Dell PowerProtect Data Domain Heap-Based Buffer Overflow Vulnerability Leading to Denial-of-Service

A heap-based buffer overflow vulnerability has been identified in Dell PowerProtect Data Domain appliances running Data Domain Operating System (DD OS) versions 7.7.1.0 prior to 8.4.0.0, as well as in LTS2025 release version 8.3.1.10, LTS2024 release versions 7.13.1.0 through 7.13.1.40, and LTS2023 release versions 7.10.1.0 through 7.10.1.70. This vulnerability allows a high-privileged attacker with local access to potentially exploit the issue, leading to a denial-of-service condition.

Impact

Exploitation of this vulnerability can cause a denial-of-service condition, disrupting the availability of the affected system.

Remediation

Users can upgrade to Dell PowerProtect Data Domain DD OS version 8.5.0.0 or later, version 8.3.1.20 or later, version 7.13.1.50 or later, or version 7.10.1.80 or later. For instructions on how to upgrade the Data Domain Operating System, see the Dell Knowledge Base article 'How to Upgrade the Data Domain Operating System'.