CVE-2024-29176 — Out-of-bounds Write in Dell Powerprotect DD

CWE-787 — Out-of-bounds WriteCWE-119 — Improper Restriction of Operations within the Bounds of a Memory BufferCWE-788 — Access of Memory Location After End of Buffer3 documents3 sources
Severity
8.8HIGHNVD
EPSS
0.6%
top 30.56%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Dell Powerprotect DDDell Data Domain Operating System
Timeline
PublishedJun 26

Description

Dell PowerProtect DD, version(s) 8.0, 7.13.1.0, 7.10.1.30, 7.7.5.40, contain(s) an Out-of-bounds Write vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Code execution.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HExploitability: 2.8 | Impact: 5.9

Affected Packages2 packages

▶CVEListV5dell/powerprotect_ddN/A — 2.7.7+2
▶NVDdell/data_domain_operating_system7.0 — 7.7.5.40+3

🔴Vulnerability Details

2
CVEList
CVE-2024-29176: Dell PowerProtect DD, version(s) 8↗2024-06-26
▶
GHSA
GHSA-vx2h-xx2h-2744: Dell PowerProtect DD, versions prior to 8↗2024-06-26
▶
CVE-2024-29176 — Out-of-bounds Write in Dell | cvebase