DSA-2023-132: Dell Container Storage Modules Security Update for multiple vulnerabilities.

摘要: Dell Container Storage Modules Security Update for multiple vulnerabilities.

本文章適用於 本文章不適用於 本文無關於任何特定產品。 本文未識別所有產品版本。
查看其他資源

影響

High

詳細資料

Third-party Component CVEs More Information
python3 CVE-2020-10735 https://access.redhat.com/errata/RHSA-2023:0833This hyperlink is taking you to a website outside of Dell Technologies.
libtasn1 CVE-2021-46848 https://access.redhat.com/security/cve/cve-2021-46848This hyperlink is taking you to a website outside of Dell Technologies. 
sqlite CVE-2022-35737 https://access.redhat.com/security/cve/cve-2022-35737This hyperlink is taking you to a website outside of Dell Technologies. 
systemd CVE-2022-3821 https://access.redhat.com/security/cve/cve-2022-3821This hyperlink is taking you to a website outside of Dell Technologies. 
libxml2 CVE-2022-40303 https://access.redhat.com/security/cve/cve-2022-40303This hyperlink is taking you to a website outside of Dell Technologies.  
libxml2 CVE-2022-40304 https://access.redhat.com/security/cve/cve-2022-40304This hyperlink is taking you to a website outside of Dell Technologies.  
golang: net/http CVE-2022-41717 https://access.redhat.com/security/cve/cve-2022-41717This hyperlink is taking you to a website outside of Dell Technologies. 
dbus CVE-2022-42010 https://access.redhat.com/security/cve/cve-2022-42010This hyperlink is taking you to a website outside of Dell Technologies.  
dbus CVE-2022-42011 https://access.redhat.com/security/cve/cve-2022-42011This hyperlink is taking you to a website outside of Dell Technologies.  
dbus CVE-2022-42012 https://access.redhat.com/security/cve/cve-2022-42012This hyperlink is taking you to a website outside of Dell Technologies.  
expat CVE-2022-43680 https://access.redhat.com/security/cve/cve-2022-43680This hyperlink is taking you to a website outside of Dell Technologies.  
systemd CVE-2022-4415 https://access.redhat.com/security/cve/cve-2022-4415This hyperlink is taking you to a website outside of Dell Technologies. 
python CVE-2022-45061 https://access.redhat.com/security/cve/cve-2022-45061This hyperlink is taking you to a website outside of Dell Technologies. 
sqlite CVE-2022-46908 https://access.redhat.com/security/cve/cve-2022-46908This hyperlink is taking you to a website outside of Dell Technologies.  
libksba CVE-2022-47629 https://access.redhat.com/security/cve/cve-2022-47629This hyperlink is taking you to a website outside of Dell Technologies. 
glibc CVE-2023-0687 https://access.redhat.com/security/cve/cve-2023-0687This hyperlink is taking you to a website outside of Dell Technologies. 

Dell Technologies 建議所有客戶不僅要參考 CVSS 基本分數，也要將可能會影響與特定安全漏洞相關之潛在嚴重性的所有相關暫時和環境分數納入考量。

受影響的產品與補救措施

CVEs Addressed Product Affected Versions Remediated Versions Link
CVE-2020-10735, CVE-2021-46848, CVE-2022-35737, CVE-2022-3821, CVE-2022-40303, CVE-2022-40304, CVE-2022-41717, CVE-2022-42010, CVE-2022-42011, CVE-2022-42012, CVE-2022-43680, CVE-2022-4415, CVE-2022-45061, CVE-2022-46908, CVE-2022-47629, CVE-2023-0687 Dell Container Storage Modules Versions prior to 1.6 Version 1.6 https://github.com/dell/csm/tree/v1.6.0This hyperlink is taking you to a website outside of Dell Technologies.
CVEs Addressed Product Affected Versions Remediated Versions Link
CVE-2020-10735, CVE-2021-46848, CVE-2022-35737, CVE-2022-3821, CVE-2022-40303, CVE-2022-40304, CVE-2022-41717, CVE-2022-42010, CVE-2022-42011, CVE-2022-42012, CVE-2022-43680, CVE-2022-4415, CVE-2022-45061, CVE-2022-46908, CVE-2022-47629, CVE-2023-0687 Dell Container Storage Modules Versions prior to 1.6 Version 1.6 https://github.com/dell/csm/tree/v1.6.0This hyperlink is taking you to a website outside of Dell Technologies.

因應措施與緩解措施

none

修訂歷史記錄

RevisionDateDescription
1.02023-03-31Initial Release
2.02023-04-03Minor Update
3.02023-09-01Updated for enhanced presentation with no changes to content.

相關資訊

Dell Security Advisories and Notices
Dell Vulnerability Response Policy
CVSS Scoring Guide

法律免責聲明

文章屬性
文章編號: 000211931
文章類型: Dell Security Advisory
上次修改時間: 01 9月 2023
向其他 Dell 使用者尋求您問題的答案
支援服務
檢查您的裝置是否在支援服務的涵蓋範圍內。