DSA-2020-054: Dell EMC Isilon OneFS Security Update for DNS Protocol Vulnerabilities

• Denial of Service Vulnerability

Dell EMC Isilon OneFS versions 8.2.2 and earlier contain a denial of service vulnerability. SmartConnect had an error condition that may be triggered to loop, using CPU and potentially preventing other SmartConnect DNS responses.

CVE-2020-5347

CVSS v3.1 Base Score: 5.3 (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)

NOTE: Some scanners will detect the issue in CVE-2020-5347 as CVE-2004-0789

Affected products:   
Dell EMC Isilon OneFS versions 8.2.2 and earlier

Remediation:    
For Dell EMC Isilon OneFS versions 8.2.2, 8.2.1, and 8.1.2, the fix for this issue is included in the March 2020 Rollup Patches and will be included in future Rollup Patches. For more information on this fix and to obtain a Rollup patch, see the Current Isilon OneFS Patches document.

For Dell EMC Isilon versions 8.2.0 and 8.1.0.4, we recommend that you upgrade to a newer version of OneFS at your earliest opportunity.

Link to Remedies:    
To upgrade your Dell EMC Isilon OneFS system, contact Dell EMC Isilon OneFS Customer Support.