Netapp Astra Trident vulnerabilities

3 CVEs affecting Netapp Astra Trident, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-39325, published 2023-10-11.

More from Netapp.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2022-28948, published 2022-05-19. High severity, CVSS 7.5. EPSS: 4% chance of exploitation in the next 30 days. An issue in the Unmarshal function in Go-Yaml v3 causes the program to crash when attempting to deserialize invalid input.
• CVE-2023-39325, published 2023-10-11. High severity, CVSS 7.5. EPSS: 3.8% chance of exploitation in the next 30 days. A malicious HTTP/2 client which rapidly creates requests and immediately resets them can cause excessive server resource consumption. While the total number of requests is bounded by the…
• CVE-2022-24921, published 2022-03-05. High severity, CVSS 7.5. EPSS: 3.2% chance of exploitation in the next 30 days. regexp.Compile in Go before 1.16.15 and 1.17.x before 1.17.8 allows stack exhaustion via a deeply nested expression.