NetApp Ontap 9

OOB access in ldap_escape

libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a use-after-free in xmlSchemaIDCFillNodeTables and xmlSchemaBubbleIDCNodeTables in xmlschemas.c. To exploit this, a crafted XML document must be validated against an XML schema with certain identity constraints, or a crafted XML schema must be used.

Stream HTTP wrapper truncates redirect location to 1024 bytes

Openssh: regresshion - race condition in ssh allows rce/dos

Apache HTTP Server proxy encoding problem

libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a stack-based buffer overflow in xmlSnprintfElements in valid.c. To exploit this, DTD validation must occur for an untrusted document or untrusted DTD. NOTE: this is similar to CVE-2017-9047.

Apache HTTP Server: HTTP/2 DoS by memory exhaustion on endless continuation frames

Apache HTTP Server on WIndows UNC SSRF

Apache HTTP Server: mod_rewrite proxy handler substitution

libexpat through 2.6.1 allows an XML Entity Expansion attack when there is isolated use of external parsers (created via XML_ExternalEntityParserCreate).

Apache HTTP Server: HTTP response splitting

Stream HTTP wrapper header check might omit basic auth header

Openssh: machine-in-the-middle attack if verifyhostkeydns is enabled

Apache HTTP Server: HTTP Response Splitting in multiple modules

Streams HTTP wrapper does not fail for headers with invalid name and no colon

An authentication bypass vulnerability exists libcurl <8.0.0 in the connection reuse feature which can reuse previously established connections with incorrect user permissions due to a failure to check for changes in the CURLOPT_GSSAPI_DELEGATION option. This vulnerability affects krb5/kerberos/negotiate/GSSAPI transfers and could potentially result in unauthorized access to sensitive information. The safest option is to not reuse connections if the CURLOPT_GSSAPI_DELEGATION option has been changed.

Apache HTTP Server: DoS by Null pointer in websocket over HTTP/2

ONTAP versions 9.12.1 and higher with S3 NAS buckets are susceptible to an information disclosure vulnerability. Successful exploit could allow an authenticated attacker to view a listing of the contents in a directory for which they lack permission.

Usage of disabled protocol

netrc and redirect credential leak

netrc and default credential leak