Vulmon Recent Vulnerabilities Product List Research Posts Trends Blog About Contact

netapp santricity smi-s provider - vulnerabilities and exploits

(subscribe to this query)
5.3
CVSSv3

CVE-2022-1343

The function `OCSP_basic_verify` verifies the signer certificate on an OCSP response. In the case where the (non-default) flag OCSP_NOCHECKS is used then the response will be positive (meaning a successful verification) even in the case where the response signing certificate fail...
Openssl OpensslNetapp Active Iq Unified Manager -Netapp Clustered Data Ontap -Netapp Clustered Data Ontap Antivirus Connector -Netapp Santricity Smi-s Provider -Netapp Smi-s Provider -Netapp Snapmanager -Netapp Solidfire, Enterprise Sds & Hci Storage Node -Netapp Solidfire & Hci Management Node -Netapp A250 Firmware -Netapp A700s Firmware -Netapp Aff 500f Firmware -
5.9
CVSSv3

CVE-2022-1434

The OpenSSL 3.0 implementation of the RC4-MD5 ciphersuite incorrectly uses the AAD data as the MAC key. This makes the MAC key trivially predictable. An attacker could exploit this issue by performing a man-in-the-middle attack to modify data being sent from one endpoint to an Op...
Openssl OpensslNetapp Active Iq Unified Manager -Netapp Clustered Data Ontap -Netapp Clustered Data Ontap Antivirus Connector -Netapp Santricity Smi-s Provider -Netapp Smi-s Provider -Netapp Snapmanager -Netapp Solidfire, Enterprise Sds & Hci Storage Node -Netapp Solidfire & Hci Management Node -Netapp A700s Firmware -Netapp H300s Firmware -Netapp H500s Firmware -
7.5
CVSSv3

CVE-2022-1473

The OPENSSL_LH_flush() function, which empties a hash table, contains a bug that breaks reuse of the memory occuppied by the removed hash table entries. This function is used when decoding certificates or keys. If a long lived process periodically decodes certificates or keys its...
Openssl OpensslNetapp Active Iq Unified Manager -Netapp Clustered Data Ontap -Netapp Clustered Data Ontap Antivirus Connector -Netapp Santricity Smi-s Provider -Netapp Smi-s Provider -Netapp Snapmanager -Netapp Solidfire, Enterprise Sds & Hci Storage Node -Netapp Solidfire & Hci Management Node -Netapp A700s Firmware -Netapp H300s Firmware -Netapp H500s Firmware -
9.8
CVSSv3

CVE-2022-2068

In addition to the c_rehash shell command injection identified in CVE-2022-1292, further circumstances where the c_rehash script does not properly sanitise shell metacharacters to prevent command injection were found by code review. When the CVE-2022-1292 was fixed it was not dis...
Openssl OpensslDebian Debian Linux 10.0Debian Debian Linux 11.0Fedoraproject Fedora 35Fedoraproject Fedora 36Siemens Sinec InsSiemens Sinec Ins 1.0Netapp Element Software -Netapp Hci Management Node -Netapp Ontap Antivirus Connector -Netapp Ontap Select Deploy Administration Utility -Netapp Santricity Smi-s Provider -
7.5
CVSSv3

CVE-2022-0778

The BN_mod_sqrt() function, which computes a modular square root, contains a bug that can cause it to loop forever for non-prime moduli. Internally this function is used when parsing certificates that contain elliptic curve public keys in compressed form or explicit elliptic curv...
Openssl OpensslDebian Debian Linux 9.0Debian Debian Linux 10.0Debian Debian Linux 11.0Netapp Cloud Volumes Ontap Mediator -Netapp Clustered Data Ontap -Netapp Clustered Data Ontap Antivirus Connector -Netapp Santricity Smi-s Provider -Netapp Storagegrid -Netapp A250 Firmware -Netapp 500f Firmware -Fedoraproject Fedora 34
9.8
CVSSv3

CVE-2022-1292

The c_rehash script does not properly sanitise shell metacharacters to prevent command injection. This script is distributed by some operating systems in a manner where it is automatically executed. On such operating systems, an attacker could execute arbitrary commands with the ...
Openssl OpensslDebian Debian Linux 9.0Debian Debian Linux 10.0Debian Debian Linux 11.0Netapp Active Iq Unified Manager -Netapp Clustered Data Ontap -Netapp Clustered Data Ontap Antivirus Connector -Netapp Oncommand Insight -Netapp Oncommand Workflow Automation -Netapp Santricity Smi-s Provider -Netapp Smi-s Provider -Netapp Snapcenter -
5.9
CVSSv3

CVE-2018-0735

The OpenSSL ECDSA signature algorithm has been shown to be vulnerable to a timing side channel attack. An attacker could use variations in the signing algorithm to recover the private key. Fixed in OpenSSL 1.1.0j (Affected 1.1.0-1.1.0i). Fixed in OpenSSL 1.1.1a (Affected 1.1.1).
Openssl OpensslOpenssl Openssl 1.1.1Canonical Ubuntu Linux 14.04Canonical Ubuntu Linux 16.04Canonical Ubuntu Linux 18.04Canonical Ubuntu Linux 18.10Debian Debian Linux 8.0Debian Debian Linux 9.0Nodejs Node.jsNodejs Node.js 10.13.0Netapp Cn1610 Firmware -Netapp Cloud Backup -
9.8
CVSSv3

CVE-2021-3711

In order to decrypt SM2 encrypted data an application is expected to call the API function EVP_PKEY_decrypt(). Typically an application will call this function twice. The first time, on entry, the "out" parameter can be NULL and, on exit, the "outlen" paramete...
Openssl OpensslDebian Debian Linux 10.0Debian Debian Linux 11.0Netapp Active Iq Unified Manager -Netapp Clustered Data Ontap -Netapp Clustered Data Ontap Antivirus Connector -Netapp E-series Santricity Os ControllerNetapp Hci Management Node -Netapp Manageability Software Development Kit -Netapp Oncommand Insight -Netapp Oncommand Workflow Automation -Netapp Santricity Smi-s Provider -
7.4
CVSSv3

CVE-2021-3712

ASN.1 strings are represented internally within OpenSSL as an ASN1_STRING structure which contains a buffer holding the string data and a field holding the buffer length. This contrasts with normal C strings which are repesented as a buffer for the string data which is terminated...
Openssl OpensslDebian Debian Linux 9.0Debian Debian Linux 10.0Debian Debian Linux 11.0Netapp Clustered Data Ontap -Netapp Clustered Data Ontap Antivirus Connector -Netapp E-series Santricity Os ControllerNetapp Hci Management Node -Netapp Manageability Software Development Kit -Netapp Santricity Smi-s Provider -Netapp Solidfire -Netapp Storage Encryption -
5.9
CVSSv3

CVE-2018-0734

The OpenSSL DSA signature algorithm has been shown to be vulnerable to a timing side channel attack. An attacker could use variations in the signing algorithm to recover the private key. Fixed in OpenSSL 1.1.1a (Affected 1.1.1). Fixed in OpenSSL 1.1.0j (Affected 1.1.0-1.1.0i). Fi...
Openssl OpensslOpenssl Openssl 1.1.1Canonical Ubuntu Linux 14.04Canonical Ubuntu Linux 16.04Canonical Ubuntu Linux 18.04Canonical Ubuntu Linux 18.10Debian Debian Linux 9.0Nodejs Node.jsNodejs Node.js 10.13.0Netapp Cn1610 Firmware -Netapp Cloud Backup -Netapp Oncommand Unified Manager
Preferred Score:
CVSSv3
CVSSv2
CVSSv3
CVSSv4
EPSS
VMScore
Recommendations:
CVE-2024-10401validationCVE-2025-0483CVE-2024-10789deserializationCVE-2025-21333wirelessCVE-2024-13387CVE-2025-21334
Home
/
Search Results
Vulmon Logo Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook