Product:
PowerProtect Data Domain
Summary
Dell PowerProtect Data Domain with Data Domain Operating System contains a Heap-based Buffer Overflow vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Denial of service. This issue affects multiple versions of the software, making it critical for users to be aware of the risks.
Details
| Severity | Base Score | CVE |
|---|---|---|
| LOW | 2.3 | CVE-2025-46643 |
Exploitation
To exploit this vulnerability, an attacker must have high privileges and local access to the affected system. By leveraging the Heap-based Buffer Overflow, the attacker can manipulate the memory allocation, potentially causing the system to crash or become unresponsive, resulting in a Denial of service.
Affected Products
- Feature Release versions 7.7.1.0 through 8.4.0.0
- LTS2025 release version 8.3.1.10
- LTS2024 release versions 7.13.1.0 through 7.13.1.40
- LTS 2023 release versions 7.10.1.0 through 7.10.1.70
Mitigation
To mitigate this vulnerability, it is recommended that users update their systems to the latest versions of the Data Domain Operating System. Regularly applying security updates and patches can help protect against potential exploits and ensure system integrity.