Lucene search

DellVULNRICHMENT:CVE-2024-25969

HistoryMay 14, 2024 - 7:24 a.m.

CVE-2024-25969

2024-05-1407:24:02

CWE-770

dell

github.com

dell powerscale

onefs

allocation vulnerability

local unauthenticated

dos

denial of service

CVSS3

6.2

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

AI Score

6.8

Confidence

High

EPSS

Percentile

9.0%

SSVC

Exploitation

none

Automatable

Technical Impact

partial

JSON

Dell PowerScale OneFS versions 8.2.x through 9.7.0.1 contains an allocation of resources without limits or throttling vulnerability. A local unauthenticated attacker could potentially exploit this vulnerability, leading to denial of service.

ADP Affected

[
  {
    "cpes": [
      "cpe:2.3:o:dell:powerscale_onefs:*:*:*:*:*:*:*:*"
    ],
    "vendor": "dell",
    "product": "powerscale_onefs",
    "versions": [
      {
        "status": "affected",
        "version": "8.2.x",
        "versionType": "semver",
        "lessThanOrEqual": "9.3.0.0"
      },
      {
        "status": "affected",
        "version": "9.4.0.0",
        "versionType": "semver",
        "lessThanOrEqual": "9.4.0.17"
      },
      {
        "status": "affected",
        "version": "9.5.0.0",
        "versionType": "semver",
        "lessThanOrEqual": "9.5.0.7"
      },
      {
        "status": "affected",
        "version": "9.6.0.x",
        "versionType": "semver",
        "lessThanOrEqual": "9.7.0.1"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

References

www.dell.com/support/kbdoc/en-us/000224860/dsa-2024-163-security-update-for-dell-powerscale-onefs-for-multiple-security-vulnerabilities

CVSS3

6.2

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

AI Score

6.8

Confidence

High

EPSS

Percentile

9.0%

SSVC

Exploitation

none

Automatable

Technical Impact

partial

JSON

Related for VULNRICHMENT:CVE-2024-25969