PT-2017-7983 · Netapp · Netapp Data Ontap

Publicado 2017-09-01 · Atualizado 2017-09-06 · CVE-2016-1895

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Média

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions NetApp Data ONTAP versions prior to 8.2.5 NetApp Data ONTAP versions 8.3.x prior to 8.3.2P12

Description The issue allows remote authenticated users to cause a denial of service. This is related to unsafe user input string handling.

Recommendations For versions prior to 8.2.5, update to version 8.2.5 or later. For versions 8.3.x prior to 8.3.2P12, update to version 8.3.2P12 or later.

Correção

DoS

Use of Externally-Controlled Format String

Enumeração de Fraquezas

CWE-134

Identificadores relacionados

CVE-2016-1895

Produtos afetados

Netapp Data Ontap

Referências · 3

• https://kb.netapp.com/support/s/article/NTAP-20170831-0003 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2016-1895 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2016-1895 · Aviso do Fabricante