Data Ontap Edge (Netapp) - vulnerabilities (CVEs)

23 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2019-01-16. Vendor: Netapp.

CVEs of Data Ontap Edge

CVE-2018-5740 - CVSS 7.5 (high), 2019-01-16: "deny-answer-aliases" is a little-used feature intended to help recursive server operators protect end users against DNS rebinding attacks, a potential method…
CVE-2017-3136 - CVSS 5.9 (medium), 2019-01-16: A query with a specific set of characteristics could cause a server using DNS64 to encounter an assertion failure and terminate. An attacker could…
CVE-2017-3140 - CVSS 5.9 (medium), 2019-01-16: If named is configured to use Response Policy Zones (RPZ) an error processing some rule types can lead to a condition where BIND will endlessly loop while…
CVE-2018-5736 - CVSS 5.3 (medium), 2019-01-16: An error in zone database reference counting can lead to an assertion failure if a server which is running an affected version of BIND attempts several…
CVE-2017-3135 - CVSS 7.5 (high), 2019-01-16: Under some conditions when using both DNS64 and RPZ to rewrite query responses, query processing can resume in an inconsistent state leading to either an…
CVE-2017-3138 - CVSS 6.5 (medium), 2019-01-16: named contains a feature which allows operators to issue commands to a running server by communicating with the server process over a control channel, using a…
CVE-2018-5734 - CVSS 7.5 (high), 2019-01-16: While handling a particular type of malformed packet BIND erroneously selects a SERVFAIL rcode instead of a FORMERR rcode. If the receiving view has the…
CVE-2016-9778 - CVSS 7.5 (high), 2019-01-16: An error in handling certain queries can cause an assertion failure when a server is using the nxdomain-redirect feature to cover a zone for which it is also…
CVE-2017-3137 - CVSS 7.5 (high), 2019-01-16: Mistaken assumptions about the ordering of records in the answer section of a response containing CNAME or DNAME resource records could lead to a situation in…
CVE-2017-3145 - CVSS 7.5 (high), 2019-01-16: BIND was improperly sequencing cleanup operations on upstream recursion fetch contexts, leading in some cases to a use-after-free error that can trigger an…
CVE-2018-5737 - CVSS 7.5 (high), 2019-01-16: A problem with the implementation of the new serve-stale feature in BIND 9.12 can lead to an assertion failure in rbtdb.c, even when stale-answer-enable is…
CVE-2018-15919 - CVSS 5.3 (medium), 2018-08-28: Remotely observable behaviour in auth-gss2.c in OpenSSH through 7.8 could be used by remote attackers to detect existence of users on a target system when…
CVE-2018-15473 - CVSS 5.9 (medium), 2018-08-17: OpenSSH through 7.7 is prone to a user enumeration vulnerability due to not delaying bailout for an invalid authenticating user until after the packet…
CVE-2018-12015 - CVSS 7.5 (high), 2018-06-07: In Perl through 5.26.2, the Archive::Tar module allows remote attackers to bypass a directory-traversal protection mechanism, and overwrite arbitrary files,…
CVE-2018-11236 - CVSS 9.8 (critical), 2018-05-18: stdlib/canonicalize.c in the GNU C Library (aka glibc or libc6) 2.27 and earlier, when processing very long pathname arguments to the realpath function, could…
CVE-2018-11237 - CVSS 7.8 (high), 2018-05-18: An AVX-512-optimized implementation of the mempcpy function in the GNU C Library (aka glibc or libc6) 2.27 and earlier may write data beyond the target…
CVE-2018-6485 - CVSS 9.8 (critical), 2018-02-01: An integer overflow in the implementation of the posix_memalign in memalign functions in the GNU C Library (aka glibc or libc6) 2.26 and earlier could cause…
CVE-2016-10708 - CVSS 7.5 (high), 2018-01-21: sshd in OpenSSH before 7.4 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via an out-of-sequence NEWKEYS…
CVE-2016-8610 - CVSS 7.5 (high), 2017-11-13: A denial of service flaw was found in OpenSSL 0.9.8, 1.0.1, 1.0.2 through 1.0.2h, and 1.1.0 in the way the TLS/SSL protocol defined processing of ALERT…
CVE-2017-15906 - CVSS 5.3 (medium), 2017-10-26: The process_open function in sftp-server.c in OpenSSH before 7.6 does not properly prevent write operations in readonly mode, which allows attackers to create…
CVE-2016-9131 - CVSS 7.5 (high), 2017-01-12: named in ISC BIND 9.x before 9.9.9-P5, 9.10.x before 9.10.4-P5, and 9.11.x before 9.11.0-P2 allows remote attackers to cause a denial of service (assertion…
CVE-2016-8864 - CVSS 7.5 (high), 2016-11-02: named in ISC BIND 9.x before 9.9.9-P4, 9.10.x before 9.10.4-P4, and 9.11.x before 9.11.0-P1 allows remote attackers to cause a denial of service (assertion…
CVE-2015-8960 - CVSS 8.1 (high), 2016-09-21: The TLS protocol 1.2 and earlier supports the rsa_fixed_dh, dss_fixed_dh, rsa_fixed_ecdh, and ecdsa_fixed_ecdh values for ClientCertificateType but does not…