PT-2020-18419 · Dell Emc · Dell Emc Isilon Onefs

Published 2020-04-03 · Updated 2020-04-06 · CVE-2020-5347

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Dell EMC Isilon OneFS versions 8.2.2 and earlier

Description The issue is related to a denial of service condition in SmartConnect. An error condition may cause it to loop, consuming CPU resources and potentially preventing other SmartConnect DNS responses.

Recommendations For versions 8.2.2 and earlier, update to a version later than 8.2.2 to resolve the issue.

Fix

Resource Exhaustion

Weakness Enumeration

CWE-400

Related Identifiers

CVE-2020-5347

Affected Products

Dell Emc Isilon Onefs

References · 3

• https://osv.dev/vulnerability/CVE-2020-5347 · Vendor Advisory
• https://dell.com/support/security/en-us/details/542190/DSA-2020-054-Dell-EMC-Isilon-OneFS-Security-Update-for-DNS-Protocol-Vulnerabilities · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-5347 · Security Note