Dell PowerProtect Data Domain Heap-Based Buffer Overflow Vulnerability Allowing Denial-of-Service

A heap-based buffer overflow vulnerability has been identified in Dell PowerProtect Data Domain systems running Data Domain Operating System (DD OS) versions 7.7.1.0 prior to 8.3.0.15, as well as in LTS2025 release version 8.3.1.0, LTS2024 release versions 7.13.1.0 through 7.13.1.30, and LTS2023 release versions 7.10.1.0 through 7.10.1.60. This vulnerability allows an unauthenticated attacker with remote access to potentially cause a denial-of-service condition on the affected system.

Impact

Exploitation of this vulnerability leads to a denial-of-service condition, causing the system to become unresponsive or unavailable.

Remediation

Users can upgrade to Dell PowerProtect Data Domain DD OS version 8.4.0.0 or later. Instructions for upgrading the Data Domain Operating System are available on the Dell Support website. For Data Domain BoostFS for Linux Ubuntu systems, version 8.4.0.0 or later is recommended.