CVE-2017-14385

An issue was discovered in EMC Data Domain DD OS 5.7 family, versions prior to 5.7.5.6; EMC Data Domain DD OS 6.0 family, versions prior to 6.0.2.9; EMC Data Domain DD OS 6.1 family, versions prior to 6.1.0.21; EMC Data Domain Virtual Edition 2.0 family, all versions; EMC Data Domain Virtual Edition 3.0 family, versions prior to 3.0 SP2 Update 1; and EMC Data Domain Virtual Edition 3.1 family, versions prior to 3.1 Update 2. EMC Data Domain DD OS contains a memory overflow vulnerability in SMBv1 which may potentially be exploited by an unauthenticated remote attacker. An attacker may completely shut down both the SMB service and active directory authentication. This may also allow remote code injection and execution.

• CWE-119

• http://seclists.org/fulldisclosure/2017/Dec/79Mailing List, Third Party Advisory
• http://www.securityfocus.com/bid/102289Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1040027Third Party Advisory, VDB Entry
• http://seclists.org/fulldisclosure/2017/Dec/79Mailing List, Third Party Advisory
• http://www.securityfocus.com/bid/102289Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1040027Third Party Advisory, VDB Entry

Published

Dec 20, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-1438IBM DB2 for Linux, UNIX and Windows 9.7, 10.1, 10.5, and 11.…
• CVE-2017-14380In EMC Isilon OneFS 8.1.0.0, 8.0.1.0 - 8.0.1.1, 8.0.0.0 - 8.…
• CVE-2017-14381Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2017-14382Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2017-14383In Dell EMC VNX2 versions prior to Operating Environment for…
• CVE-2017-14384In Dell Storage Manager versions earlier than 16.3.20, the E…
• CVE-2017-14386The web user interface of Dell 2335dn and 2355dn Multifuncti…
• CVE-2017-14387The NFS service in EMC Isilon OneFS 8.1.0.0, 8.0.1.0 - 8.0.1…
• CVE-2017-14388Cloud Foundry Foundation GrootFS release 0.3.x versions prio…
• CVE-2017-14389An issue was discovered in Cloud Foundry Foundation capi-rel…6.5
• CVE-2017-1439IBM DB2 for Linux, UNIX and Windows 9.7, 10,1, 10.5, and 11.…
• CVE-2017-14390In Cloud Foundry Foundation cf-deployment v0.35.0, a misconf…