CVE-2022-23159: Medium severity dell emc isilon onefs vulnerability
Dell PowerScale OneFS, 8.2.2 - 9.3.0.x, contain a missing release of memory after effective lifetime vulnerability. An authenticated user with ISIPRIVLOGINSSH and/or ISIPRIVLOGINCONSOLE and ISIPRIVAUTHPROVIDERS privileges could exploit this vulnerability, leading to a Denial-Of-Service. This can also impact a cluster in Compliance mode. Dell recommends to update at the earliest opportunity.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the vulnerability ID for this Dell PowerScale OneFS vulnerability?
The vulnerability ID for this Dell PowerScale OneFS vulnerability is CVE-2022-23159.
What is the severity level of CVE-2022-23159?
The severity level of CVE-2022-23159 is medium with a CVSS score of 6.5.
What is the affected software for CVE-2022-23159?
The affected software for CVE-2022-23159 is Dell PowerScale OneFS versions 8.2.2 to 9.3.0.x.
How can an authenticated user exploit CVE-2022-23159?
An authenticated user with ISI_PRIV_LOGIN_SSH and/or ISI_PRIV_LOGIN_CONSOLE and ISI_PRIV_AUTH_PROVIDERS privileges could exploit CVE-2022-23159, leading to a Denial-Of-Service.
How can I fix CVE-2022-23159?
To fix CVE-2022-23159, you should apply the latest patch or update provided by Dell PowerScale OneFS.