Netapp Cloud Insights Telegraf Agent vulnerabilities
10 CVEs affecting Netapp Cloud Insights Telegraf Agent, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2022-30634, published 2022-07-15.
More from Netapp.
Highest priority
Known exploited (CISA KEV) first, then by EPSS exploit probability.
- CVE-2021-3115, published 2021-01-26. High severity, CVSS 7.5. EPSS: 6.6% chance of exploitation in the next 30 days. Go before 1.14.14 and 1.15.x before 1.15.7 on Windows is vulnerable to Command Injection and remote code execution when using the "go get" command to fetch modules that make use of cgo (for example,…
- CVE-2019-16276, published 2019-09-30. High severity, CVSS 7.5. EPSS: 5.3% chance of exploitation in the next 30 days. Go before 1.12.10 and 1.13.x before 1.13.1 allow HTTP Request Smuggling.
- CVE-2020-28362, published 2020-11-18. High severity, CVSS 7.5. EPSS: 3.9% chance of exploitation in the next 30 days. Go before 1.14.12 and 1.15.x before 1.15.4 allows Denial of Service.
- CVE-2021-33195, published 2021-08-02. High severity, CVSS 7.3. EPSS: 3.2% chance of exploitation in the next 30 days. Go before 1.15.13 and 1.16.x before 1.16.5 has functions for DNS lookups that do not validate replies from DNS servers, and thus a return value may contain an unsafe injection (e.g., XSS) that does…
- CVE-2022-23806, published 2022-02-11. Critical severity, CVSS 9.1. EPSS: 3.1% chance of exploitation in the next 30 days. Curve.IsOnCurve in crypto/elliptic in Go before 1.16.14 and 1.17.x before 1.17.7 can incorrectly return true in situations with a big.Int value that is not a valid field element.
- CVE-2022-23772, published 2022-02-11. High severity, CVSS 7.5. EPSS: 2.8% chance of exploitation in the next 30 days. Rat.SetString in math/big in Go before 1.16.14 and 1.17.x before 1.17.7 has an overflow that can lead to Uncontrolled Memory Consumption.
- CVE-2022-23773, published 2022-02-11. High severity, CVSS 7.5. EPSS: 2.7% chance of exploitation in the next 30 days. cmd/go in Go before 1.16.14 and 1.17.x before 1.17.7 can misinterpret branch names that falsely appear to be version tags. This can lead to incorrect access control if an actor is supposed to be able…
- CVE-2021-3114, published 2021-01-26. Medium severity, CVSS 6.5. EPSS: 2.7% chance of exploitation in the next 30 days. In Go before 1.14.14 and 1.15.x before 1.15.7, crypto/elliptic/p224.go can generate incorrect outputs, related to an underflow of the lowest limb during the final complete reduction in the P-224…
- CVE-2020-28366, published 2020-11-18. High severity, CVSS 7.5. EPSS: 2.3% chance of exploitation in the next 30 days. Code injection in the go command with cgo before Go 1.14.12 and Go 1.15.5 allows arbitrary code execution at build time via a malicious unquoted symbol name in a linked object file.
- CVE-2022-30634, published 2022-07-15. High severity, CVSS 7.5. EPSS: 2.3% chance of exploitation in the next 30 days. Infinite loop in Read in crypto/rand before Go 1.17.11 and Go 1.18.3 on Windows allows attacker to cause an indefinite hang by passing a buffer larger than 1 << 32 - 1 bytes.