CVE-2023-43076 — Missing Release of Memory after Effective Lifetime in Dell Powerscale Onefs

CWE-401 — Missing Release of Memory after Effective Lifetime3 documents3 sources
Severity
6.5MEDIUMNVD
EPSS
0.6%
top 31.28%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Dell Powerscale Onefs
Timeline
PublishedNov 2

Description

Dell PowerScale OneFS 8.2.x,9.0.0.x-9.5.0.x contains a denial-of-service vulnerability. A low privilege remote attacker could potentially exploit this vulnerability to cause an out of memory (OOM) condition.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HExploitability: 2.8 | Impact: 3.6

Affected Packages2 packages

▶NVDdell/powerscale_onefs9.2.1 — 9.2.1.24+3
▶CVEListV5dell/powerscale_onefsVersion 9.2.1.0 through 9.2.1.23

🔴Vulnerability Details

2
CVEList
CVE-2023-43076: Dell PowerScale OneFS 8↗2023-11-02
▶
GHSA
GHSA-843c-pxx2-hgpf: Dell PowerScale OneFS 8↗2023-11-02
▶
CVE-2023-43076 — Dell Powerscale Onefs vulnerability | cvebase