netapp beegfs csi driver - vulnerabilities and exploits

(subscribe to this query)

Go prior to 1.17.10 and 1.18.x prior to 1.18.2 has Incorrect Privilege Assignment. When called with a non-zero flags parameter, the Faccessat function could incorrectly report that a file is accessible.

Golang Go Fedoraproject Fedora 35 Fedoraproject Fedora 36 Netapp Beegfs Csi Driver -

cmd/go in Go prior to 1.16.14 and 1.17.x prior to 1.17.7 can misinterpret branch names that falsely appear to be version tags. This can lead to incorrect access control if an actor is supposed to be able to create branches but not tags.

Golang Go Netapp Storagegrid -Netapp Cloud Insights Telegraf Agent -Netapp Kubernetes Monitoring Operator -Netapp Beegfs Csi Driver -

4 Github repositories

Curve.IsOnCurve in crypto/elliptic in Go prior to 1.16.14 and 1.17.x prior to 1.17.7 can incorrectly return true in situations with a big.Int value that is not a valid field element.

Golang Go Netapp Storagegrid -Netapp Cloud Insights Telegraf Agent -Netapp Kubernetes Monitoring Operator -Netapp Beegfs Csi Driver -Debian Debian Linux 9.0

3 Github repositories

Rat.SetString in math/big in Go prior to 1.16.14 and 1.17.x prior to 1.17.7 has an overflow that can lead to Uncontrolled Memory Consumption.

Golang Go Netapp Storagegrid -Netapp Cloud Insights Telegraf Agent -Netapp Kubernetes Monitoring Operator -Netapp Beegfs Csi Driver -Debian Debian Linux 9.0

5 Github repositories

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook