PT-2022-22170 · Dell · Dell Powerscale Onefs

Published 2022-10-21 · Updated 2022-10-24 · CVE-2022-34439

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Dell PowerScale OneFS versions 8.2.0.x through 9.4.0.x

Description The issue is related to the allocation of resources without limits or throttling, which could be exploited by a remote unauthenticated attacker. This exploitation could lead to denial of service and performance issues on the affected node.

Recommendations For Dell PowerScale OneFS versions 8.2.0.x through 9.4.0.x, update to a version that contains a fix for this issue to prevent potential denial of service and performance problems.

Fix

Allocation of Resources Without Limits

Weakness Enumeration

CWE-770

Related Identifiers

CVE-2022-34439

Affected Products

Dell Powerscale Onefs

References · 4

• https://dell.com/support/kbdoc/en-us/000204053/dsa-2022-245-dell-emc-powerscale-onefs-security-update-for-multiple-security-updates · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-34439 · Security Note
• https://osv.dev/vulnerability/CVE-2022-34439 · Vendor Advisory
• https://t.me/cibsecurity/51948 · Telegram Post