First published: Thu Sep 30 2021(Updated: )
Dell PowerScale OneFS contains an Unsynchronized Access to Shared Data in a Multithreaded Context in SMB CA handling. An authenticated user of SMB on a cluster with CA could potentially exploit this vulnerability, leading to a denial of service over SMB.
Credit: security_alert@emc.com
Affected Software | Affected Version | How to fix |
---|---|---|
Dell EMC Isilon OneFS | =8.2.0 | |
Dell EMC Isilon OneFS | =8.2.1 | |
Dell EMC Isilon OneFS | =8.2.2 | |
Dell EMC Isilon OneFS | =9.0.0.0 | |
Dell EMC Isilon OneFS | =9.1.0.0 | |
Dell EMC Isilon OneFS | =9.1.1.0 | |
Dell EMC Isilon OneFS | =9.2.0.0 | |
Dell EMC Isilon OneFS | =9.2.1.0 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2021-36305 has a high severity rating due to the potential for denial of service via SMB exploitation.
To fix CVE-2021-36305, update your Dell EMC PowerScale OneFS to the latest version recommended by Dell.
Authenticated users accessing SMB on affected versions of Dell EMC PowerScale OneFS are vulnerable to CVE-2021-36305.
CVE-2021-36305 affects specific versions of Dell EMC PowerScale OneFS, including 8.2.0, 8.2.1, 8.2.2, and 9.0.0.0 through 9.2.1.0.
CVE-2021-36305 is a local vulnerability that requires authenticated access to exploit.