Headline

CVE-2023-24574: DSA-2023-039: Dell Enterprise SONiC Security Update for an Uncontrolled Resource Consumption Vulnerability

Dell Enterprise SONiC OS, 3.5.3, 4.0.0, 4.0.1, 4.0.2, contains an “Uncontrolled Resource Consumption vulnerability” in authentication component. An unauthenticated remote attacker could potentially exploit this vulnerability, leading to uncontrolled resource consumption by creating permanent home directories for unauthenticated users.

1 year ago

CVE

Open in Source

#vulnerability #auth #dell

Vaikutus

High

Tiedot

Proprietary Code CVEs

Description

CVSS Base Score

CVSS Vector String

CVE-2023-24574

Dell Enterprise SONiC OS 3.versions 5.3, 3.5.4, 4.0.0, 4.0.1, and 4.0.2 contains an “Uncontrolled Resource Consumption vulnerability” in its authentication component. A remote unauthenticated attacker may potentially exploit this vulnerability, leading to an uncontrolled consumption of system resources.

7.5

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Proprietary Code CVEs

Description

CVSS Base Score

CVSS Vector String

CVE-2023-24574

7.5

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Dell Technologies suosittelee, että kaikki asiakkaat ottavat huomioon sekä CVSS-peruspistemäärän että kaikki asiaankuuluvat väliaikaiset ja ympäristöön liittyvät pisteet, jotka voivat vaikuttaa tietyn tietoturvahaavoittuvuuden mahdolliseen vakavuuteen.

Tuotteet, joihin asia vaikuttaa ja tilanteen korjaaminen

Product

Affected Versions

Updated Versions

Link to Update

Enterprise SONiC Distribution

Versions 3.5.3, 3.5.4, 4.0.0, 4.0.1, 4.0.2

4.0.3

Link to update

Product

Affected Versions

Updated Versions