NetApp Ontap Tools - for Vmware Vsphere

An issue was discovered in Bouncy Castle Java TLS API and JSSE Provider before 1.78. Timing-based leakage may occur in RSA based handshakes because of exception processing.

Published: 2024-05-09T00:00:00.000Z
Updated: 2024-08-19T17:18:20.969Z

An out-of-bounds memory read flaw was found in receive_encrypted_standard in fs/smb/client/smb2ops.c in the SMB Client sub-component in the Linux Kernel. This issue occurs due to integer underflow on the memcpy length, leading to a denial of service.

Published: 2024-01-15T20:02:02.639Z
Updated: 2025-11-06T19:54:35.381Z

lib/kadm5/kadm_rpc_xdr.c in MIT Kerberos 5 (aka krb5) before 1.20.2 and 1.21.x before 1.21.1 frees an uninitialized pointer. A remote authenticated user can trigger a kadmind crash. This occurs because _xdr_kadm5_principal_ent_rec does not validate the relationship between n_key_data and the key_data array count.

Published: 2023-08-07T00:00:00.000Z
Updated: 2024-10-11T13:57:10.192Z

A vulnerability was found in openldap. This security flaw causes a null pointer dereference in ber_memalloc_x() function.

Published: 2023-05-30T00:00:00.000Z
Updated: 2025-01-10T21:28:27.261Z

Apache Log4j2 2.0-beta9 through 2.15.0 (excluding security releases 2.12.2, 2.12.3, and 2.3.1) JNDI features used in configuration, log messages, and parameters do not protect against attacker controlled LDAP and other JNDI related endpoints. An attacker who can control log messages or log message parameters can execute arbitrary code loaded from LDAP servers when message lookup substitution is enabled. From log4j 2.15.0, this behavior has been disabled by default. From version 2.16.0 (along with 2.12.2, 2.12.3, and 2.3.1), this functionality has been completely removed. Note that this vulnerability is specific to log4j-core and does not affect log4net, log4cxx, or other Apache Logging Services projects.

Published: 2021-12-10T00:00:00.000Z
Updated: 2025-10-21T23:25:23.121Z