PT-2021-14579 · Dell · Dell System Update

Published 2021-04-02 · Updated 2021-04-08 · CVE-2021-21529

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Dell System Update (DSU) versions 1.9 and earlier

Description The issue allows a local authenticated malicious user with low privileges to potentially exploit it, causing the system to run out of memory by running multiple instances of the vulnerable application.

Recommendations For Dell System Update (DSU) versions 1.9 and earlier, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Resource Exhaustion

Weakness Enumeration

CWE-400

Related Identifiers

CVE-2021-21529

Affected Products

Dell System Update

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2021-21529 · Security Note
• https://dell.com/support/kbdoc/en-us/000184608/dsa-2021-059-dell-emc-system-update-dsu-security-update-for-denial-of-service-vulnerability · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-21529 · Vendor Advisory
• https://t.me/cvenotify/12567 · Telegram Post