[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fq8iz7QVwD6qEYLbqmVM2hQuxlQUSI1_46z9YF_gImV8":3,"g5a-family:netapp\u002Fsmi-s_provider":102,"g5a-ex:netapp\u002Fsmi-s_provider@*":103},{"success":4,"data":5},true,{"product":6,"versions":15,"topVulnerabilitiesByEpss":16,"kevVulnerabilities":74,"seoMetadata":80,"meta":99},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":14},"netapp","smi-s_provider",0,19,1,"2023-04-25",[],"Smi-s Provider by Netapp is a technology product and 19 known security vulnerabilities including 1 CISA Known Exploited Vulnerability. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[],[17,26,31,36,41,46,53,58,64,69],{"cveId":18,"description":19,"publishedDate":20,"cvssScore":21,"cvssVersion":22,"severity":23,"isKev":24,"epssScore":25},"CVE-2022-2068","In addition to the c_rehash shell command injection identified in CVE-2022-1292, further circumstances where the c_rehash script does not properly sanitise shell metacharacters to prevent command injection were found by code review. When the CVE-2022-1292 was fixed it was not discovered that there are other places in the script where the file names of certificates being hashed were possibly passed to a command executed through the shell. This script is distributed by some operating systems in a manner where it is automatically executed. On such operating systems, an attacker could execute arbitrary commands with the privileges of the script. Use of the c_rehash script is considered obsolete and should be replaced by the OpenSSL rehash command line tool. Fixed in OpenSSL 3.0.4 (Affected 3.0.0,3.0.1,3.0.2,3.0.3). Fixed in OpenSSL 1.1.1p (Affected 1.1.1-1.1.1o). Fixed in OpenSSL 1.0.2zf (Affected 1.0.2-1.0.2ze).","2022-06-21",7.3,"v3.1","High",false,0.96391,{"cveId":27,"description":28,"publishedDate":29,"cvssScore":21,"cvssVersion":22,"severity":23,"isKev":24,"epssScore":30},"CVE-2022-1292","The c_rehash script does not properly sanitise shell metacharacters to prevent command injection. This script is distributed by some operating systems in a manner where it is automatically executed. On such operating systems, an attacker could execute arbitrary commands with the privileges of the script. Use of the c_rehash script is considered obsolete and should be replaced by the OpenSSL rehash command line tool. Fixed in OpenSSL 3.0.3 (Affected 3.0.0,3.0.1,3.0.2). Fixed in OpenSSL 1.1.1o (Affected 1.1.1-1.1.1n). Fixed in OpenSSL 1.0.2ze (Affected 1.0.2-1.0.2zd).","2022-05-03",0.82612,{"cveId":32,"description":33,"publishedDate":12,"cvssScore":34,"cvssVersion":22,"severity":23,"isKev":4,"epssScore":35},"CVE-2023-29552","The Service Location Protocol (SLP, RFC 2608) allows an unauthenticated, remote attacker to register arbitrary services. This could allow the attacker to use spoofed UDP traffic to conduct a denial-of-service attack with a significant amplification factor.",7.5,0.63975,{"cveId":37,"description":38,"publishedDate":39,"cvssScore":34,"cvssVersion":22,"severity":23,"isKev":24,"epssScore":40},"CVE-2020-1967","Server or client applications that call the SSL_check_chain() function during or after a TLS 1.3 handshake may crash due to a NULL pointer dereference as a result of incorrect handling of the \"signature_algorithms_cert\" TLS extension. The crash occurs if an invalid or unrecognised signature algorithm is received from the peer. This could be exploited by a malicious peer in a Denial of Service attack. OpenSSL version 1.1.1d, 1.1.1e, and 1.1.1f are affected by this issue. This issue did not affect OpenSSL versions prior to 1.1.1d. Fixed in OpenSSL 1.1.1g (Affected 1.1.1d-1.1.1f).","2020-04-21",0.53336,{"cveId":42,"description":43,"publishedDate":44,"cvssScore":34,"cvssVersion":22,"severity":23,"isKev":24,"epssScore":45},"CVE-2016-8610","A denial of service flaw was found in OpenSSL 0.9.8, 1.0.1, 1.0.2 through 1.0.2h, and 1.1.0 in the way the TLS\u002FSSL protocol defined processing of ALERT packets during a connection handshake. A remote attacker could use this flaw to make a TLS\u002FSSL server consume an excessive amount of CPU and fail to accept connections from other clients.","2017-11-13",0.39657,{"cveId":47,"description":48,"publishedDate":49,"cvssScore":50,"cvssVersion":22,"severity":51,"isKev":24,"epssScore":52},"CVE-2019-1559","If an application encounters a fatal protocol error and then calls SSL_shutdown() twice (once to send a close_notify, and once to receive one) then OpenSSL can respond differently to the calling application if a 0 byte record is received with invalid padding compared to if a 0 byte record is received with an invalid MAC. If the application then behaves differently based on that in a way that is detectable to the remote peer, then this amounts to a padding oracle that could be used to decrypt data. In order for this to be exploitable \"non-stitched\" ciphersuites must be in use. Stitched ciphersuites are optimised implementations of certain commonly used ciphersuites. Also the application must call SSL_shutdown() twice even if a protocol error has occurred (applications should not do this but some do anyway). Fixed in OpenSSL 1.0.2r (Affected 1.0.2-1.0.2q).","2019-02-27",5.9,"Medium",0.17139,{"cveId":54,"description":55,"publishedDate":56,"cvssScore":34,"cvssVersion":22,"severity":23,"isKev":24,"epssScore":57},"CVE-2020-7595","xmlStringLenDecodeEntities in parser.c in libxml2 2.9.10 has an infinite loop in a certain end-of-file situation.","2020-01-21",0.07836,{"cveId":59,"description":60,"publishedDate":61,"cvssScore":62,"cvssVersion":22,"severity":23,"isKev":24,"epssScore":63},"CVE-2022-40304","An issue was discovered in libxml2 before 2.10.3. Certain invalid XML entity definitions can corrupt a hash table key, potentially leading to subsequent logic errors. In one case, a double-free can be provoked.","2022-11-23",7.8,0.05812,{"cveId":65,"description":66,"publishedDate":67,"cvssScore":34,"cvssVersion":22,"severity":23,"isKev":24,"epssScore":68},"CVE-2022-23308","valid.c in libxml2 before 2.9.13 has a use-after-free of ID and IDREF attributes.","2022-02-26",0.0512,{"cveId":70,"description":71,"publishedDate":72,"cvssScore":50,"cvssVersion":22,"severity":51,"isKev":24,"epssScore":73},"CVE-2018-0735","The OpenSSL ECDSA signature algorithm has been shown to be vulnerable to a timing side channel attack. An attacker could use variations in the signing algorithm to recover the private key. Fixed in OpenSSL 1.1.0j (Affected 1.1.0-1.1.0i). Fixed in OpenSSL 1.1.1a (Affected 1.1.1).","2018-10-29",0.04724,[75],{"cveId":32,"description":33,"publishedDate":12,"cvssScore":34,"severity":23,"isKev":4,"epssScore":35,"cisaVulnName":76,"cisaDateAdded":77,"cisaShortDescription":78,"cisaRequiredAction":79},"Service Location Protocol (SLP) Denial-of-Service Vulnerability","2023-11-08","The Service Location Protocol (SLP) contains a denial-of-service (DoS) vulnerability that could allow an unauthenticated, remote attacker to register services and use spoofed UDP traffic to conduct a denial-of-service (DoS) attack with a significant amplification factor.","Apply mitigations per vendor instructions or disable SLP service or port 427\u002FUDP on all systems running on untrusted networks, including those directly connected to the Internet.",{"title":81,"metaDescription":82,"keywords":83,"structuredData":84},"Smi-s Provider by Netapp - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Smi-s Provider by Netapp with 19 tracked vulnerabilities including 0 critical and 1 high-severity issues and 1 CISA KEV vulnerability. Real-time threat intelligence, CVE tracking, and security recommendations.","Smi-s Provider vulnerabilities, Smi-s Provider security, Smi-s Provider CVE, Netapp Smi-s Provider, Smi-s Provider threat intelligence, Netapp security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking, Smi-s Provider KEV, Smi-s Provider exploited vulnerabilities",{"@context":85,"@type":86,"name":87,"description":82,"url":88,"manufacturer":89,"applicationCategory":93,"softwareVersion":94,"mainEntity":95},"https:\u002F\u002Fschema.org","SoftwareApplication","Smi-s Provider","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fnetapp\u002Fsmi-s_provider",{"@type":90,"name":91,"url":92},"Organization","Netapp","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fnetapp","Security Software","Multiple versions",{"@type":96,"name":97,"description":98,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Smi-s Provider Security Vulnerabilities","Security vulnerabilities affecting Smi-s Provider by Netapp",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":100,"apiVersion":101},"2026-10-18T17:30:06.764Z","3.0",[],{"rows":104,"total":11,"capped":24,"failed":9},[105],{"cveId":32,"name":76,"severity":23,"cvss":34,"added":77,"epss":35,"published":106,"ranges":107,"checked":4,"hits":108,"covers":24},"2023-04-25T16:15:09.537",[],[]]