CVSS: 9.8EPSS: 2%CPEs: 42EXPL: 0CVE-2021-3711 – SM2 Decryption Buffer Overflow
https://notcve.org/view.php?id=CVE-2021-3711
24 Aug 2021 — In order to decrypt SM2 encrypted data an application is expected to call the API function EVP_PKEY_decrypt(). Typically an application will call this function twice. The first time, on entry, the "out" parameter can be NULL and, on exit, the "outlen" parameter is populated with the buffer size required to hold the decrypted plaintext. The application can then allocate a sufficiently sized buffer and call EVP_PKEY_decrypt() again, but this time passing a non-NULL value for the "out" parameter. A bug in the ... • http://www.openwall.com/lists/oss-security/2021/08/26/2 • CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') CWE-787: Out-of-bounds Write •
CVSS: 7.4EPSS: 1%CPEs: 56EXPL: 0CVE-2021-3712 – Read buffer overruns processing ASN.1 strings
https://notcve.org/view.php?id=CVE-2021-3712
24 Aug 2021 — ASN.1 strings are represented internally within OpenSSL as an ASN1_STRING structure which contains a buffer holding the string data and a field holding the buffer length. This contrasts with normal C strings which are repesented as a buffer for the string data which is terminated with a NUL (0) byte. Although not a strict requirement, ASN.1 strings that are parsed using OpenSSL's own "d2i" functions (and other similar parsing functions) as well as any string whose value has been set with the ASN1_STRING_set... • http://www.openwall.com/lists/oss-security/2021/08/26/2 • CWE-125: Out-of-bounds Read •
CVSS: 9.1EPSS: 0%CPEs: 3EXPL: 0CVE-2019-5502
https://notcve.org/view.php?id=CVE-2019-5502
05 Aug 2019 — SMB in Data ONTAP operating in 7-Mode versions prior to 8.2.5P3 has weak cryptography which when exploited could lead to information disclosure or addition or modification of data. SMB en Data ONTAP operando en 7-Mode anterior a versión 8.2.5P3, presenta una criptografía débil que, cuando es explotada, podría conllevar a la divulgación de información o adición o modificación de datos. • https://security.netapp.com/advisory/ntap-20190802-0002 • CWE-327: Use of a Broken or Risky Cryptographic Algorithm •
CVSS: 7.5EPSS: 0%CPEs: 3EXPL: 0CVE-2019-5501
https://notcve.org/view.php?id=CVE-2019-5501
02 Aug 2019 — Data ONTAP operating in 7-Mode versions prior to 8.2.5P3 may disclose sensitive LDAP account information to unauthenticated remote attackers. Data ONTAP operando en 7-Mode anterior a versión 8.2.5P3, puede revelar información confidencial de la cuenta LDAP a atacantes no autenticados remotos. • https://security.netapp.com/advisory/ntap-20190801-0001 •
CVSS: 7.5EPSS: 0%CPEs: 3EXPL: 0CVE-2019-5493
https://notcve.org/view.php?id=CVE-2019-5493
02 Aug 2019 — Data ONTAP operating in 7-Mode versions prior to 8.2.5P3 are susceptible to a vulnerability which discloses information to an unauthenticated attacker. A successful attack requires that multiple non-default options be enabled. Data ONTAP operando en 7-Mode anterior a versión 8.2.5P3, son susceptibles a una vulnerabilidad que revela información a un atacante no autenticado. Un ataque con éxito requiere que múltiples opciones no predeterminadas sean habilitadas. • https://security.netapp.com/advisory/ntap-20190801-0002 •
CVSS: 5.9EPSS: 7%CPEs: 180EXPL: 0CVE-2019-1559 – 0-byte record padding oracle
https://notcve.org/view.php?id=CVE-2019-1559
26 Feb 2019 — If an application encounters a fatal protocol error and then calls SSL_shutdown() twice (once to send a close_notify, and once to receive one) then OpenSSL can respond differently to the calling application if a 0 byte record is received with invalid padding compared to if a 0 byte record is received with an invalid MAC. If the application then behaves differently based on that in a way that is detectable to the remote peer, then this amounts to a padding oracle that could be used to decrypt data. In order ... • http://lists.opensuse.org/opensuse-security-announce/2019-03/msg00041.html • CWE-203: Observable Discrepancy CWE-325: Missing Cryptographic Step •
CVSS: 4.4EPSS: 0%CPEs: 2EXPL: 0CVE-2018-5496
https://notcve.org/view.php?id=CVE-2018-5496
04 Dec 2018 — Data ONTAP operating in 7-Mode versions prior to 8.2.5P2 are susceptible to a vulnerability which discloses sensitive information to an unauthorized user. Data ONTAP, operando en modo7-Mode, en versiones anteriores a la 8.2.5P2, es susceptible a una vulnerabilidad que revela información sensible a un usuario no autorizado. • https://security.netapp.com/advisory/ntap-20181204-0001 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •
CVSS: 6.5EPSS: 0%CPEs: 3EXPL: 0CVE-2016-1895
https://notcve.org/view.php?id=CVE-2016-1895
01 Sep 2017 — NetApp Data ONTAP before 8.2.5 and 8.3.x before 8.3.2P12 allow remote authenticated users to cause a denial of service via vectors related to unsafe user input string handling. NetApp Data ONTAP en versiones anteriores a la 8.2.5 y 8.3.x en versiones anteriores a la 8.3.2P12 permite que atacantes remotos autenticados provoquen una denegación de servicio mediante vectores relacionados con la gestión no segura de cadenas de entrada de usuario. • https://kb.netapp.com/support/s/article/NTAP-20170831-0003 • CWE-134: Use of Externally-Controlled Format String •