netapp clustered data ontap 9.0 vulnerabilities and exploits

(subscribe to this query)

lib/kadm5/kadm_rpc_xdr.c in MIT Kerberos 5 (aka krb5) prior to 1.20.2 and 1.21.x prior to 1.21.1 frees an uninitialized pointer. A remote authenticated user can trigger a kadmind crash. This occurs because _xdr_kadm5_principal_ent_rec does not validate the relationship between n_...

Mit Kerberos 5 1.21 Mit Kerberos 5 Debian Debian Linux 10.0 Netapp Hci -Netapp Active Iq Unified Manager -Netapp Management Services For Element Software -Netapp Ontap Tools -Netapp Clustered Data Ontap 9.0

1 Github repository

A set of carefully crafted ipv6 packets can trigger an integer overflow in the calculation of a fragment reassembled packet's payload length field. This allows an malicious user to trigger a kernel panic, resulting in a denial of service.

Freebsd Freebsd 12.4 Freebsd Freebsd 13.1 Freebsd Freebsd 13.2 Netapp Clustered Data Ontap 9.0

iperf3 prior to 3.14 allows peers to cause an integer overflow and heap corruption via a crafted length field.

Es Iperf3 Debian Debian Linux 10.0 Fedoraproject Fedora 37 Fedoraproject Fedora 38 Netapp Ontap Select Deploy Administration Utility -Netapp Clustered Data Ontap 9.0 Apple Macos 14.0 Apple Macos

A vulnerability was found in openldap. This security flaw causes a null pointer dereference in ber_memalloc_x() function.

Openldap Openldap 2.4 Redhat Enterprise Linux 8.0 Redhat Enterprise Linux 9.0 Apple Macos Netapp Clustered Data Ontap -Netapp Active Iq Unified Manager -Netapp Ontap Tools -Netapp H300s Firmware -Netapp H500s Firmware -Netapp H700s Firmware -Netapp H410s Firmware -Netapp H410c Firmware -

A vulnerability in input validation exists in curl <8.0 during communication using the TELNET protocol may allow an malicious user to pass on maliciously crafted user name and "telnet options" during server negotiation. The lack of proper input scrubbing allows an ma...

Haxx Curl Fedoraproject Fedora 36 Netapp Active Iq Unified Manager -Netapp Clustered Data Ontap 9.0 Netapp H300s Firmware -Netapp H500s Firmware -Netapp H700s Firmware -Netapp H410s Firmware -Splunk Universal Forwarder 9.1.0 Splunk Universal Forwarder

A double free vulnerability exists in libcurl <8.0.0 when sharing HSTS data between separate "handles". This sharing was introduced without considerations for do this sharing across separate threads but there was no indication of this fact in the documentation. Due t...

Haxx Libcurl 7.88.1 Haxx Libcurl 7.88.0 Netapp Active Iq Unified Manager -Broadcom Brocade Fabric Operating System Firmware -Netapp Clustered Data Ontap 9.0 Netapp H300s Firmware -Netapp H500s Firmware -Netapp H700s Firmware -Netapp H410s Firmware -Splunk Universal Forwarder 9.1.0 Splunk Universal Forwarder

1 Github repository

An authentication bypass vulnerability exists in libcurl prior to v8.0.0 where it reuses a previously established SSH connection despite the fact that an SSH option was modified, which should have prevented reuse. libcurl maintains a pool of previously used connections to reuse t...

Haxx Libcurl Fedoraproject Fedora 36 Debian Debian Linux 10.0 Netapp Active Iq Unified Manager -Broadcom Brocade Fabric Operating System Firmware -Netapp Clustered Data Ontap 9.0 Netapp H300s Firmware -Netapp H500s Firmware -Netapp H700s Firmware -Netapp H410s Firmware -Splunk Universal Forwarder 9.1.0 Splunk Universal Forwarder

A cleartext transmission of sensitive information vulnerability exists in curl <v7.88.0 that could cause HSTS functionality fail when multiple URLs are requested serially. Using its HSTS support, curl can be instructed to use HTTPS instead of usingan insecure clear-text HTTP s...

Haxx Curl Netapp Active Iq Unified Manager -Netapp Clustered Data Ontap 9.0 Netapp H300s Firmware -Netapp H500s Firmware -Netapp H700s Firmware -Netapp H410s Firmware -Splunk Universal Forwarder 9.1.0 Splunk Universal Forwarder

1 Github repository

A cleartext transmission of sensitive information vulnerability exists in curl <v7.88.0 that could cause HSTS functionality to behave incorrectly when multiple URLs are requested in parallel. Using its HSTS support, curl can be instructed to use HTTPS instead of using an insec...

Haxx Curl Netapp Active Iq Unified Manager -Netapp Clustered Data Ontap 9.0 Netapp H300s Firmware -Netapp H500s Firmware -Netapp H700s Firmware -Netapp H410s Firmware -Splunk Universal Forwarder 9.1.0 Splunk Universal Forwarder

The c_rehash script does not properly sanitise shell metacharacters to prevent command injection. This script is distributed by some operating systems in a manner where it is automatically executed. On such operating systems, an attacker could execute arbitrary commands with the ...

7 Github repositories1 Article

1 2 3 4 5 6 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook