Dell PowerProtect Data Domain Stack-Based Buffer Overflow Vulnerability Allowing Denial-of-Service

A stack-based buffer overflow vulnerability has been identified in the Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions 7.7.1.0 prior to 8.3.0.15, LTS2025 release version 8.3.1.0, LTS2024 release versions 7.13.1.0 through 7.13.1.30, and LTS 2023 release versions 7.10.1.0 through 7.10.1.60. This vulnerability exists in the DDSH command-line interface (CLI) and can be exploited by a high-privileged attacker with local access, potentially leading to a denial-of-service condition.

Impact

Exploitation of this vulnerability can cause a denial-of-service condition, disrupting the availability of the affected system.

Remediation

Users can upgrade to Dell PowerProtect Data Domain DD OS versions 8.4.0.0 or later, or for LTS2025, version 8.3.1.10 or later. Instructions for upgrading the Data Domain Operating System are available on the Dell Support website.