[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fU5QlKSwTPTpEnmHuFA5GkkjFqWOkhZekqUlz_0j4eMk":3,"g5a-family:netapp\u002Fontap_select_deploy_administration_utility":161,"g5a-ex:netapp\u002Fontap_select_deploy_administration_utility@*":162},{"success":4,"data":5},true,{"product":6,"versions":40,"topVulnerabilitiesByEpss":52,"kevVulnerabilities":114,"seoMetadata":139,"meta":158},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":39},"netapp","ontap_select_deploy_administration_utility",11,172,4,"2025-02-11",[14,19,21,23,25,27,29,31,33,35,37],{"version":15,"cve_count":16,"kev_count":17,"has_kev":18},"2.0",1,0,false,{"version":20,"cve_count":16,"kev_count":17,"has_kev":18},"2.1",{"version":22,"cve_count":17,"kev_count":17,"has_kev":18},"2.11.3",{"version":24,"cve_count":16,"kev_count":17,"has_kev":18},"2.12",{"version":26,"cve_count":16,"kev_count":17,"has_kev":18},"2.12.1",{"version":28,"cve_count":17,"kev_count":17,"has_kev":18},"2.12.2",{"version":30,"cve_count":16,"kev_count":17,"has_kev":18},"2.2",{"version":32,"cve_count":16,"kev_count":17,"has_kev":18},"2.2.1",{"version":34,"cve_count":17,"kev_count":17,"has_kev":18},"9.12.1",{"version":36,"cve_count":17,"kev_count":17,"has_kev":18},"9.13.1",{"version":38,"cve_count":17,"kev_count":17,"has_kev":18},"9.14.1","Ontap Select Deploy Administration Utility by Netapp is a technology product with 11 tracked versions and 172 known security vulnerabilities including 4 CISA Known Exploited Vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[41,42,43,44,45,46,47,48,49,50,51],{"version":15,"cve_count":16,"kev_count":17,"has_kev":18},{"version":20,"cve_count":16,"kev_count":17,"has_kev":18},{"version":22,"cve_count":17,"kev_count":17,"has_kev":18},{"version":24,"cve_count":16,"kev_count":17,"has_kev":18},{"version":26,"cve_count":16,"kev_count":17,"has_kev":18},{"version":28,"cve_count":17,"kev_count":17,"has_kev":18},{"version":30,"cve_count":16,"kev_count":17,"has_kev":18},{"version":32,"cve_count":16,"kev_count":17,"has_kev":18},{"version":34,"cve_count":17,"kev_count":17,"has_kev":18},{"version":36,"cve_count":17,"kev_count":17,"has_kev":18},{"version":38,"cve_count":17,"kev_count":17,"has_kev":18},[53,61,67,73,80,86,91,97,103,109],{"cveId":54,"description":55,"publishedDate":56,"cvssScore":57,"cvssVersion":58,"severity":59,"isKev":18,"epssScore":60},"CVE-2024-6387","A security regression (CVE-2006-5051) was discovered in OpenSSH's server (sshd). There is a race condition which can lead sshd to handle some signals in an unsafe manner. An unauthenticated, remote attacker may be able to trigger it by failing to authenticate within a set time period.","2024-07-01",8.1,"v3.1","High",0.99506,{"cveId":62,"description":63,"publishedDate":64,"cvssScore":65,"cvssVersion":58,"severity":59,"isKev":4,"epssScore":66},"CVE-2021-3156","Sudo before 1.9.5p2 contains an off-by-one error that can result in a heap-based buffer overflow, which allows privilege escalation to root via \"sudoedit -s\" and a command-line argument that ends with a single backslash character.","2021-01-26",7.8,0.99295,{"cveId":68,"description":69,"publishedDate":70,"cvssScore":71,"cvssVersion":58,"severity":59,"isKev":18,"epssScore":72},"CVE-2022-2068","In addition to the c_rehash shell command injection identified in CVE-2022-1292, further circumstances where the c_rehash script does not properly sanitise shell metacharacters to prevent command injection were found by code review. When the CVE-2022-1292 was fixed it was not discovered that there are other places in the script where the file names of certificates being hashed were possibly passed to a command executed through the shell. This script is distributed by some operating systems in a manner where it is automatically executed. On such operating systems, an attacker could execute arbitrary commands with the privileges of the script. Use of the c_rehash script is considered obsolete and should be replaced by the OpenSSL rehash command line tool. Fixed in OpenSSL 3.0.4 (Affected 3.0.0,3.0.1,3.0.2,3.0.3). Fixed in OpenSSL 1.1.1p (Affected 1.1.1-1.1.1o). Fixed in OpenSSL 1.0.2zf (Affected 1.0.2-1.0.2ze).","2022-06-21",7.3,0.95764,{"cveId":74,"description":75,"publishedDate":76,"cvssScore":77,"cvssVersion":58,"severity":78,"isKev":18,"epssScore":79},"CVE-2023-25136","OpenSSH server (sshd) 9.1 introduced a double-free vulnerability during options.kex_algorithms handling. This is fixed in OpenSSH 9.2. The double free can be leveraged, by an unauthenticated remote attacker in the default configuration, to jump to any location in the sshd address space. One third-party report states \"remote code execution is theoretically possible.\"","2023-02-03",6.5,"Medium",0.89955,{"cveId":81,"description":82,"publishedDate":83,"cvssScore":84,"cvssVersion":58,"severity":59,"isKev":4,"epssScore":85},"CVE-2016-5195","Race condition in mm\u002Fgup.c in the Linux kernel 2.x through 4.x before 4.8.3 allows local users to gain privileges by leveraging incorrect handling of a copy-on-write (COW) feature to write to a read-only memory mapping, as exploited in the wild in October 2016, aka \"Dirty COW.\"","2016-11-10",7,0.83524,{"cveId":87,"description":88,"publishedDate":89,"cvssScore":65,"cvssVersion":58,"severity":59,"isKev":4,"epssScore":90},"CVE-2023-4911","A buffer overflow was discovered in the GNU C Library's dynamic loader ld.so while processing the GLIBC_TUNABLES environment variable. This issue could allow a local attacker to use maliciously crafted GLIBC_TUNABLES environment variables when launching binaries with SUID permission to execute code with elevated privileges.","2023-10-03",0.81422,{"cveId":92,"description":93,"publishedDate":94,"cvssScore":95,"cvssVersion":58,"severity":59,"isKev":18,"epssScore":96},"CVE-2024-6119","Issue summary: Applications performing certificate name checks (e.g., TLS\nclients checking server certificates) may attempt to read an invalid memory\naddress resulting in abnormal termination of the application process.\n\nImpact summary: Abnormal termination of an application can a cause a denial of\nservice.\n\nApplications performing certificate name checks (e.g., TLS clients checking\nserver certificates) may attempt to read an invalid memory address when\ncomparing the expected name with an `otherName` subject alternative name of an\nX.509 certificate. This may result in an exception that terminates the\napplication program.\n\nNote that basic certificate chain validation (signatures, dates, ...) is not\naffected, the denial of service can occur only when the application also\nspecifies an expected DNS name, Email address or IP address.\n\nTLS servers rarely solicit client certificates, and even when they do, they\ngenerally don't perform a name check against a reference identifier (expected\nidentity), but rather extract the presented identity after checking the\ncertificate chain.  So TLS servers are generally not affected and the severity\nof the issue is Moderate.\n\nThe FIPS modules in 3.3, 3.2, 3.1 and 3.0 are not affected by this issue.","2024-09-03",7.5,0.66594,{"cveId":98,"description":99,"publishedDate":100,"cvssScore":101,"cvssVersion":58,"severity":78,"isKev":18,"epssScore":102},"CVE-2021-3449","An OpenSSL TLS server may crash if sent a maliciously crafted renegotiation ClientHello message from a client. If a TLSv1.2 renegotiation ClientHello omits the signature_algorithms extension (where it was present in the initial ClientHello), but includes a signature_algorithms_cert extension then a NULL pointer dereference will result, leading to a crash and a denial of service attack. A server is only vulnerable if it has TLSv1.2 and renegotiation enabled (which is the default configuration). OpenSSL TLS clients are not impacted by this issue. All OpenSSL 1.1.1 versions are affected by this issue. Users of these versions should upgrade to OpenSSL 1.1.1k. OpenSSL 1.0.2 is not impacted by this issue. Fixed in OpenSSL 1.1.1k (Affected 1.1.1-1.1.1j).","2021-03-25",5.9,0.62906,{"cveId":104,"description":105,"publishedDate":106,"cvssScore":107,"cvssVersion":58,"severity":59,"isKev":18,"epssScore":108},"CVE-2021-23017","A security issue in nginx resolver was identified, which might allow an attacker who is able to forge UDP packets from the DNS server to cause 1-byte memory overwrite, resulting in worker process crash or potential other impact.","2021-06-01",7.7,0.52838,{"cveId":110,"description":111,"publishedDate":112,"cvssScore":95,"cvssVersion":58,"severity":59,"isKev":18,"epssScore":113},"CVE-2018-25032","zlib before 1.2.12 allows memory corruption when deflating (i.e., when compressing) if the input has many distant matches.","2022-03-25",0.51733,[115,120,125,129],{"cveId":87,"description":88,"publishedDate":89,"cvssScore":65,"severity":59,"isKev":4,"epssScore":90,"cisaVulnName":116,"cisaDateAdded":117,"cisaShortDescription":118,"cisaRequiredAction":119},"GNU C Library Buffer Overflow Vulnerability","2023-11-21","GNU C Library's dynamic loader ld.so contains a buffer overflow vulnerability when processing the GLIBC_TUNABLES environment variable, allowing a local attacker to execute code with elevated privileges.","Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.",{"cveId":62,"description":63,"publishedDate":64,"cvssScore":65,"severity":59,"isKev":4,"epssScore":66,"cisaVulnName":121,"cisaDateAdded":122,"cisaShortDescription":123,"cisaRequiredAction":124},"Sudo Heap-Based Buffer Overflow Vulnerability","2022-04-06","Sudo contains an off-by-one error that can result in a heap-based buffer overflow, which allows for privilege escalation.","Apply updates per vendor instructions.",{"cveId":81,"description":82,"publishedDate":83,"cvssScore":84,"severity":59,"isKev":4,"epssScore":85,"cisaVulnName":126,"cisaDateAdded":127,"cisaShortDescription":128,"cisaRequiredAction":124},"Linux Kernel Race Condition Vulnerability","2022-03-03","Race condition in mm\u002Fgup.c in the Linux kernel allows local users to escalate privileges.",{"cveId":130,"description":131,"publishedDate":132,"cvssScore":133,"severity":134,"isKev":4,"epssScore":135,"cisaVulnName":136,"cisaDateAdded":137,"cisaShortDescription":138,"cisaRequiredAction":124},"CVE-2020-15999","Heap buffer overflow in Freetype in Google Chrome prior to 86.0.4240.111 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.","2020-11-03",9.6,"Critical",0.5063,"Google Chrome FreeType Heap Buffer Overflow Vulnerability","2021-11-03","Google Chrome uses FreeType, an open-source software library to render fonts, which contains a heap buffer overflow vulnerability in the function Load_SBit_Png when processing PNG images embedded into fonts. This vulnerability is part of an exploit chain with CVE-2020-17087 on Windows and CVE-2020-16010 on Android.",{"title":140,"metaDescription":141,"keywords":142,"structuredData":143},"Ontap Select Deploy Administration Utility by Netapp - Security Vulnerabilities & Analysis | EdgeProtect","Comprehensive security analysis for Ontap Select Deploy Administration Utility by Netapp covering 11 versions with 172 tracked vulnerabilities including 1 critical and 3 high-severity issues and 4 CISA KEV vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Ontap Select Deploy Administration Utility vulnerabilities, Ontap Select Deploy Administration Utility security, Ontap Select Deploy Administration Utility CVE, Netapp Ontap Select Deploy Administration Utility, Ontap Select Deploy Administration Utility threat intelligence, Netapp security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking, Ontap Select Deploy Administration Utility KEV, Ontap Select Deploy Administration Utility exploited vulnerabilities",{"@context":144,"@type":145,"name":146,"description":141,"url":147,"manufacturer":148,"applicationCategory":152,"softwareVersion":153,"mainEntity":154},"https:\u002F\u002Fschema.org","SoftwareApplication","Ontap Select Deploy Administration Utility","https:\u002F\u002Fedgeprotect.io\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fnetapp\u002Fontap_select_deploy_administration_utility",{"@type":149,"name":150,"url":151},"Organization","Netapp","https:\u002F\u002Fedgeprotect.io\u002Fvendors\u002Fnetapp","Security Software","11 versions tracked",{"@type":155,"name":156,"description":157,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Ontap Select Deploy Administration Utility Security Vulnerabilities","Security vulnerabilities affecting Ontap Select Deploy Administration Utility by Netapp",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":159,"apiVersion":160},"2026-10-28T15:30:11.121Z","3.0",[],{"rows":163,"total":11,"capped":18,"failed":17},[164,168,172,176],{"cveId":87,"name":116,"severity":59,"cvss":65,"added":117,"epss":90,"published":165,"ranges":166,"checked":4,"hits":167,"covers":18},"2023-10-03T18:15:10.463",[],[],{"cveId":62,"name":121,"severity":59,"cvss":65,"added":122,"epss":66,"published":169,"ranges":170,"checked":4,"hits":171,"covers":18},"2021-01-26T21:15:12.987",[],[],{"cveId":81,"name":126,"severity":59,"cvss":84,"added":127,"epss":85,"published":173,"ranges":174,"checked":4,"hits":175,"covers":18},"2016-11-10T21:59:00.197",[],[],{"cveId":130,"name":136,"severity":134,"cvss":133,"added":137,"epss":135,"published":177,"ranges":178,"checked":4,"hits":179,"covers":18},"2020-11-03T03:15:14.853",[],[]]