Dell PowerScale OneFS Security Advisory DSA-2024-453: Multiple CVEs

Critical Vulnerability Information Vulnerability Overview Advisory ID: DSA-2024-453 Product: Dell PowerScale OneFS Impact: Multiple security vulnerabilities that could be exploited by malicious users to gain unauthorized access and cause data leakage. Vulnerability Details CVE IDs: - CVE-2024-45102 - CVE-2024-38474, CVE-2024-38476, CVE-2024-38475, CVE-2024-39573, CVE-2024-28849, CVE-2024-49602 - CVE-2023-49582 - CVE-2023-26481, CVE-2024-49602, CVE-2024-49603, CVE-2024-42426 CVSS Scores: - Highest score: 7.5 (CVE-2023-26481) - Other scores: 6.5, 4.3 Description: - Resource consumption issues accessible over the network, potentially leading to denial of service. - Low-privileged attackers could exploit this vulnerability to cause information disclosure or denial of service. Affected Products and Fixes Affected Versions: - PowerScale OneFS versions 9.4.0.x to 9.5.1.2 - PowerScale OneFS versions 9.5.0.x to 9.5.1.2 - PowerScale OneFS versions 9.8.0.x to 9.9.0.1 Fixed Versions: - PowerScale OneFS version 9.7.1.7 or higher - PowerScale OneFS version 9.5.1.3 or higher - PowerScale OneFS version 9.8.0.3 or higher - PowerScale OneFS version 9.9.0.2 or higher Workspaces and Mitigation Workspaces: None Mitigation: Upgrade to the recommended fixed versions Revision History Latest Revision: 2025-05-15 Content Update: Adjusted fixed version range from 9.10.0.2 to 9.10.1.2 Related Information Legal Disclaimer: Provides important information regarding the use of the advisory and risk assessment. ``` This summary outlines the key details of security vulnerabilities discovered in Dell PowerScale OneFS, including severity, affected versions, and recommended remediation actions.

Goal Reached Thanks to every supporter — we hit 100%!

Dell PowerScale OneFS Security Advisory DSA-2024-453: Multiple CVEs