Dell PowerProtect Data Domain Integer Overflow Vulnerability Leading to Denial-of-Service

An integer overflow vulnerability has been identified in Dell PowerProtect Data Domain versions 7.7.1.0 through 8.7, as well as in LTS2026 release versions 8.6.1.0 through 8.6.1.10, LTS2025 release versions 8.3.1.0 through 8.3.1.30, and LTS2024 release versions 7.13.1.0 through 7.13.1.70. This vulnerability allows an unauthenticated attacker with remote access to potentially cause a denial-of-service condition on the affected system.

Impact

Exploitation of this vulnerability can lead to a denial-of-service condition, causing the system to become unresponsive or unavailable.

Remediation

Users can upgrade to Dell PowerProtect Data Domain version 8.8.0.0 or later, or version 8.6.1.20 or later. Instructions for upgrading the Data Domain Operating System are available on the Dell Support website.