CVE-2023-27318 — Uncaught Exception in Storagegrid

CWE-248 — Uncaught Exception3 documents3 sources
Severity
7.5HIGHNVD
CNA6.5
EPSS
0.3%
top 45.22%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Netapp Storagegrid
Timeline
PublishedFeb 5

Description

StorageGRID (formerly StorageGRID Webscale) versions 11.6.0 through 11.6.0.13 are susceptible to a Denial of Service (DoS) vulnerability. A successful exploit could lead to a crash of the Local Distribution Router (LDR) service.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HExploitability: 3.9 | Impact: 3.6

Affected Packages2 packages

▶CVEListV5netapp/storagegrid11.6.0 — 11.6.0.13
▶NVDnetapp/storagegrid11.6.0 — 11.6.0.13

🔴Vulnerability Details

2
GHSA
GHSA-c8h3-85xm-jxp3: StorageGRID (formerly StorageGRID Webscale) versions 11↗2024-02-05
▶
CVEList
Denial of Service Vulnerability in StorageGRID (formerly StorageGRID Webscale)↗2024-02-05
▶
CVE-2023-27318 — Uncaught Exception in Storagegrid | cvebase