Ontap Select Deploy Administration Utility (Netapp) - vulnerabilities (CVEs)

180 CVEs, 0 in the last 30 days, 14 known versions, newest CVE from 2025-02-11. Vendor: Netapp.

CVEs of Ontap Select Deploy Administration Utility

CVE-2025-1181 - CVSS 5 (medium), 2025-02-11: A vulnerability classified as critical was found in GNU Binutils 2.43. This vulnerability affects the function _bfd_elf_gc_mark_rsec of the file bfd/elflink.c…
CVE-2025-1178 - CVSS 6.3 (medium), 2025-02-11: A vulnerability was found in GNU Binutils 2.43. It has been declared as problematic. Affected by this vulnerability is the function bfd_putl64 of the file…
CVE-2025-0167 - CVSS 3.4 (low), 2025-02-05: When asked to use a `.netrc` file for credentials **and** to follow HTTP redirects, curl could leak the password used for the first host to the followed-to…
CVE-2024-11053 - CVSS 3.4 (low), 2024-12-11: When asked to both use a `.netrc` file for credentials and to follow HTTP redirects, curl could leak the password used for the first host to the followed-to…
CVE-2024-8096 - CVSS 6.5 (medium), 2024-09-11: When curl is told to use the Certificate Status Request TLS extension, often referred to as OCSP stapling, to verify that the server certificate is valid, it…
CVE-2024-6119 - CVSS 7.5 (high), 2024-09-03: Issue summary: Applications performing certificate name checks (e.g., TLS clients checking server certificates) may attempt to read an invalid memory address…
CVE-2024-39689 - CVSS 7.5 (high), 2024-07-05: Certifi is a curated collection of Root Certificates for validating the trustworthiness of SSL certificates while verifying the identity of TLS hosts. Certifi…
CVE-2024-6387 - CVSS 8.1 (high), 2024-07-01: A security regression (CVE-2006-5051) was discovered in OpenSSH's server (sshd). There is a race condition which can lead sshd to handle some signals in an…
CVE-2024-21990 - CVSS 9.8 (critical), 2024-04-17: ONTAP Select Deploy administration utility versions 9.12.1.x, 9.13.1.x and 9.14.1.x contain hard-coded credentials that could allow an attacker to view Deploy…
CVE-2024-21989 - CVSS 8.8 (high), 2024-04-17: ONTAP Select Deploy administration utility versions 9.12.1.x, 9.13.1.x and 9.14.1.x are susceptible to a vulnerability which when successfully exploited could…
CVE-2024-2961 - CVSS 7.3 (high), 2024-04-17: The iconv() function in the GNU C Library versions 2.39 and older may overflow the output buffer passed to it by up to 4 bytes when converting strings to the…
CVE-2024-2398 - CVSS 8.6 (high), 2024-03-27: When an application tells libcurl it wants to allow HTTP/2 server push, and the amount of received headers for the push surpasses the maximum allowed limit…
CVE-2024-2379 - CVSS 6.3 (medium), 2024-03-27: libcurl skips the certificate verification for a QUIC connection under certain conditions, when built to use wolfSSL. If told to use an unknown/bad cipher or…
CVE-2024-2004 - CVSS 3.5 (low), 2024-03-27: When a protocol selection parameter option disables all protocols without adding any then the default set of protocols would remain in the allowed set due to…
CVE-2024-26641 - CVSS 8.6 (high), 2024-03-18: In the Linux kernel, the following vulnerability has been resolved: ip6_tunnel: make sure to pull inner header in __ip6_tnl_rcv() syzbot found __ip6_tnl_rcv()…
CVE-2024-26633 - CVSS 5.5 (medium), 2024-03-18: In the Linux kernel, the following vulnerability has been resolved: ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim() syzbot pointed…
CVE-2024-26461 - CVSS 7.5 (high), 2024-02-29: Kerberos 5 (aka krb5) 1.21.2 contains a memory leak vulnerability in /krb5/src/lib/gssapi/krb5/k5sealv3.c.
CVE-2024-26458 - CVSS 5.3 (medium), 2024-02-29: Kerberos 5 (aka krb5) 1.21.2 contains a memory leak in /krb5/src/lib/rpc/pmap_rmt.c.
CVE-2024-26462 - CVSS 5.5 (medium), 2024-02-29: Kerberos 5 (aka krb5) 1.21.2 contains a memory leak vulnerability in /krb5/src/kdc/ndr.c.
CVE-2023-4911 - CVSS 7.8 (high), 2023-10-03: A buffer overflow was discovered in the GNU C Library's dynamic loader ld.so while processing the GLIBC_TUNABLES environment variable. This issue could allow…
CVE-2023-20900 - CVSS 7.5 (high), 2023-08-31: A malicious actor that has been granted Guest Operation Privileges…
CVE-2022-48065 - CVSS 5.5 (medium), 2023-08-22: GNU Binutils before 2.40 was discovered to contain a memory leak vulnerability var the function find_abstract_instance in dwarf2.c.
CVE-2022-48064 - CVSS 5.5 (medium), 2023-08-22: GNU Binutils before 2.40 was discovered to contain an excessive memory consumption vulnerability via the function bfd_dwarf2_find_nearest_line_with_alt at…
CVE-2023-37920 - CVSS 9.8 (critical), 2023-07-25: Certifi is a curated collection of Root Certificates for validating the trustworthiness of SSL certificates while verifying the identity of TLS hosts. Certifi…
CVE-2023-38403 - CVSS 7.5 (high), 2023-07-17: iperf3 before 3.14 allows peers to cause an integer overflow and heap corruption via a crafted length field.
CVE-2023-2975 - CVSS 5.3 (medium), 2023-07-14: Issue summary: The AES-SIV cipher implementation contains a bug that causes it to ignore empty associated data entries which are unauthenticated as a…
CVE-2023-27043 - CVSS 5.3 (medium), 2023-04-19: The email module of Python through 3.11.3 incorrectly parses e-mail addresses that contain a special character. The wrong portion of an RFC2822 header is…
CVE-2023-24329 - CVSS 7.5 (high), 2023-02-17: An issue in the urllib.parse component of Python before 3.11.4 allows attackers to bypass blocklisting methods by supplying a URL that starts with blank…
CVE-2023-0361 - CVSS 7.4 (high), 2023-02-15: A timing side-channel in the handling of RSA ClientKeyExchange messages was discovered in GnuTLS. This side-channel can be sufficient to recover the key…
CVE-2023-25136 - CVSS 6.5 (medium), 2023-02-03: OpenSSH server (sshd) 9.1 introduced a double-free vulnerability during options.kex_algorithms handling. This is fixed in OpenSSH 9.2. The double free can be…
CVE-2022-4292 - CVSS 7.8 (high), 2022-12-05: Use After Free in GitHub repository vim/vim prior to 9.0.0882.
CVE-2022-40303 - CVSS 7.5 (high), 2022-11-23: An issue was discovered in libxml2 before 2.10.3. When parsing a multi-gigabyte XML document with the XML_PARSE_HUGE parser option enabled, several integer…
CVE-2022-45061 - CVSS 7.5 (high), 2022-11-09: An issue was discovered in Python before 3.11.1. An unnecessary quadratic algorithm exists in one path when processing some inputs to the IDNA (RFC 3490)…
CVE-2020-35527 - CVSS 9.8 (critical), 2022-09-01: In SQLite 3.31.1, there is an out of bounds access problem through ALTER TABLE for views that have a nested FROM clause.
CVE-2022-1355 - CVSS 6.1 (medium), 2022-08-31: A stack buffer overflow flaw was found in Libtiffs' tiffcp.c in main() function. This flaw allows an attacker to pass a crafted TIFF file to the tiffcp tool,…
CVE-2022-1354 - CVSS 5.5 (medium), 2022-08-31: A heap buffer overflow flaw was found in Libtiffs' tiffinfo.c in TIFFReadRawDataStriped() function. This flaw allows an attacker to pass a crafted TIFF file…
CVE-2022-39046 - CVSS 7.5 (high), 2022-08-31: An issue was discovered in the GNU C Library (glibc) 2.36. When the syslog function is passed a crafted input string larger than 1024 bytes, it reads…
CVE-2022-2953 - CVSS 5.5 (medium), 2022-08-29: LibTIFF 4.4.0 has an out-of-bounds read in extractImageSection in tools/tiffcrop.c:6905, allowing attackers to cause a denial-of-service via a crafted tiff…
CVE-2021-4214 - CVSS 5.5 (medium), 2022-08-24: A heap overflow flaw was found in libpngs' pngimage.c program. This flaw allows an attacker with local network access to pass a specially crafted PNG file to…
CVE-2021-4189 - CVSS 5.3 (medium), 2022-08-24: A flaw was found in Python, specifically in the FTP (File Transfer Protocol) client library in PASV (passive) mode. The issue is how the FTP client trusts the…
CVE-2021-3999 - CVSS 7.8 (high), 2022-08-24: A flaw was found in glibc. An off-by-one buffer overflow and underflow in getcwd() may lead to memory corruption when the size of the buffer is exactly 1. A…
CVE-2021-3998 - CVSS 7.5 (high), 2022-08-24: A flaw was found in glibc. The realpath() function can mistakenly return an unexpected value, potentially leading to information leakage and disclosure of…
CVE-2021-3975 - CVSS 6.5 (medium), 2022-08-23: A use-after-free flaw was found in libvirt. The qemuMonitorUnregister() function in qemuProcessHandleMonitorEOF is called using multiple threads without being…
CVE-2022-31676 - CVSS 7.8 (high), 2022-08-23: VMware Tools (12.0.0, 11.x.y and 10.x.y) contains a local privilege escalation vulnerability. A malicious actor with local non-administrative access to the…
CVE-2022-37434 - CVSS 9.8 (critical), 2022-08-05: zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field. NOTE: only applications…
CVE-2022-35737 - CVSS 7.5 (high), 2022-08-03: SQLite 1.0.12 through 3.39.x before 3.39.2 sometimes allows an array-bounds overflow if billions of bytes are used in a string argument to a C API.
CVE-2022-34526 - CVSS 6.5 (medium), 2022-07-29: A stack overflow was discovered in the _TIFFVGetField function of Tiffsplit v4.4.0. This vulnerability allows attackers to cause a Denial of Service (DoS) via…
CVE-2021-3696 - CVSS 4.5 (medium), 2022-07-06: A heap out-of-bounds write may heppen during the handling of Huffman tables in the PNG reader. This may lead to data corruption in the heap space.…
CVE-2021-3695 - CVSS 4.5 (medium), 2022-07-06: A crafted 16-bit grayscale PNG image may lead to a out-of-bounds write in the heap area. An attacker may take advantage of that to cause heap data corruption…
CVE-2022-2097 - CVSS 5.3 (medium), 2022-07-05: AES OCB mode for 32-bit x86 platforms using the AES-NI assembly optimised implementation will not encrypt the entirety of the data under some circumstances.…
CVE-2022-34903 - CVSS 6.5 (medium), 2022-07-01: GnuPG through 2.3.6, in unusual situations where an attacker possesses any secret-key information from a victim's keyring and other constraints (e.g., use of…
CVE-2022-2068 - CVSS 9.8 (critical), 2022-06-21: In addition to the c_rehash shell command injection identified in CVE-2022-1292, further circumstances where the c_rehash script does not properly sanitise…
CVE-2022-29244 - CVSS 7.5 (high), 2022-06-13: npm pack ignores root-level .gitignore and .npmignore file exclusion directives when run in a workspace or with a workspace flag (ie. `--workspaces`,…
CVE-2022-1664 - CVSS 9.8 (critical), 2022-05-26: Dpkg::Source::Archive in dpkg, the Debian package management system, before version 1.21.8, 1.20.10, 1.19.8, 1.18.26 is prone to a directory traversal…
CVE-2022-1586 - CVSS 9.1 (critical), 2022-05-16: An out-of-bounds read vulnerability was discovered in the PCRE2 library in the compile_xclass_matchingpath() function of the pcre2_jit_compile.c file. This…
CVE-2022-1587 - CVSS 9.1 (critical), 2022-05-16: An out-of-bounds read vulnerability was discovered in the PCRE2 library in the get_recurse_data_length() function of the pcre2_jit_compile.c file. This issue…
CVE-2022-1623 - CVSS 5.5 (medium), 2022-05-11: LibTIFF master branch has an out-of-bounds read in LZWDecode in libtiff/tif_lzw.c:624, allowing attackers to cause a denial-of-service via a crafted tiff…
CVE-2022-1622 - CVSS 5.5 (medium), 2022-05-11: LibTIFF master branch has an out-of-bounds read in LZWDecode in libtiff/tif_lzw.c:619, allowing attackers to cause a denial-of-service via a crafted tiff…
CVE-2022-29824 - CVSS 6.5 (medium), 2022-05-03: In libxml2 before 2.9.14, several buffer handling functions in buf.c (xmlBuf*) and tree.c (xmlBuffer*) don't check for integer overflows. This can result in…
CVE-2022-25844 - CVSS 7.5 (high), 2022-05-01: The package angular after 1.7.0 are vulnerable to Regular Expression Denial of Service (ReDoS) by providing a custom locale rule that makes it possible to…
CVE-2015-20107 - CVSS 7.8 (high), 2022-04-13: In Python (aka CPython) up to 3.10.8, the mailcap module does not add escape characters into commands discovered in the system mailcap file. This may allow…
CVE-2022-1210 - CVSS 6.5 (medium), 2022-04-03: A vulnerability classified as problematic was found in LibTIFF 4.3.0. Affected by this vulnerability is the TIFF File Handler of tiff2ps. Opening a malicious…
CVE-2022-0897 - CVSS 4.3 (medium), 2022-03-25: A flaw was found in the libvirt nwfilter driver. The virNWFilterObjListNumOfNWFilters method failed to acquire the driver->nwfilters mutex before iterating…
CVE-2021-4147 - CVSS 6.5 (medium), 2022-03-25: A flaw was found in the libvirt libxl driver. A malicious guest could continuously reboot itself and cause libvirtd on the host to deadlock or crash,…
CVE-2018-25032 - CVSS 7.5 (high), 2022-03-25: zlib before 1.2.12 allows memory corruption when deflating (i.e., when compressing) if the input has many distant matches.
CVE-2022-0924 - CVSS 5.5 (medium), 2022-03-11: Out-of-bounds Read error in tiffcp in libtiff 4.3.0 allows attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from…
CVE-2022-0909 - CVSS 5.5 (medium), 2022-03-11: Divide By Zero error in tiffcrop in libtiff 4.3.0 allows attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from…
CVE-2022-0908 - CVSS 7.7 (high), 2022-03-11: Null source pointer passed as an argument to memcpy() function within TIFFFetchNormalTag () in tif_dirread.c in libtiff versions up to 4.3.0 could lead to…
CVE-2022-0907 - CVSS 5.5 (medium), 2022-03-11: Unchecked Return Value to NULL Pointer Dereference in tiffcrop in libtiff 4.3.0 allows attackers to cause a denial-of-service via a crafted tiff file. For…
CVE-2022-26488 - CVSS 7 (high), 2022-03-10: In Python before 3.10.3 on Windows, local users can gain privileges because the search path is inadequately secured. The installer may allow a local attacker…
CVE-2021-3733 - CVSS 6.5 (medium), 2022-03-10: There's a flaw in urllib's AbstractBasicAuthHandler class. An attacker who controls a malicious HTTP server that an HTTP client (such as web browser) connects…
CVE-2021-3737 - CVSS 7.5 (high), 2022-03-04: A flaw was found in python. An improperly handled HTTP response in the HTTP client code of python may allow a remote attacker, who controls the HTTP server,…
CVE-2021-3667 - CVSS 6.5 (medium), 2022-03-02: An improper locking issue was found in the virStoragePoolLookupByTargetPath API of libvirt. It occurs in the storagePoolLookupByTargetPath function where a…
CVE-2021-3631 - CVSS 6.3 (medium), 2022-03-02: A flaw was found in libvirt while it generates SELinux MCS category pairs for VMs' dynamic labels. This flaw allows one exploited guest to access files…
CVE-2022-23308 - CVSS 7.5 (high), 2022-02-26: valid.c in libxml2 before 2.9.13 has a use-after-free of ID and IDREF attributes.
CVE-2022-24407 - CVSS 8.8 (high), 2022-02-24: In Cyrus SASL 2.1.17 through 2.1.27 before 2.1.28, plugins/sql.c does not escape the password for a SQL INSERT or UPDATE statement.
CVE-2022-0563 - CVSS 5.5 (medium), 2022-02-21: A flaw was found in the util-linux chfn and chsh utilities when compiled with Readline support. The Readline library uses an "INPUTRC" environment variable to…
CVE-2021-45346 - CVSS 4.3 (medium), 2022-02-14: A Memory Leak vulnerability exists in SQLite Project SQLite3 3.35.1 and 3.37.0 via maliciously crafted SQL Queries (made via editing the Database File), it is…
CVE-2022-0562 - CVSS 5.5 (medium), 2022-02-11: Null source pointer passed as an argument to memcpy() function within TIFFReadDirectory() in tif_dirread.c in libtiff versions from 4.0 to 4.3.0 could lead to…
CVE-2022-0561 - CVSS 5.5 (medium), 2022-02-11: Null source pointer passed as an argument to memcpy() function within TIFFFetchStripThing() in tif_dirread.c in libtiff versions from 3.9.0 to 4.3.0 could…
CVE-2022-0391 - CVSS 7.5 (high), 2022-02-09: A flaw was found in Python, specifically within the urllib.parse module. This module helps break Uniform Resource Locator (URL) strings into components. The…
CVE-2022-22844 - CVSS 5.5 (medium), 2022-01-10: LibTIFF 4.3.0 has an out-of-bounds read in _TIFFmemcpy in tif_unix.c in certain situations involving a custom tag and 0x0200 as the second word of the DE field.
CVE-2021-45078 - CVSS 7.8 (high), 2021-12-15: stab_xcoff_builtin_type in stabs.c in GNU Binutils through 2.37 allows attackers to cause a denial of service (heap-based buffer overflow) or possibly have…
CVE-2021-4044 - CVSS 7.5 (high), 2021-12-14: Internally libssl in OpenSSL calls X509_verify_cert() on the client side to verify a certificate supplied by a server. That function may return a negative…
CVE-2021-3671 - CVSS 6.5 (medium), 2021-10-12: A null pointer de-reference was found in the way samba kerberos server handled missing sname in TGS-REQ (Ticket Granting Server - Request). An authenticated…
CVE-2021-41617 - CVSS 7 (high), 2021-09-26: sshd in OpenSSH 6.2 through 8.x before 8.8, when certain non-default configurations are used, allows privilege escalation because supplemental groups are not…
CVE-2016-20012 - CVSS 5.3 (medium), 2021-09-15: OpenSSH through 8.7 allows remote attackers, who have a suspicion that a certain combination of username and public key is known to an SSH server, to test…
CVE-2021-3796 - CVSS 8.2 (high), 2021-09-15: vim is vulnerable to Use After Free
CVE-2021-3778 - CVSS 7.8 (high), 2021-09-15: vim is vulnerable to Heap-based Buffer Overflow
CVE-2020-19144 - CVSS 6.5 (medium), 2021-09-09: Buffer Overflow in LibTiff v4.0.10 allows attackers to cause a denial of service via the 'in _TIFFmemcpy' funtion in the component 'tif_unix.c'.
CVE-2021-3770 - CVSS 8.6 (high), 2021-09-06: vim is vulnerable to Heap-based Buffer Overflow
CVE-2021-3580 - CVSS 7.5 (high), 2021-08-05: A flaw was found in the way nettle's RSA decryption functions handled specially crafted ciphertext. An attacker could use this flaw to provide a manipulated…
CVE-2021-37600 - CVSS 5.5 (medium), 2021-07-30: An integer overflow in util-linux through 2.37.1 can potentially cause a buffer overflow if an attacker were able to use system resources in a way that leads…
CVE-2021-35942 - CVSS 9.1 (critical), 2021-07-22: The wordexp function in the GNU C Library (aka glibc) through 2.33 may crash or read arbitrary memory in parse_param (in posix/wordexp.c) when called with an…
CVE-2021-3541 - CVSS 6.5 (medium), 2021-07-09: A flaw was found in libxml2. Exponential entity expansion attack its possible bypassing all existing protection mechanisms and leading to denial of service.
CVE-2021-3530 - CVSS 7.5 (high), 2021-06-02: A flaw was discovered in GNU libiberty within demangle_path() in rust-demangle.c, as distributed in GNU Binutils version 2.36. A crafted symbol can cause…
CVE-2021-3520 - CVSS 9.8 (critical), 2021-06-02: There's a flaw in lz4. An attacker who submits a crafted file to an application linked with lz4 may be able to trigger an integer overflow, leading to calling…
CVE-2021-3516 - CVSS 7.8 (high), 2021-06-01: There's a flaw in libxml2's xmllint in versions before 2.9.11. An attacker who is able to submit a crafted file to be processed by xmllint could trigger a…
CVE-2021-23017 - CVSS 7.7 (high), 2021-06-01: A security issue in nginx resolver was identified, which might allow an attacker who is able to forge UDP packets from the DNS server to cause 1-byte memory…
CVE-2020-14301 - CVSS 6.5 (medium), 2021-05-27: An information disclosure vulnerability was found in libvirt in versions before 6.3.0. HTTP cookies used to access network-based disks were saved in the XML…