PT-2019-16666 · Dell Emc · Dell Emc Openmanage System Administrator
CVE-2019-3721
·
Publicado
2019-04-25
·
Atualizado
2023-02-03
CVSS v2.0
7.8
Alta
| Vetor | AV:N/AC:L/Au:N/C:N/I:N/A:C |
Name of the Vulnerable Software and Affected Versions
Dell EMC Open Manage System Administrator (OMSA) versions prior to 9.3.0
Description
The issue is related to improper range header processing. A remote unauthenticated attacker can send crafted requests with overlapping ranges, causing the application to compress each of the requested bytes. This results in a crash due to excessive memory consumption, preventing users from accessing the system.
Recommendations
For versions prior to 9.3.0, update to version 9.3.0 or later to resolve the issue.
Correção
Allocation of Resources Without Limits
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Dell Emc Openmanage System Administrator