data ontap vulnerabilities and fixes

Recent CVEs affecting data ontap, with upgrade or downgrade steps. 31 tracked.

Also searched as: dataontap.

data ontap has 31 tracked vulnerabilities, 4 critical. A fixed release or vendor patch exists for 21. Most recent: 2021-03-04. Highest priority: CVE-2015-7853 (score 63/100).

• CVE-2021-26989 MEDIUM 6.5 MITIGATE Clustered Data ONTAP versions prior to 9.3P21, 9.5P16, 9.6P12, 9.7P9 and 9.8 are susceptible to a vulnerabilit
• CVE-2021-26988 LOW 3.5 MITIGATE Clustered Data ONTAP versions prior to 9.3P21, 9.5P16, 9.6P12, 9.7P8 and 9.8 are susceptible to a vulnerabilit
• CVE-2020-13817 HIGH 7.4 UPGRADE MITIGATE ntpd in ntp before 4.2.8p14 and 4.3.x before 4.3.100 allows remote attackers to cause a denial of service (dae
• CVE-2020-11868 HIGH 7.5 UPGRADE MITIGATE ntpd in ntp before 4.2.8p14 and 4.3.x before 4.3.100 allows an off-path attacker to block unauthenticated sync
• CVE-2019-8936 HIGH 7.5 UPGRADE MITIGATE NTP through 4.2.8p12 has a NULL Pointer Dereference.
• CVE-2019-5502 CRITICAL 9.1 UPGRADE SMB in Data ONTAP operating in 7-Mode versions prior to 8.2.5P3 has weak cryptography which when exploited cou
• CVE-2019-5501 HIGH 7.5 UPGRADE Data ONTAP operating in 7-Mode versions prior to 8.2.5P3 may disclose sensitive LDAP account information to un
• CVE-2019-5493 HIGH 7.5 UPGRADE Data ONTAP operating in 7-Mode versions prior to 8.2.5P3 are susceptible to a vulnerability which discloses in
• CVE-2018-5496 MEDIUM 4.4 UPGRADE Data ONTAP operating in 7-Mode versions prior to 8.2.5P2 are susceptible to a vulnerability which discloses se
• CVE-2018-18607 MEDIUM 5.5 DOWNGRADE MITIGATE An issue was discovered in elf_link_input_bfd in elflink.c in the Binary File Descriptor (BFD) library (aka li
• CVE-2018-18606 MEDIUM 5.5 DOWNGRADE MITIGATE An issue was discovered in the merge_strings function in merge.c in the Binary File Descriptor (BFD) library (
• CVE-2018-18605 MEDIUM 5.5 DOWNGRADE MITIGATE A heap-based buffer over-read issue was discovered in the function sec_merge_hash_lookup in merge.c in the Bin
• CVE-2018-18066 HIGH 7.5 UPGRADE MITIGATE snmp_oid_compare in snmplib/snmp_api.c in Net-SNMP before 5.8 has a NULL Pointer Exception bug that can be use
• CVE-2017-12859 MEDIUM 5.9 UPGRADE NetApp Data ONTAP before 8.2.5, when operating in 7-Mode in NFS environments, allows remote attackers to cause
• CVE-2016-6495 MEDIUM 5.9 UPGRADE NetApp Data ONTAP before 8.2.4P5, when operating in 7-Mode, allows remote attackers to obtain information abou
• CVE-2016-5374 HIGH 8.8 DOWNGRADE NetApp Data ONTAP 9.0 and 9.1 before 9.1P1 allows remote authenticated users that own SMB-hosted data to bypas
• CVE-2016-3400 HIGH 7.5 DOWNGRADE NetApp Data ONTAP 8.1 and 8.2, when operating in 7-Mode, allows man-in-the-middle attackers to obtain sensitiv
• CVE-2016-2518 MEDIUM 5.3 UPGRADE MITIGATE The MATCH_ASSOC function in NTP before version 4.2.8p9 and 4.3.x before 4.3.92 allows remote attackers to caus
• CVE-2016-1895 MEDIUM 6.5 UPGRADE NetApp Data ONTAP before 8.2.5 and 8.3.x before 8.3.2P12 allow remote authenticated users to cause a denial of
• CVE-2016-10708 HIGH 7.5 UPGRADE MITIGATE sshd in OpenSSH before 7.4 allows remote attackers to cause a denial of service (NULL pointer dereference and
• CVE-2015-8322 HIGH 8.8 MITIGATE NetApp OnCommand System Manager 8.3.x before 8.3.2 allows remote authenticated users to execute arbitrary code
• CVE-2015-7886 LOW 3.7 UPGRADE NetApp Data ONTAP before 8.2.4P1, when 7-Mode and HTTP access are enabled, allows remote attackers to obtain s
• CVE-2015-7854 HIGH 8.8 UPGRADE MITIGATE Buffer overflow in the password management functionality in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77
• CVE-2015-7853 CRITICAL 9.8 UPGRADE MITIGATE The datalen parameter in the refclock driver in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remot
• CVE-2015-7849 HIGH 8.8 UPGRADE MITIGATE Use-after-free vulnerability in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote authen
• CVE-2015-7746 CRITICAL 9.8 UPGRADE NetApp Data ONTAP before 8.2.4, when operating in 7-Mode, allows remote attackers to bypass authentication and
• CVE-2015-7705 CRITICAL 9.8 UPGRADE MITIGATE The rate limiting feature in NTP 4.x before 4.2.8p4 and 4.3.x before 4.3.77 allows remote attackers to have un
• CVE-2015-7704 HIGH 7.5 UPGRADE MITIGATE The ntpd client in NTP 4.x before 4.2.8p4 and 4.3.x before 4.3.77 allows remote attackers to cause a denial of
• CVE-2008-3349 HIGH 10.0 MITIGATE Multiple unspecified vulnerabilities in NetApp Data ONTAP, as used on NetApp and IBM eServer platforms, allow
• CVE-2008-3160 HIGH 10.0 UPGRADE Multiple unspecified vulnerabilities in IBM Data ONTAP 7.1 before 7.1.3, as used by IBM System Storage N serie
• CVE-2004-2539 HIGH 7.8 DOWNGRADE MITIGATE Unknown vulnerability in Network Appliance NetCache 5.2 and Data ONTAP 6.0 allows remote attackers to cause a

FAQ

How do I fix data ontap vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is data ontap being exploited right now?

None of the tracked data ontap CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which data ontap CVE should I patch first?

CVE-2015-7853 currently ranks highest (63/100): The datalen parameter in the refclock driver in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remot.

RSS feed for data ontap · ← Back to latest CVEs