Dell PowerProtect Data Domain Stack-Based Buffer Overflow Vulnerability Allowing Arbitrary Command Execution as Root

A stack-based buffer overflow vulnerability has been identified in Dell PowerProtect Data Domain. This issue affects versions 7.7.1.0 through 8.6, as well as LTS2025 release versions 8.3.1.0 through 8.3.1.20 and LTS2024 release versions 7.13.1.0 through 7.13.1.60. The vulnerability allows a high-privileged attacker with local access to exploit the issue, potentially leading to arbitrary command execution with root privileges.

Impact

Exploitation of this vulnerability could result in unauthorized arbitrary command execution with root privileges on the affected system.

Remediation

Users can upgrade to Dell PowerProtect Data Domain versions 8.6.1.10, 8.7.0.0 or later, or version 7.13.1.70 or later. Instructions for upgrading the Data Domain Operating System are available on the Dell Support website.