Medium WID-SEC-2023-0816 2 CVEs

NetApp StorageGRID: Mehrere Schwachstellen ermöglicht Denial of Service

Published Mar 30, 2023 · Updated Mar 30, 2023 · de-DE

Vendor: NETAPP Product: StorageGRID

Summary

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in NetApp StorageGRID ausnutzen, um einen Denial of Service Angriff durchzuführen.

Product

NetApp StorageGRID ist eine softwaredefinierte, objektbasierte Speicherlösung.

Vulnerabilities 2

Unscored —

CVE-2022-41724

Panic on large handshake records in crypto/tls

Large handshake records may cause panics in crypto/tls. Both clients and servers may send large TLS handshake records which cause servers and clients, respectively, to panic when attempting to construct responses. This affects all TLS 1.3 clients, TLS 1.2 cli…

Go standard library crypto/tls katib-suggestion-hyperopt katib-earlystopping Debian Ubuntu Azure Linux Alpine Wolfi Go

Feb 28, 2023
Unscored —

CVE-2022-41725

Excessive resource consumption in mime/multipart

A denial of service is possible from excessive resource consumption in net/http and mime/multipart. Multipart form parsing with mime/multipart.Reader.ReadForm can consume largely unlimited amounts of memory and disk files. This also affects form parsing in th…

Go standard library mime/multipart katib-suggestion-hyperopt katib-earlystopping Debian Ubuntu Azure Linux Alpine Wolfi Go

Feb 28, 2023

Revision history

2023-03-30 #1
Initiale Fassung

References

NetApp Security Advisory vom 2023-03-30
https://security.netapp.com/advisory/ntap-20230331-0009/