CVE-2018-5498

Published: Feb 1, 2019Modified: Nov 21, 2024

4.4

Vector

CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H

Exploitability: 0.7 / Impact: 3.6

Source: NVD

Description

Clustered Data ONTAP versions 9.0 through 9.4 are susceptible to a vulnerability which allows remote authenticated attackers to cause a Denial of Service (DoS) in NFS and SMB environments. Exploitation of this vulnerability will allow a remote authenticated attacker to cause a Denial of Service (DoS) on affected versions of clustered Data ONTAP configured for multiprotocol access.

Affected (1)

Products: Netapp: Clustered Data Ontap

1 product

Clustered Data Ontap

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Netapp Clustered Data Ontap	From 9.0 to 9.4

Related CWEs

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (2)

https://security.netapp.com/advisory/ntap-20190115-0001/

Source: security-alert@netapp.com

PatchVendor Advisory

https://security.netapp.com/advisory/ntap-20190115-0001/

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

Timeline

No history available yet.