Summary
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in NetApp ActiveIQ Unified Manager ausnutzen, um einen Denial of Service Angriff durchzuführen oder Daten zu manipulieren.
Product
ActiveIQ Unified Manager ist eine Managementlösung für NetApp Storage Produkte.
Vulnerabilities 2
-
Medium 6.9
Netty's BrotliDecoder is vulnerable to DoS via zip bomb style attack
Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers & clients. In netty-codec-compression versions 4.1.124.Final and below, and netty-codec versions 4.2.4.Final and below,…
-
Low 2.9
Netty is vulnerable to request smuggling due to incorrect parsing of chunk extensions
Netty is an asynchronous event-driven network application framework for development of maintainable high performance protocol servers and clients. In versions 4.1.124.Final, and 4.2.0.Alpha3 through 4.2.4.Final, Netty incorrectly accepts standalone newline ch…
Revision history
-
#1
Initiale Fassung
References
-
NetApp Security Advisory vom 2026-02-01
https://security.netapp.com/advisory/NTAP-20260130-0016
-
PoC CVE-2025-58056 vom 2026-02-01
https://github.com/netty/netty/security/advisories/GHSA-fghv-69vj-qj49
-
PoC CVE-2025-58057 vom 2026-02-01
https://github.com/netty/netty/security/advisories/GHSA-3p8m-j85q-pgmj