PT-2017-7983 · Netapp · Netapp Data Ontap

Published 2017-09-01 · Updated 2017-09-06 · CVE-2016-1895

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions NetApp Data ONTAP versions prior to 8.2.5 NetApp Data ONTAP versions 8.3.x prior to 8.3.2P12

Description The issue allows remote authenticated users to cause a denial of service. This is related to unsafe user input string handling.

Recommendations For versions prior to 8.2.5, update to version 8.2.5 or later. For versions 8.3.x prior to 8.3.2P12, update to version 8.3.2P12 or later.

Fix

DoS

Use of Externally-Controlled Format String

Weakness Enumeration

CWE-134

Related Identifiers

CVE-2016-1895

Affected Products

Netapp Data Ontap

References · 3

• https://kb.netapp.com/support/s/article/NTAP-20170831-0003 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2016-1895 · Security Note
• https://osv.dev/vulnerability/CVE-2016-1895 · Vendor Advisory