PT-2023-21062 · Netapp · Ontap

Published 2023-10-12 · Updated 2023-10-18 · CVE-2023-27314

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions ONTAP 9 versions prior to 9.8P19 ONTAP 9 versions prior to 9.9.1P16 ONTAP 9 versions prior to 9.10.1P12 ONTAP 9 versions prior to 9.11.1P8 ONTAP 9 versions prior to 9.12.1P2 ONTAP 9 versions prior to 9.13.1

Description The issue allows a remote unauthenticated attacker to cause a crash of the HTTP service.

Recommendations For versions prior to 9.8P19, update to version 9.8P19 or later. For versions prior to 9.9.1P16, update to version 9.9.1P16 or later. For versions prior to 9.10.1P12, update to version 9.10.1P12 or later. For versions prior to 9.11.1P8, update to version 9.11.1P8 or later. For versions prior to 9.12.1P2, update to version 9.12.1P2 or later. For versions prior to 9.13.1, update to version 9.13.1 or later.

Fix

Resource Exhaustion

Weakness Enumeration

CWE-400

Related Identifiers

CVE-2023-27314

Affected Products

Ontap

References · 6

• https://osv.dev/vulnerability/CVE-2023-27314 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-27314 · Security Note
• https://security.netapp.com/advisory/ntap-20231009-0001 · Vendor Advisory
• https://t.me/cibsecurity/72199 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1712567165235155421 · Twitter Post
• https://twitter.com/CVEnew/status/1712538492423544933 · Twitter Post