NetApp Cloud Insights Telegraf Agent

CPE Details

NetApp Cloud Insights Telegraf Agent
netapp
cloud_insights_telegraf_agent
-
2021-02-19
16h41 +00:00
2021-07-02
15h15 +00:00
CPE NVD
Alerte pour un CPE
Restez informé de toutes modifications pour un CPE spécifique.
Gestion des notifications

CPE Name: cpe:2.3:a:netapp:cloud_insights_telegraf_agent:-:*:*:*:*:*:*:*

Informations

Vendor

netapp

Product

cloud_insights_telegraf_agent

Version

-

Related CVE

Open and find in CVE List

CVE ID Publié Description Score Gravité
CVE-2022-30634 2022-07-15 17h36 +00:00 Infinite loop in Read in crypto/rand before Go 1.17.11 and Go 1.18.3 on Windows allows attacker to cause an indefinite hang by passing a buffer larger than 1 << 32 - 1 bytes.
7.5
Haute
CVE-2022-23773 2022-02-10 23h16 +00:00 cmd/go in Go before 1.16.14 and 1.17.x before 1.17.7 can misinterpret branch names that falsely appear to be version tags. This can lead to incorrect access control if an actor is supposed to be able to create branches but not tags.
7.5
Haute
CVE-2022-23772 2022-02-10 23h11 +00:00 Rat.SetString in math/big in Go before 1.16.14 and 1.17.x before 1.17.7 has an overflow that can lead to Uncontrolled Memory Consumption.
7.5
Haute
CVE-2022-23806 2022-02-10 23h00 +00:00 Curve.IsOnCurve in crypto/elliptic in Go before 1.16.14 and 1.17.x before 1.17.7 can incorrectly return true in situations with a big.Int value that is not a valid field element.
9.1
Critique
CVE-2021-33195 2021-08-02 16h51 +00:00 Go before 1.15.13 and 1.16.x before 1.16.5 has functions for DNS lookups that do not validate replies from DNS servers, and thus a return value may contain an unsafe injection (e.g., XSS) that does not conform to the RFC1035 format.
7.3
Haute
CVE-2021-3114 2021-01-26 01h23 +00:00 In Go before 1.14.14 and 1.15.x before 1.15.7, crypto/elliptic/p224.go can generate incorrect outputs, related to an underflow of the lowest limb during the final complete reduction in the P-224 field.
6.5
Moyen
CVE-2021-3115 2021-01-26 01h14 +00:00 Go before 1.14.14 and 1.15.x before 1.15.7 on Windows is vulnerable to Command Injection and remote code execution when using the "go get" command to fetch modules that make use of cgo (for example, cgo can execute a gcc program from an untrusted download).
7.5
Haute
CVE-2020-28362 2020-11-18 15h27 +00:00 Go before 1.14.12 and 1.15.x before 1.15.4 allows Denial of Service.
7.5
Haute
CVE-2020-28366 2020-11-17 23h00 +00:00 Code injection in the go command with cgo before Go 1.14.12 and Go 1.15.5 allows arbitrary code execution at build time via a malicious unquoted symbol name in a linked object file.
7.5
Haute
CVE-2019-16276 2019-09-30 16h40 +00:00 Go before 1.12.10 and 1.13.x before 1.13.1 allow HTTP Request Smuggling.
7.5
Haute