Dell PowerProtect Data Domain Stack-Based Buffer Overflow Vulnerability Allowing Denial-of-Service

A stack-based buffer overflow vulnerability has been identified in Dell PowerProtect Data Domain systems running Data Domain Operating System (DD OS) Feature Release versions 7.7.1.0 prior to 8.3.0.15, as well as LTS2025 release version 8.3.1.0, LTS2024 release versions 7.13.1.0 through 7.13.1.30, and LTS2023 release versions 7.10.1.0 through 7.10.1.60. This vulnerability allows a high-privileged attacker with local access to potentially exploit the issue, leading to a denial-of-service condition.

Impact

Exploitation of this vulnerability can cause a denial-of-service condition, disrupting the availability of the affected system.

Remediation

Users can upgrade to Dell PowerProtect Data Domain DD OS version 8.4.0.0 or later, or version 8.3.1.10 or later, depending on their current version. Instructions for upgrading the Data Domain Operating System are available on the Dell Support website.