CVE-2019-3721: dell emc open manage system administrator

Vulnerability summary

CVE-2019-3721 is a high (CVSS 7.8) vulnerability in dell emc open manage system administrator. EPSS estimates a 2.58% chance of exploitation in the next 30 days, higher than 85% of scored vulnerabilities.

Timeline

1. 25-04-2019
   PublishedVulnerability first disclosed.
2. 16-09-2024
   Last modifiedVulnerability information updated.

Description

Dell EMC Open Manage System Administrator (OMSA) versions prior to 9.3.0 contain an Improper Range Header Processing Vulnerability. A remote unauthenticated attacker may send crafted requests with overlapping ranges to cause the application to compress each of the requested bytes, resulting in a crash due to excessive memory consumption and preventing users from accessing the system.

• CWE-770Allocation of Resources Without Limits or ThrottlingThe product allocates a reusable resource or group of resources on behalf of an actor without imposing any intended restrictions on the size or number of resources that can be allocated.