Clustered Data Ontap Antivirus Connector (Netapp) - vulnerabilities (CVEs)

23 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2022-11-23. Vendor: Netapp.

CVEs of Clustered Data Ontap Antivirus Connector

• CVE-2022-40304 - CVSS 7.8 (high), 2022-11-23: An issue was discovered in libxml2 before 2.10.3. Certain invalid XML entity definitions can corrupt a hash table key, potentially leading to subsequent logic…
• CVE-2022-40303 - CVSS 7.5 (high), 2022-11-23: An issue was discovered in libxml2 before 2.10.3. When parsing a multi-gigabyte XML document with the XML_PARSE_HUGE parser option enabled, several integer…
• CVE-2022-2097 - CVSS 5.3 (medium), 2022-07-05: AES OCB mode for 32-bit x86 platforms using the AES-NI assembly optimised implementation will not encrypt the entirety of the data under some circumstances.…
• CVE-2022-1434 - CVSS 5.9 (medium), 2022-05-03: The OpenSSL 3.0 implementation of the RC4-MD5 ciphersuite incorrectly uses the AAD data as the MAC key. This makes the MAC key trivially predictable. An…
• CVE-2022-1343 - CVSS 5.3 (medium), 2022-05-03: The function `OCSP_basic_verify` verifies the signer certificate on an OCSP response. In the case where the (non-default) flag OCSP_NOCHECKS is used then the…
• CVE-2022-1292 - CVSS 9.8 (critical), 2022-05-03: The c_rehash script does not properly sanitise shell metacharacters to prevent command injection. This script is distributed by some operating systems in a…
• CVE-2022-1473 - CVSS 7.5 (high), 2022-05-03: The OPENSSL_LH_flush() function, which empties a hash table, contains a bug that breaks reuse of the memory occuppied by the removed hash table entries. This…
• CVE-2022-29824 - CVSS 6.5 (medium), 2022-05-03: In libxml2 before 2.9.14, several buffer handling functions in buf.c (xmlBuf*) and tree.c (xmlBuffer*) don't check for integer overflows. This can result in…
• CVE-2022-0778 - CVSS 7.5 (high), 2022-03-15: The BN_mod_sqrt() function, which computes a modular square root, contains a bug that can cause it to loop forever for non-prime moduli. Internally this…
• CVE-2022-23308 - CVSS 7.5 (high), 2022-02-26: valid.c in libxml2 before 2.9.13 has a use-after-free of ID and IDREF attributes.
• CVE-2021-3712 - CVSS 7.4 (high), 2021-08-24: ASN.1 strings are represented internally within OpenSSL as an ASN1_STRING structure which contains a buffer holding the string data and a field holding the…
• CVE-2021-3711 - CVSS 9.8 (critical), 2021-08-24: In order to decrypt SM2 encrypted data an application is expected to call the API function EVP_PKEY_decrypt(). Typically an application will call this…
• CVE-2021-3541 - CVSS 6.5 (medium), 2021-07-09: A flaw was found in libxml2. Exponential entity expansion attack its possible bypassing all existing protection mechanisms and leading to denial of service.
• CVE-2021-3516 - CVSS 7.8 (high), 2021-06-01: There's a flaw in libxml2's xmllint in versions before 2.9.11. An attacker who is able to submit a crafted file to be processed by xmllint could trigger a…
• CVE-2021-3517 - CVSS 8.6 (high), 2021-05-19: There is a flaw in the xml entity encoding functionality of libxml2 in versions before 2.9.11. An attacker who is able to supply a crafted file to be…
• CVE-2021-3518 - CVSS 8.8 (high), 2021-05-18: There's a flaw in libxml2 in versions before 2.9.11. An attacker who is able to submit a crafted file to be processed by an application linked with libxml2…
• CVE-2021-3537 - CVSS 5.9 (medium), 2021-05-14: A vulnerability found in libxml2 in versions before 2.9.11 shows that it did not propagate errors while parsing XML mixed content, causing a NULL dereference.…
• CVE-2020-1971 - CVSS 5.9 (medium), 2020-12-08: The X.509 GeneralName type is a generic type for representing different types of names. One of those name types is known as EDIPartyName. OpenSSL provides a…
• CVE-2020-24977 - CVSS 6.5 (medium), 2020-09-04: GNOME project libxml2 v2.9.10 has a global buffer over-read vulnerability in xmlEncodeEntitiesInternal at libxml2/entities.c. The issue has been fixed in…
• CVE-2019-19956 - CVSS 7.5 (high), 2019-12-24: xmlParseBalancedChunkMemoryRecover in parser.c in libxml2 before 2.9.10 has a memory leak related to newDoc->oldNs.
• CVE-2019-1559 - CVSS 5.9 (medium), 2019-02-27: If an application encounters a fatal protocol error and then calls SSL_shutdown() twice (once to send a close_notify, and once to receive one) then OpenSSL…
• CVE-2016-8610 - CVSS 7.5 (high), 2017-11-13: A denial of service flaw was found in OpenSSL 0.9.8, 1.0.1, 1.0.2 through 1.0.2h, and 1.1.0 in the way the TLS/SSL protocol defined processing of ALERT…
• CVE-2015-8960 - CVSS 8.1 (high), 2016-09-21: The TLS protocol 1.2 and earlier supports the rsa_fixed_dh, dss_fixed_dh, rsa_fixed_ecdh, and ecdsa_fixed_ecdh values for ClientCertificateType but does not…