CVE Vulnerabilities

CVE-2022-46679

Insufficient Resource Pool

Published: Feb 01, 2023 | Modified: Nov 21, 2024
CVSS 3.x
7.5
HIGH
Source:
NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS 2.x
RedHat/V2
RedHat/V3
Ubuntu

Dell PowerScale OneFS 8.2.x, 9.0.0.x - 9.4.0.x, contain an insufficient resource pool vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability, leading to denial of service.

Weakness

The product’s resource pool is not large enough to handle peak demand, which allows an attacker to prevent others from accessing the resource by using a (relatively) large number of requests for resources.

Affected Software

Name Vendor Start Version End Version
Emc_powerscale_onefs Dell 9.1.0.0 (including) 9.1.0.26 (excluding)
Emc_powerscale_onefs Dell 9.2.1.0 (including) 9.2.1.19 (excluding)
Emc_powerscale_onefs Dell 9.4.0.0 (including) 9.4.0.10 (excluding)

Potential Mitigations

References