DSA-2023-266: Security Update for Dell NetWorker vProxy Linux dmidecode Vulnerabilities
Summary: Dell NetWorker vProxy remediation is available for Linux dmidecode that could be exploited by malicious users to compromise the affected system.
Impact
High
Details
| Third-party Component | CVEs | More Information |
|---|---|---|
| Linux dmidecode | CVE-2023-30630 | https://nvd.nist.gov/vuln/detail/CVE-2023-30630 |
Affected Products & Remediation
| CVEs Addressed | Product | Software/Firmware | Affected Versions | Remediated Versions | Link |
|---|---|---|---|---|---|
| CVE-2023-30630 | Dell NetWorker vProxy | vProxy | Versions 19.9, 19.9.0.1 | Version 19.9.0.2 vProxy OVA | https://www.dell.com/support/home/product-support/product/networker/drivers |
| CVE-2023-30630 | Dell NetWorker vProxy | vProxy | Versions 19.8 through 19.8.0.2 | Version 19.8.0.3 vProxy OVA | https://www.dell.com/support/home/product-support/product/networker/drivers |
| CVE-2023-30630 | Dell NetWorker vProxy | vProxy | Versions 19.7 through 19.7.0.5 | Version 19.9.0.2 vProxy OVA | https://www.dell.com/support/home/product-support/product/networker/drivers |
| CVE-2023-30630 | Dell NetWorker vProxy | vProxy | Version 19.7.1 | Version 19.9.0.2 vProxy OVA | https://www.dell.com/support/home/product-support/product/networker/drivers |
| CVE-2023-30630 | Dell NetWorker vProxy | vProxy | Versions prior to 19.7 | Version 19.9.0.2 vProxy OVA | https://www.dell.com/support/home/product-support/product/networker/drivers |
| CVEs Addressed | Product | Software/Firmware | Affected Versions | Remediated Versions | Link |
|---|---|---|---|---|---|
| CVE-2023-30630 | Dell NetWorker vProxy | vProxy | Versions 19.9, 19.9.0.1 | Version 19.9.0.2 vProxy OVA | https://www.dell.com/support/home/product-support/product/networker/drivers |
| CVE-2023-30630 | Dell NetWorker vProxy | vProxy | Versions 19.8 through 19.8.0.2 | Version 19.8.0.3 vProxy OVA | https://www.dell.com/support/home/product-support/product/networker/drivers |
| CVE-2023-30630 | Dell NetWorker vProxy | vProxy | Versions 19.7 through 19.7.0.5 | Version 19.9.0.2 vProxy OVA | https://www.dell.com/support/home/product-support/product/networker/drivers |
| CVE-2023-30630 | Dell NetWorker vProxy | vProxy | Version 19.7.1 | Version 19.9.0.2 vProxy OVA | https://www.dell.com/support/home/product-support/product/networker/drivers |
| CVE-2023-30630 | Dell NetWorker vProxy | vProxy | Versions prior to 19.7 | Version 19.9.0.2 vProxy OVA | https://www.dell.com/support/home/product-support/product/networker/drivers |
The Affected Products and Remediation table above may not be a comprehensive list of all affected supported versions and may be updated as more information becomes available.
- Platforms: Windows & Linux (All variants and flavors are impacted)
- Please refer to the installation version NetWorker 19.8.0.3 vProxy OVA under the Download list on Support Site with the Description as Linux SLES12 SP5 (64-bit). NetWorker vProxy virtual appliance. Version 4.3.0-47.ova
- Please refer to the installation version NetWorker 19.9.0.2 vProxy OVA under the Download list on Support Site with the Description as Linux SLES12 SP5 (64-bit). NetWorker vProxy virtual appliance. Version 4.3.0-49.ova
- Versions prior to 19.7 means versions 19.6.x, 19.5.x, 19.4.x family of releases that are still under standard support. For more information on Dell End-of-Life Documents for converged infrastructure, midrange and enterprise storage, and storage networking products kindly refer to: https://www.dell.com/support/kbdoc/000185734/all-dell-emc-end-of-life-documents?lang=en
- Dell recommends that you always upgrade to the latest release/version for your product
Revision History
| Revision | Date | Description |
| 1.0 | 2023-09-08 | Initial Release. |
| 2.0 | 2023-09-26 | Updated "Remediated Versions" column under "Affected Products and Remediation" section as per the latest Version Release (NetWorker 19.9.0.2 vProxy OVA). |
| 3.0 | 2023-09-26 | Added Points 2 and 3 under "Additional Info" Section as per the latest Version Releases. |
| 4.0 | 2023-09-27 | Added Point 5 Under "Additional Info" Section |
Related Information
Legal Disclaimer
Affected Products
NetWorker Family, NetWorker, NetWorker Series, NetWorker Module, Product Security InformationArticle Properties
Article Number: 000217447
Article Type: Dell Security Advisory
Last Modified: 27 Sep 2023
Find answers to your questions from other Dell users
Support Services
Check if your device is covered by Support Services.
Article Properties
Article Number: 000217447
Article Type: Dell Security Advisory
Last Modified: 27 Sep 2023
Find answers to your questions from other Dell users
Support Services
Check if your device is covered by Support Services.