Astra Trident vulnerabilitiesRanked by how likely they are to be used.
Astra Trident is made by Netapp. We track 3 published vulnerabilities listed under that exact name, across 0 versions. None of them is on the list of flaws known to be exploited today. Netapp lists newer releases under their own names, such as Astra Trident Autosupport, so check those pages too.
We keep watching the known-exploited list.
Is Astra Trident listed under other names? Yes.
Netapp also lists Astra Trident under more specific names, such as Astra Trident Autosupport. Flaws listed only under those names are counted on their own pages, not here. If you run one of these, open its page for its own exploited flaws.
Which Astra Trident vulnerabilities are being exploited?
This is the list that matters most: flaws criminals are using now.
None of Astra Trident's published vulnerabilities is on the list of flaws known to be exploited today. We keep watching that list.
Which Astra Trident flaws are most likely to be used?
Ranked by the latest exploit-likelihood forecast: the chance each flaw is used in an attack in the next 30 days. A high severity score on its own doesn't tell you that. Flaws shared by many other makers' products are left out.
- 3.8%CVE-2023-39325High
A malicious HTTP/2 client which rapidly creates requests and immediately resets them can cause excessive server resource consumption.
- 3.5%CVE-2022-28948High
An issue in the Unmarshal function in Go-Yaml v3 causes the program to crash when attempting to deserialize invalid input.
- 3.3%CVE-2022-24921High
regexp.Compile in Go before 1.16.15 and 1.17.x before 1.17.8 allows stack exhaustion via a deeply nested expression.
Running Astra Trident? We'll keep checking.
Looking flaws up one at a time doesn't scale. Tell us what you run once, and we tell you which flaws matter to you, in what order, and keep watching for new ones.
- Tell us what you runPick your software from a list, or let us work it out from your website.
- We match it to every flawOver 400,000 published flaws, checked against your list.
- Ranked by real-world riskA 0 to 100 score, led by evidence criminals are using it.
- Told as soon as we knowAn alert by email, in the app or by webhook to your own tools.
Free plan, no card needed. Nothing to install.
1 new flaw affects software Acme tracks
A malicious HTTP/2 client which rapidly creates requests and immediately resets them can cause excessive server resource consumption. While the total number of requests is bounded by the http2.Server.MaxConcurrentStreams setting, resetting an in-progress request allows the attacker to create a new request while the existing one is still executing. With the fix applied, HTTP/2 servers now bound the number of simultaneously executing handler goroutines to the stream concurrency limit (MaxConcurrentStreams). New requests arriving when at the limit (which can only happen after the client has reset an existing, in-flight request) will be queued until a handler exits. If the request queue grows too large, the server will terminate the connection. This issue is also fixed in golang.org/x/net/http2 for users manually configuring HTTP/2. The default stream concurrency limit is 250 streams (requests) per HTTP/2 connection. This value may be adjusted using the golang.org/x/net/http2 package; see the Server.MaxConcurrentStreams setting and the ConfigureServer function.
- Matched to
- Astra Trident on Acme's software list
- What to do
- Plan in the vendor’s update
Sent to the alert recipients Acme chose. Also in the app and to Acme's webhook.
We track 3 published vulnerabilities listed under the name Astra Trident, across 0 versions.
None of Astra Trident's vulnerabilities is on the list of flaws known to be exploited today.
Netapp also lists Astra Trident under more specific names, such as Astra Trident Autosupport. Flaws listed only under those names are counted on their own pages, not here. Open the release you run to see its own list.
Create a EdgeProtect account and track Astra Trident. We match it against every published flaw, give each one a risk score from 0 to 100 and keep watching, so you hear about new ones as soon as we know, by email, in the app or by webhook.