Netapp Cloud Insights Telegraf vulnerabilities
5 vulnerabilities
Known vulnerabilities in Netapp Cloud Insights Telegraf, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
PrioritiseCVE-2022-28131go standard library · encoding/xml +9 moreStack exhaustion from deeply nested XML documents in encoding/xmlUncontrolled recursion in Decoder.Skip in encoding/xml before Go 1.17.12 and Go 1.18.4 allows an attacker to cause a panic due to stack exhaustion via a deeply nested XML document.CVSS7.5HighEPSS2.56%PrioritiseCVE-2021-39293golang · go +13 moregolang goIn archive/zip in Go before 1.16.8 and 1.17.x before 1.17.1, a crafted archive header (falsely designating that many files are present) can cause a NewReader or OpenReader panic. NOTE: this issue exists because of an incomplete fix for CVE-2021-33196.CVSS7.5HighEPSS6.93%PrioritiseCVE-2021-44716debian · debian_linux +16 moredebian debian_linuxnet/http in Go before 1.16.12 and 1.17.x before 1.17.5 allows uncontrolled memory consumption in the header canonicalization cache via HTTP/2 requests.CVSS7.5HighEPSS4.25%RoutineCVE-2021-34558fedoraproject · fedora +36 morefedoraproject fedoraThe crypto/tls package of Go through 1.16.5 does not properly assert that the type of public key in an X.509 certificate matches the expected type when doing a RSA based key exchange, allowing a malicious TLS server to cause a TLS client to panic.CVSS6.5MediumEPSS6.98%PrioritiseCVE-2020-7919debian · debian_linux +20 moredebian debian_linuxGo before 1.12.16 and 1.13.x before 1.13.7 (and the crypto/cryptobyte package before 0.0.0-20200124225646-8b5121be2f68 for Go) allows attacks on clients (resulting in a panic) via a malformed X.509 certificate.CVSS7.8HighEPSS2.65%