netapp cloud volumes ontap mediator - vulnerabilities and exploits

(subscribe to this query)

An issue exists in the Linux Kernel from 4.18 to 4.19, an improper update of sock reference in TCP pacing can lead to memory/netns leak, which can be used by remote clients.

Linux Linux Kernel Netapp Active Iq Unified Manager -Netapp Cloud Volumes Ontap Mediator -Netapp E-series Santricity Os Controller Netapp Element Software -Netapp Hci Management Node -Netapp Solidfire -Netapp Storagegrid -Netapp Bootstrap Os -Netapp H300s Firmware -Netapp H500s Firmware -Netapp H700s Firmware -

The BN_mod_sqrt() function, which computes a modular square root, contains a bug that can cause it to loop forever for non-prime moduli. Internally this function is used when parsing certificates that contain elliptic curve public keys in compressed form or explicit elliptic curv...

Openssl Openssl Debian Debian Linux 9.0 Debian Debian Linux 10.0 Debian Debian Linux 11.0 Netapp Cloud Volumes Ontap Mediator -Netapp Clustered Data Ontap -Netapp Clustered Data Ontap Antivirus Connector -Netapp Santricity Smi-s Provider -Netapp Storagegrid -Netapp A250 Firmware -Netapp 500f Firmware -Fedoraproject Fedora 34

5 Github repositories

An issue exists in the Linux kernel up to and including 5.16.11. The mixed IPID assignment method with the hash-based IPID assignment policy allows an off-path malicious user to inject data into a victim's TCP session or terminate that session.

Linux Linux Kernel Netapp Cloud Volumes Ontap Mediator -Netapp E-series Santricity Os Controller Netapp Solidfire, Enterprise Sds & Hci Storage Node -Netapp Solidfire & Hci Management Node -Netapp H300s Firmware -Netapp H500s Firmware -Netapp H700s Firmware -Netapp H300e Firmware -Netapp H500e Firmware -Netapp H700e Firmware -Netapp H410s Firmware -

In Lib/tarfile.py in Python up to and including 3.8.3, an attacker is able to craft a TAR archive leading to an infinite loop when opened by tarfile.open, because _proc_pax lacks header validation.

Python Python Opensuse Leap 15.1 Opensuse Leap 15.2 Debian Debian Linux 9.0 Fedoraproject Fedora 31 Fedoraproject Fedora 32 Canonical Ubuntu Linux 12.04 Canonical Ubuntu Linux 14.04 Canonical Ubuntu Linux 16.04 Canonical Ubuntu Linux 18.04 Canonical Ubuntu Linux 20.04 Netapp Active Iq Unified Manager

2 Github repositories

The Linux kernel up to and including 5.7.11 allows remote malicious users to make observations that help to obtain sensitive information about the internal state of the network RNG, aka CID-f227e3ec3b5c. This is related to drivers/char/random.c and kernel/time/timer.c.

Linux Linux Kernel Opensuse Leap 15.1 Opensuse Leap 15.2 Fedoraproject Fedora 31 Fedoraproject Fedora 32 Debian Debian Linux 9.0 Canonical Ubuntu Linux 14.04 Canonical Ubuntu Linux 16.04 Canonical Ubuntu Linux 18.04 Canonical Ubuntu Linux 20.04 Netapp Active Iq Unified Manager Netapp Cloud Volumes Ontap Mediator -

The X509_V_FLAG_X509_STRICT flag enables additional security checks of the certificates present in a certificate chain. It is not set by default. Starting from OpenSSL version 1.1.1h a check to disallow certificates in the chain that have explicitly encoded elliptic curve paramet...

Openssl Openssl Freebsd Freebsd 12.2 Netapp Santricity Smi-s Provider Firmware -Netapp Storagegrid Firmware -Windriver Linux -Windriver Linux 17.0 Windriver Linux 18.0 Windriver Linux 19.0 Netapp Cloud Volumes Ontap Mediator -Netapp Oncommand Workflow Automation -Netapp Ontap Select Deploy Administration Utility -Netapp Storagegrid -

1 Github repository1 Article

An OpenSSL TLS server may crash if sent a maliciously crafted renegotiation ClientHello message from a client. If a TLSv1.2 renegotiation ClientHello omits the signature_algorithms extension (where it was present in the initial ClientHello), but includes a signature_algorithms_ce...

Openssl Openssl Debian Debian Linux 9.0 Debian Debian Linux 10.0 Freebsd Freebsd 12.2 Netapp Active Iq Unified Manager -Netapp Cloud Volumes Ontap Mediator -Netapp E-series Performance Analyzer -Netapp Oncommand Insight -Netapp Oncommand Workflow Automation -Netapp Ontap Select Deploy Administration Utility -Netapp Santricity Smi-s Provider -Netapp Snapcenter -

4 Github repositories1 Article

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook