Data ontap edge

This hub aggregates every CVE we track for Data ontap edge, a product in the hardware firmware space. Use it to gauge the current risk picture and drill into individual advisories.

Severity distribution

Monthly trend

The 15 most recently published vulnerabilities affecting Data ontap edge.

• CVE-2018-5740A flaw in the "deny-answer-aliases" feature can cause an assertion failure in named7.5Jan 16, 2019
• CVE-2018-5737BIND 9.12's serve-stale implementation can cause an assertion failure in rbtdb.c or other undesirable behavior, even if serve-stale is not enabled.5.9Jan 16, 2019
• CVE-2018-5736An error in zone database reference counting can lead to an assertion failure if a server which is running an affected version of BIND attempts several transfers of a slave zone in quick succession...5.3Jan 16, 2019
• CVE-2018-5734A malformed request can trigger an assertion failure in badcache.c7.5Jan 16, 2019
• CVE-2017-3145Improper fetch cleanup sequencing in the resolver can cause named to crash7.5Jan 16, 2019
• CVE-2017-3140An error processing RPZ rules can cause named to loop endlessly after handling a query3.7Jan 16, 2019
• CVE-2017-3138named exits with a REQUIRE assertion failure if it receives a null command string on its control channel6.5Jan 16, 2019
• CVE-2017-3137A response packet can cause a resolver to terminate when processing an answer containing a CNAME or DNAME7.5Jan 16, 2019
• CVE-2017-3136An error handling synthesized records could cause an assertion failure when using DNS64 with "break-dnssec yes;"5.9Jan 16, 2019
• CVE-2017-3135Combination of DNS64 and RPZ Can Lead to Crash7.5Jan 16, 2019
• CVE-2016-9778An error handling certain queries using the nxdomain-redirect feature could cause a REQUIRE assertion failure in db.c7.5Jan 16, 2019
• CVE-2018-15919Remotely observable behaviour in auth-gss2.c in OpenSSH through 7.8 could be used by remote attackers to detect existence of users on a target system when GSS2 is in use. NOTE: the discoverer state...5.3Aug 28, 2018
• CVE-2018-15473OpenSSH through 7.7 is prone to a user enumeration vulnerability due to not delaying bailout for an invalid authenticating user until after the packet containing the request has been fully parsed, ...5.3Aug 17, 2018
• CVE-2018-12015In Perl through 5.26.2, the Archive::Tar module allows remote attackers to bypass a directory-traversal protection mechanism, and overwrite arbitrary files, via an archive file containing a symlink...7.5Jun 7, 2018
• CVE-2018-11237An AVX-512-optimized implementation of the mempcpy function in the GNU C Library (aka glibc or libc6) 2.27 and earlier may write data beyond the target buffer, leading to a buffer overflow in __mem...7.8May 18, 2018