NetApp Clustered Data ONTAP Heap Buffer Overflow Vulnerability

NetApp Clustered Data ONTAP is a set of storage operating system for clustered mode from the American company NetApp. A heap buffer overflow vulnerability exists in the NetApp Clustered Data ONTAP SMB implementation, which allows remote attackers to exploit the vulnerability by submitting a speci...

CVE-2017-12420

Heap-based buffer overflow in the SMB implementation in NetApp Clustered Data ONTAP before 8.3.2P8 and 9.0 before P2 allows remote authenticated users to cause a denial of service or execute arbitrary code...

CVE-2017-12420

Heap-based buffer overflow in the SMB implementation in NetApp Clustered Data ONTAP before 8.3.2P8 and 9.0 before P2 allows remote authenticated users to cause a denial of service or execute arbitrary code...

Heap overflow

Heap-based buffer overflow in the SMB implementation in NetApp Clustered Data ONTAP before 8.3.2P8 and 9.0 before P2 allows remote authenticated users to cause a denial of service or execute arbitrary code...

CVE-2017-12420

NetApp Clustered Data ONTAP is affected by a heap-based buffer overflow in the SMB implementation for versions 8.x prior to 8.3.2P8 and 9.x prior to 9.0P2. The vulnerability allows a remote attacker with authentication to cause a denial of service or execute arbitrary code. ONTAP 9.1 and higher a...

CVE-2017-12420

Heap-based buffer overflow in the SMB implementation in NetApp Clustered Data ONTAP before 8.3.2P8 and 9.0 before P2 allows remote authenticated users to cause a denial of service or execute arbitrary code...

CVE-2017-12859

NetApp Data ONTAP before 8.2.5, when operating in 7-Mode in NFS environments, allows remote attackers to cause a denial of service via unspecified vectors...

Design/Logic Flaw

NetApp Data ONTAP before 8.2.5, when operating in 7-Mode in NFS environments, allows remote attackers to cause a denial of service via unspecified vectors...

CVE-2017-12859

NetApp Data ONTAP before 8.2.5, when operating in 7-Mode in NFS environments, allows remote attackers to cause a denial of service via unspecified vectors...

CVE-2017-12859

NetApp Data ONTAP before 8.2.5, when operating in 7-Mode in NFS environments, allows remote attackers to cause a denial of service via unspecified vectors...

CVE-2017-12859

Affected software: NetApp Data ONTAP 8.x.x (7-Mode in NFS environments) prior to 8.2.5. Vulnerability: remote denial of service via unspecified vectors; configured in 7-Mode NFS, exploitable by a remote attacker without authentication. Impact: denial of service; information on exploitation patter...

CVE-2017-12859

NetApp Data ONTAP before 8.2.5, when operating in 7-Mode in NFS environments, allows remote attackers to cause a denial of service via unspecified vectors...

PT-2017-12546

Name of the Vulnerable Software and Affected Versions NetApp Clustered Data ONTAP versions prior to 8.3.2P8 NetApp Clustered Data ONTAP versions prior to 9.0P2 Description A heap-based buffer overflow issue exists in the SMB implementation, allowing remote authenticated users to potentially cause...

PT-2017-12733

Name of the Vulnerable Software and Affected Versions NetApp Data ONTAP versions prior to 8.2.5 Description The issue allows remote attackers to cause a denial of service via unspecified vectors when NetApp Data ONTAP is operating in 7-Mode in NFS environments. Recommendations For versions prior ...

CVE-2017-12859: Improper Input Validation

NetApp Data ONTAP before 8.2.5, when operating in 7-Mode in NFS environments, allows remote attackers to cause a denial of service via unspecified vectors...

CVE-2017-12420: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in the SMB implementation in NetApp Clustered Data ONTAP before 8.3.2P8 and 9.0 before P2 allows remote authenticated users to cause a denial of service or execute arbitrary code...

NetApp Clustered Data ONTAP Password Disclosure Vulnerability

NetApp Clustered Data ONTAP is a set of storage operating system for clustered mode from American NetApp. The system supports users to enhance the performance of enterprise applications and improve data center flexibility and so on. A security vulnerability exists in NetApp Clustered Data ONTAP. ...

CVE-2017-7947

NetApp Clustered Data ONTAP before 8.3.2P11, 9.0 before P4, and 9.1 before P5 allow attackers to obtain sensitive password information by leveraging logging of passwords entered non-interactively on the command line...

Command injection

NetApp Clustered Data ONTAP before 8.3.2P11, 9.0 before P4, and 9.1 before P5 allow attackers to obtain sensitive password information by leveraging logging of passwords entered non-interactively on the command line...

CVE-2017-7947

NetApp Clustered Data ONTAP before 8.3.2P11, 9.0 before P4, and 9.1 before P5 allow attackers to obtain sensitive password information by leveraging logging of passwords entered non-interactively on the command line...