Skip to content
OpenAdvisories
Medium WID-SEC-2023-0091 2 CVEs

NetApp ActiveIQ Unified Manager: Mehrere Schwachstellen

Published Jan 12, 2023 · Updated Jan 12, 2023 · de-DE

Vendor: NETAPP Product: ActiveIQ Unified Manager Product: ActiveIQ Unified Manager for Linux Product: ActiveIQ Unified Manager for Microsoft Windows Product: ActiveIQ Unified Manager for VMware vSphere

Summary

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in NetApp ActiveIQ Unified Manager ausnutzen, um einen Denial of Service Angriff durchzuführen, um Informationen offenzulegen und um Daten zu manipulieren.

Product

ActiveIQ Unified Manager ist eine Managementlösung für NetApp Storage Produkte.

Vulnerabilities 2

  • Medium 6.5
    CVE-2022-41915

    Netty vulnerable to HTTP Response splitting from assigning header value iterator

    Netty project is an event-driven asynchronous network application framework. Starting in version 4.1.83.Final and prior to 4.1.86.Final, when calling `DefaultHttpHeadesr.set` with an _iterator_ of values, header value validation was not performed, allowing ma…

    netty netty netty netty Debian Ubuntu Maven
  • Medium 5.3
    CVE-2022-41881

    HAProxyMessageDecoder Stack Exhaustion DoS

    Netty project is an event-driven asynchronous network application framework. In versions prior to 4.1.86.Final, a StackOverflowError can be raised when parsing a malformed crafted message due to an infinite recursion. This issue is patched in version 4.1.86.F…

    netty netty netty netty Debian Ubuntu Maven

Revision history

  1. #1

    Initiale Fassung

References