Multiple vulnerabilities in Dell EMC Isilon OneFS and Dell EMC PowerScale OneFS



Published: 2022-10-28
Risk Medium
Patch available YES
Number of vulnerabilities 2
CVE-ID CVE-2019-5611
CVE-2020-7451
CWE-ID CWE-20
CWE-401
Exploitation vector Network
Public exploit N/A
Vulnerable software
Subscribe 		PowerScale OneFS
Hardware solutions / Firmware

EMC Isilon OneFS
Client/Desktop applications / Software for system administration

Vendor Dell

Security Bulletin

This security bulletin contains information about 2 vulnerabilities.

1) Input validation error

EUVDB-ID: #VU20354

Risk: Medium

CVSSv3.1: 6.5 [CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2019-5611

CWE-ID: CWE-20 - Improper input validation

Exploit availability: No

Description

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to a missing check in the code of m_pulldown(9) when processing IPv6 packets. A remote attacker can send specially crafted IPv6 traffic to the affected system and perform denial of service (DoS) attack.

Mitigation

Install update from vendor's website.

Vulnerable software versions

PowerScale OneFS: 9.0.0

EMC Isilon OneFS: 8.1.2 - 8.2.2

External links

http://www.dell.com/support/kbdoc/en-us/000153865/dsa-2020-164-dell-emc-isilon-onefs-and-dell-emc-powerscale-onefs-security-update-for-ipv6-vulnerabilities


Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

2) Memory leak

EUVDB-ID: #VU26235

Risk: Low

CVSSv3.1: 3.5 [CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:N/A:N/E:U/RL:O/RC:C]

CVE-ID: CVE-2020-7451

CWE-ID: CWE-401 - Missing release of memory after effective lifetime

Exploit availability: No

Description

The vulnerability allows a remote attacker to gain access to sensitive kernel information.

The vulnerability exists due memory leak in IPv6 implementation in FreeBSD, when processing network traffic over TCP, which leads to disclosure of one byte of kernel memory with every TCP SYN-ACK (or challenge TCP-ACK) segment sent over IPv6. A remote attacker can initiate a TCP connection over IPv6 protocol with an affected system and gain access to sensitive information, stored in kernel.

Mitigation

Install update from vendor's website.

Vulnerable software versions

PowerScale OneFS: 9.0.0

EMC Isilon OneFS: 8.1.2 - 8.2.2

External links

http://www.dell.com/support/kbdoc/en-us/000153865/dsa-2020-164-dell-emc-isilon-onefs-and-dell-emc-powerscale-onefs-security-update-for-ipv6-vulnerabilities


Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.



###SIDEBAR###