CVE-2019-3721

Improper Range Header Processing Vulnerability

Medium · published April 25, 2019

CVSS v3.0
4.3
EPSS
3%
Percentile
85.1
In the wild
Unconfirmed
What it is

Dell EMC Open Manage System Administrator (OMSA) versions prior to 9.3.0 contain an Improper Range Header Processing Vulnerability. A remote unauthenticated attacker may send crafted requests with overlapping ranges to cause the application to compress each of the requested bytes, resulting in a crash due to excessive memory consumption and preventing users from accessing the system.

The record
Technical detail
CVSS v3.0
4.3 · MEDIUM
Vector
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
CVSS v4.0
Not supplied
EPSS
0.02584 · 85.1th percentile
Published
2019-04-25T20:17Z
EPSS history
Timeline
  • 25 APR 20:17Z
    Improper Range Header Processing Vulnerability
    cvelistv5