CVE-2021-36305: dell emc_powerscale_onefs Improper Synchronization

Vulnerability summary

CVE-2021-36305 is a medium (CVSS 6.5) Improper Synchronization vulnerability in dell emc_powerscale_onefs. EPSS estimates a 0.83% chance of exploitation in the next 30 days, higher than 56.8% of scored vulnerabilities.

Timeline

1. 12-11-2021
   PublishedVulnerability first disclosed.
2. 16-09-2024
   Last modifiedVulnerability information updated.

Description

Dell PowerScale OneFS contains an Unsynchronized Access to Shared Data in a Multithreaded Context in SMB CA handling. An authenticated user of SMB on a cluster with CA could potentially exploit this vulnerability, leading to a denial of service over SMB.

• CWE-662Improper SynchronizationThe product utilizes multiple threads, processes, components, or systems to allow temporary access to a shared resource that can only be exclusive to one process at a time, but it does not properly synchronize these actions, which might cause simultaneous accesses of this resource by multiple threads or processes.