PT-2017-12546 · Netapp · Netapp Clustered Data Ontap

Published 2017-08-18 · Updated 2017-08-26 · CVE-2017-12420

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions NetApp Clustered Data ONTAP versions prior to 8.3.2P8 NetApp Clustered Data ONTAP versions prior to 9.0P2

Description A heap-based buffer overflow issue exists in the SMB implementation, allowing remote authenticated users to potentially cause a denial of service or execute arbitrary code.

Recommendations For versions prior to 8.3.2P8, update to version 8.3.2P8 or later. For versions prior to 9.0P2, update to version 9.0P2 or later.

Fix

DoS

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2017-12420

Affected Products

Netapp Clustered Data Ontap

References · 4

• https://kb.netapp.com/support/s/article/NTAP-20170814-0001 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-12420 · Security Note
• https://osv.dev/vulnerability/CVE-2017-12420 · Vendor Advisory
• http://securityfocus.com/bid/100429 · Note