CVE-2021-36305

Published: Nov 12, 2021Modified: Jun 17, 2026

6.5

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Exploitability: 2.8 / Impact: 3.6

Source: NVD

Description

Dell PowerScale OneFS contains an Unsynchronized Access to Shared Data in a Multithreaded Context in SMB CA handling. An authenticated user of SMB on a cluster with CA could potentially exploit this vulnerability, leading to a denial of service over SMB.

Affected (8)

Products: Dell: Emc Powerscale Onefs

Dell

1 product

Emc Powerscale Onefs

Configuration A

8 vulnerable

Vulnerable Software	Affected Versions
Dell Emc Powerscale Onefs	Version 8.2.0
Dell Emc Powerscale Onefs	Version 8.2.1
Dell Emc Powerscale Onefs	Version 8.2.2
Dell Emc Powerscale Onefs	Version 9.0.0.0
Dell Emc Powerscale Onefs	Version 9.1.0.0
Dell Emc Powerscale Onefs	Version 9.1.1.0
Dell Emc Powerscale Onefs	Version 9.2.0.0
Dell Emc Powerscale Onefs	Version 9.2.1.0

Related CWEs

CWE-662

Improper Synchronization

The product utilizes multiple threads or processes to allow temporary access to a shared resource that can only be exclusive to one process at a time, but it does not properly synchronize these actions, which might cause simultaneous accesses of this resource by multiple threads or processes.

References (2)

https://www.dell.com/support/kbdoc/000192046

Source: security_alert@emc.com

Vendor Advisory

https://www.dell.com/support/kbdoc/000192046

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.