hyper converged infrastructure vulnerabilities and exploits

(subscribe to this query)

Element Plug-in for vCenter Server versions before 4.2.3 may disclose sensitive account information to an unauthenticated attacker. NetApp HCI Compute Node versions before 1.4P2 bundle affected versions of Element Plug-in for vCenter Server.

Netapp Hyper Converged Infrastructure Compute Node Netapp Element Plug-in For Vcenter Server

If an application encounters a fatal protocol error and then calls SSL_shutdown() twice (once to send a close_notify, and once to receive one) then OpenSSL can respond differently to the calling application if a 0 byte record is received with invalid padding compared to if a 0 by...

3 Github repositories

_set_key in agent/helpers/table_container.c in Net-SNMP prior to 5.8 has a NULL Pointer Exception bug that can be used by an authenticated malicious user to remotely cause the instance to crash via a crafted UDP packet, resulting in Denial of Service.

Net-snmp Net-snmp Debian Debian Linux 9.0 Canonical Ubuntu Linux 14.04 Canonical Ubuntu Linux 16.04 Canonical Ubuntu Linux 18.04 Canonical Ubuntu Linux 18.10 Canonical Ubuntu Linux 12.04 Netapp Cloud Backup -Netapp E-series Santricity Os Controller Netapp Data Ontap -Netapp Storagegrid Webscale -Netapp Hyper Converged Infrastructure -Netapp Solidfire Element Os -Paloaltonetworks Pan-os

1 EDB exploit

snmp_oid_compare in snmplib/snmp_api.c in Net-SNMP prior to 5.8 has a NULL Pointer Exception bug that can be used by an unauthenticated malicious user to remotely cause the instance to crash via a crafted UDP packet, resulting in Denial of Service.

Net-snmp Net-snmp Netapp Storagegrid Webscale -Netapp Solidfire Element Os -Netapp Hyper Converged Infrastructure -Netapp Cloud Backup -Netapp Data Ontap -Netapp E-series Santricity Os Controller

The Pallets Project flask version prior to 0.12.3 contains a CWE-20: Improper Input Validation vulnerability in flask that can result in Large amount of memory usage possibly leading to denial of service. This attack appear to be exploitable via Attacker provides JSON data in inc...

Palletsprojects Flask Netapp Ontap Select Deploy Utility Netapp Hyper Converged Infrastructure Netapp Active Iq

12 Github repositories

In Eclipse Jetty versions 9.4.0 up to and including 9.4.8, when using the optional Jetty provided FileSessionDataStore for persistent storage of HttpSession details, it is possible for a malicious user to access/hijack other HttpSessions and even delete unmatched HttpSessions pre...

Eclipse Jetty Netapp E-series Santricity Os Controller Netapp Snap Creator Framework -Netapp Hyper Converged Infrastructure -Netapp Element Software -Netapp Santricity Cloud Connector -Netapp Snapcenter -Netapp Oncommand Unified Manager -Netapp E-series Santricity Management Plug-ins -Netapp E-series Santricity Web Services Proxy -Netapp Oncommand System Manager Netapp Snapmanager -

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook