The Vigil@nce team watches public vulnerabilities impacting your computers, and then offers security solutions, a database and tools to fix them.

Computer vulnerabilities of Data ONTAP 7-Mode

vulnerability alert CVE-2019-8936

NTP.org: NULL pointer dereference via Authenticated Mode 6

Synthesis of the vulnerability

An attacker can force a NULL pointer to be dereferenced via Authenticated Mode 6 of NTP.org, in order to trigger a denial of service.
Impacted products: Fedora, FreeBSD, AIX, Meinberg NTP Server, Data ONTAP 7-Mode, NTP.org, openSUSE Leap, Solaris, pfSense, RSA Authentication Manager, Slackware, SUSE Linux Enterprise Desktop, SLES.
Severity: 2/4.
Consequences: denial of service on service, denial of service on client.
Provenance: user account.
Creation date: 08/03/2019.
Identifiers: 3565, bulletinapr2019, CVE-2019-8936, DSA-2019-093, FEDORA-2019-694e3aa4e8, FEDORA-2019-f781d5c4c6, FreeBSD-SA-19:04.ntp, NTAP-20190503-0001, openSUSE-SU-2019:1143-1, openSUSE-SU-2019:1158-1, SSA:2019-067-01, SUSE-SU-2019:0775-1, SUSE-SU-2019:0777-1, SUSE-SU-2019:0789-1, SUSE-SU-2019:13991-1, SUSE-SU-2019:14004-1, VIGILANCE-VUL-28701.

Description of the vulnerability

An attacker can force a NULL pointer to be dereferenced via Authenticated Mode 6 of NTP.org, in order to trigger a denial of service.
Full Vigil@nce bulletin... (Free trial)

computer vulnerability alert CVE-2018-18605 CVE-2018-18606 CVE-2018-18607

GNU Binutils: three vulnerabilities

Synthesis of the vulnerability

An attacker can use several vulnerabilities of GNU Binutils.
Impacted products: Data ONTAP 7-Mode, SIMATIC.
Severity: 2/4.
Consequences: denial of service on server, denial of service on service.
Provenance: user shell.
Number of vulnerabilities in this bulletin: 3.
Creation date: 08/03/2019.
Identifiers: CVE-2018-18605, CVE-2018-18606, CVE-2018-18607, NTAP-20190307-0003, SSB-439005, VIGILANCE-VUL-28696.

Description of the vulnerability

An attacker can use several vulnerabilities of GNU Binutils.
Full Vigil@nce bulletin... (Free trial)

vulnerability alert CVE-2018-5496

NetApp Data ONTAP: information disclosure via Volume Space Usage

Synthesis of the vulnerability

An attacker can bypass access restrictions to data via Volume Space Usage of NetApp Data ONTAP, in order to obtain sensitive information.
Impacted products: Data ONTAP 7-Mode.
Severity: 1/4.
Consequences: data reading.
Provenance: user account.
Creation date: 05/12/2018.
Identifiers: CVE-2018-5496, NTAP-20181204-0001, VIGILANCE-VUL-27951.

Description of the vulnerability

An attacker can bypass access restrictions to data via Volume Space Usage of NetApp Data ONTAP, in order to obtain sensitive information.
Full Vigil@nce bulletin... (Free trial)

vulnerability alert CVE-2018-18065

Net-SNMP: denial of service via GetNext PDU Multiple Varbinds

Synthesis of the vulnerability

An attacker can generate a fatal error via GetNext PDU Multiple Varbinds of Net-SNMP, in order to trigger a denial of service.
Impacted products: Debian, Fedora, Data ONTAP 7-Mode, Net-SNMP, openSUSE Leap, Solaris, Palo Alto Firewall PA***, PAN-OS, SUSE Linux Enterprise Desktop, SLES, Ubuntu.
Severity: 2/4.
Consequences: denial of service on service.
Provenance: user account.
Creation date: 09/10/2018.
Identifiers: bulletinoct2018, CVE-2018-18065, DLA-1540-1, DSA-4314-1, FEDORA-2018-042156f164, NTAP-20181107-0001, openSUSE-SU-2018:3381-1, openSUSE-SU-2018:3508-1, PAN-SA-2019-0007, SUSE-SU-2018:3319-1, SUSE-SU-2018:3333-1, SUSE-SU-2018:3447-1, USN-3792-1, USN-3792-2, USN-3792-3, VIGILANCE-VUL-27441.

Description of the vulnerability

An attacker can generate a fatal error via GetNext PDU Multiple Varbinds of Net-SNMP, in order to trigger a denial of service.
Full Vigil@nce bulletin... (Free trial)

vulnerability CVE-2018-18066

Net-SNMP: denial of service via Incompletely Parsed Varbinds

Synthesis of the vulnerability

An attacker can generate a fatal error via Incompletely Parsed Varbinds of Net-SNMP, in order to trigger a denial of service.
Impacted products: Fedora, Data ONTAP 7-Mode, Net-SNMP.
Severity: 3/4.
Consequences: denial of service on service.
Provenance: intranet client.
Creation date: 09/10/2018.
Identifiers: CVE-2018-18066, FEDORA-2018-042156f164, NTAP-20181107-0001, VIGILANCE-VUL-27440.

Description of the vulnerability

An attacker can generate a fatal error via Incompletely Parsed Varbinds of Net-SNMP, in order to trigger a denial of service.
Full Vigil@nce bulletin... (Free trial)

computer vulnerability alert CVE-2018-15473

OpenSSH: information disclosure via Username Enumeration

Synthesis of the vulnerability

An attacker can bypass access restrictions to data via Username Enumeration of OpenSSH, in order to obtain sensitive information.
Impacted products: Blue Coat CAS, ProxySG par Blue Coat, SGOS by Blue Coat, Debian, VNX Operating Environment, VNX Series, Fedora, AIX, McAfee Web Gateway, Data ONTAP 7-Mode, OpenSSH, openSUSE Leap, Solaris, pfSense, RHEL, SIMATIC, SUSE Linux Enterprise Desktop, SLES, Symantec Content Analysis, ProxySG by Symantec, SGOS by Symantec, Synology DSM, Synology DS***, Synology RS***, Ubuntu.
Severity: 2/4.
Consequences: data reading.
Provenance: intranet client.
Creation date: 16/08/2018.
Identifiers: bulletinjan2019, CERTFR-2018-AVI-410, CVE-2018-15473, DLA-1474-1, DSA-2019-131, DSA-4280-1, FEDORA-2018-065a7722ee, FEDORA-2018-f56ded11c4, NTAP-20181101-0001, openSUSE-SU-2018:3801-1, openSUSE-SU-2018:3946-1, RHSA-2019:0711-01, RHSA-2019:2143-01, SB10267, SSB-439005, SUSE-SU-2018:3540-1, SUSE-SU-2018:3686-1, SUSE-SU-2018:3768-1, SUSE-SU-2018:3776-1, SUSE-SU-2018:3781-1, SUSE-SU-2018:3910-1, SYMSA1469, USN-3809-1, VIGILANCE-VUL-27016.

Description of the vulnerability

An attacker can bypass access restrictions to data via Username Enumeration of OpenSSH, in order to obtain sensitive information.
Full Vigil@nce bulletin... (Free trial)

vulnerability note CVE-2018-5740

ISC BIND: assertion error via deny-answer-aliases

Synthesis of the vulnerability

An attacker can force an assertion error via deny-answer-aliases of ISC BIND, in order to trigger a denial of service.
Impacted products: Debian, BIG-IP Hardware, TMOS, IBM i, BIND, Junos Space, Data ONTAP 7-Mode, openSUSE Leap, Solaris, RHEL, Slackware, SUSE Linux Enterprise Desktop, SLES, Ubuntu.
Severity: 2/4.
Consequences: denial of service on service.
Provenance: internet client.
Creation date: 09/08/2018.
Identifiers: bulletinoct2018, CERTFR-2018-AVI-380, CVE-2018-5740, DLA-1485-1, ibm10725903, JSA10917, K98528405, NTAP-20180926-0001, NTAP-20180926-0002, NTAP-20180926-0003, NTAP-20180926-0004, NTAP-20180926-0005, NTAP-20180927-0001, openSUSE-SU-2019:1532-1, openSUSE-SU-2019:1533-1, RHSA-2018:2570-01, RHSA-2018:2571-01, SSA:2018-222-01, SUSE-SU-2019:1407-1, SUSE-SU-2019:14074-1, SUSE-SU-2019:1449-1, USN-3769-1, USN-3769-2, VIGILANCE-VUL-26934.

Description of the vulnerability

An attacker can force an assertion error via deny-answer-aliases of ISC BIND, in order to trigger a denial of service.
Full Vigil@nce bulletin... (Free trial)

vulnerability alert CVE-2018-12015

Perl Archive-Tar: directory traversal via Symlink

Synthesis of the vulnerability

An attacker can traverse directories via Symlink of Perl Archive::Tar, in order to create a file outside the service root path.
Impacted products: Mac OS X, Debian, Fedora, Data ONTAP 7-Mode, OpenBSD, openSUSE Leap, Solaris, Perl Module ~ not comprehensive, RHEL, SUSE Linux Enterprise Desktop, SLES, Ubuntu.
Severity: 2/4.
Consequences: data creation/edition.
Provenance: document.
Creation date: 08/06/2018.
Identifiers: 125523, bulletinjan2019, CVE-2018-12015, DSA-4226-1, FEDORA-2018-10ae521efa, FEDORA-2018-4e088b6d7c, HT209600, NTAP-20180926-0001, NTAP-20180926-0002, NTAP-20180926-0003, NTAP-20180926-0004, NTAP-20180926-0005, NTAP-20180927-0001, openSUSE-SU-2018:2010-1, openSUSE-SU-2018:2011-1, RHSA-2019:2097-01, SUSE-SU-2018:1972-1, SUSE-SU-2018:1977-1, SUSE-SU-2018:1992-1, USN-3684-1, USN-3684-2, VIGILANCE-VUL-26351.

Description of the vulnerability

An attacker can traverse directories via Symlink of Perl Archive::Tar, in order to create a file outside the service root path.
Full Vigil@nce bulletin... (Free trial)

vulnerability alert CVE-2018-5737

ISC BIND: assertion error via serve-stale

Synthesis of the vulnerability

An attacker can force an assertion error via serve-stale of ISC BIND, in order to trigger a denial of service.
Impacted products: BIND, Data ONTAP 7-Mode.
Severity: 2/4.
Consequences: denial of service on service, denial of service on client.
Provenance: internet client.
Creation date: 22/05/2018.
Identifiers: CERTFR-2018-AVI-244, CVE-2018-5737, NTAP-20180926-0001, NTAP-20180926-0002, NTAP-20180926-0003, NTAP-20180926-0004, NTAP-20180926-0005, NTAP-20180927-0001, VIGILANCE-VUL-26181.

Description of the vulnerability

An attacker can force an assertion error via serve-stale of ISC BIND, in order to trigger a denial of service.
Full Vigil@nce bulletin... (Free trial)

vulnerability CVE-2018-5736

ISC BIND: denial of service via Zone Transfer Succession

Synthesis of the vulnerability

An attacker can generate a fatal error via Zone Transfer Succession of ISC BIND, in order to trigger a denial of service.
Impacted products: BIND, Data ONTAP 7-Mode.
Severity: 2/4.
Consequences: denial of service on service, denial of service on client.
Provenance: intranet client.
Creation date: 22/05/2018.
Identifiers: CERTFR-2018-AVI-244, CVE-2018-5736, NTAP-20180926-0001, NTAP-20180926-0002, NTAP-20180926-0003, NTAP-20180926-0004, NTAP-20180926-0005, NTAP-20180927-0001, VIGILANCE-VUL-26180.

Description of the vulnerability

An attacker can generate a fatal error via Zone Transfer Succession of ISC BIND, in order to trigger a denial of service.
Full Vigil@nce bulletin... (Free trial)
Our database contains other pages. You can request a free trial to read them.

Display information about Data ONTAP 7-Mode: