Resource exhaustion in Dell Dellemc System Update - Dsu
CVE-2021-21529
Dell System Update (DSU) 1.9 and earlier versions contain a denial of service vulnerability. A local authenticated malicious user with low privileges may potentially exploit this vulnerability to cause the system to run out of memory by running multiple instances of the vulnerable application.
Vulnerability class: DoS (Denial of Service)
EPSS: 0.002 (11.4th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 3.8 (Low). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:L.
Affected products
- Dell Dellemc System Update - Dsu — versions unspecified
- Dell System_update
Weakness classification (CWE)
References
- security_alert@emc.com (x_refsource_MISC, Vendor Advisory)
Frequently asked questions
- What is CVE-2021-21529?
- CVE-2021-21529 is a low-severity vulnerability in Dell Dellemc System Update - Dsu, classified under Uncontrolled Resource Consumption. CVSS score: 3.8/10. Published 2021-04-02.
- How severe is CVE-2021-21529?
- Low severity. CVSS v3 base score is 3.8 out of 10.