Skip to main content
  • Place orders quickly and easily
  • View orders and track your shipping status
  • Enjoy members-only rewards and discounts
  • Create and access a list of your products
  • Manage your Dell EMC sites, products, and product-level contacts using Company Administration.

Article Number: 000137770


DSA-2019-141: Dell EMC Networking OS10 Security Update for Linux Kernel Vulnerabilities

Summary: DSA-2019-141: Dell EMC Networking OS10 Security Update for Linux Kernel Vulnerabilities

Article Content


Impact

High

Details

An update is available to address the following security vulnerabilities:

CVE-2019-11477 (SACK Panic)
CVE-2019-11478 (SACK Slowness) 
CVE-2019-11479 (Excess Resource Consumption Due to Low MSS Values) 

For more information about any of the Common Vulnerabilities and Exposures (CVEs) mentioned here, consult the National Vulnerability Database (NVD) at http://nvd.nist.gov/home.cfm   SLN318725_en_US__1iC_External_Link_BD_v1. To search for a particular CVE, use the database’s search utility at http://web.nvd.nist.gov/view/vuln/search   SLN318725_en_US__1iC_External_Link_BD_v1.
An update is available to address the following security vulnerabilities:

CVE-2019-11477 (SACK Panic)
CVE-2019-11478 (SACK Slowness) 
CVE-2019-11479 (Excess Resource Consumption Due to Low MSS Values) 

For more information about any of the Common Vulnerabilities and Exposures (CVEs) mentioned here, consult the National Vulnerability Database (NVD) at http://nvd.nist.gov/home.cfm   SLN318725_en_US__1iC_External_Link_BD_v1. To search for a particular CVE, use the database’s search utility at http://web.nvd.nist.gov/view/vuln/search   SLN318725_en_US__1iC_External_Link_BD_v1.
Dell Technologies recommends all customers consider both the CVSS base score and any relevant temporal and environmental scores that may impact the potential severity associated with a particular security vulnerability.

Affected Products and Remediation

Affected products:  

Dell EMC Networking OS10 versions prior to 10.5.0.0.

Resolution:  

The following Dell EMC Networking OS10 version contains a resolution to the vulnerability:
  •     Dell EMC Networking OS10 version 10.5.0.0 and later.

    Customers can find information how to upgrade to the latest version here:  Dell EMC Networking OS10 Info Hub 
Dell EMC recommends all customers upgrade at the earliest opportunity.
Affected products:  

Dell EMC Networking OS10 versions prior to 10.5.0.0.

Resolution:  

The following Dell EMC Networking OS10 version contains a resolution to the vulnerability:
  •     Dell EMC Networking OS10 version 10.5.0.0 and later.

    Customers can find information how to upgrade to the latest version here:  Dell EMC Networking OS10 Info Hub 
Dell EMC recommends all customers upgrade at the earliest opportunity.

Related Information


Article Properties


Product

Networking Solution Resources

Last Published Date

22 May 2021

Article Type

Dell Security Advisory