DSA-2022-266: Dell NetWorker vProxy Security Update for Multiple Third-Party Vulnerabilities

摘要: Dell NetWorker vProxy remediation is available for multiple security vulnerabilities that may be exploited by malicious users to compromise the affected system.

本文适用于 本文不适用于 本文并非针对某种特定的产品。 本文并非包含所有产品版本。

影响

Critical

详情

Third-party Component  CVEs More information
kernel CVE-2020-26541
https://www.tenable.com/plugins/nessus/163096
CVE-2021-4157
CVE-2022-1012
CVE-2022-1679
CVE-2022-2318
CVE-2022-20132
CVE-2022-20141
CVE-2022-20154
CVE-2022-26365
CVE-2022-29900
CVE-2022-29901
CVE-2022-33740
CVE-2022-33741
CVE-2022-33742
CVE-2022-33981
curl CVE-2022-32206 https://www.tenable.com/plugins/nessus/162966
 
CVE-2022-32208

 
OpenSSL CVE-2022-2097 https://www.tenable.com/plugins/nessus/162959
 
rsyslog CVE-2022-24903 https://www.tenable.com/plugins/nessus/162946
 
Third-party Component  CVEs More information
kernel CVE-2020-26541
https://www.tenable.com/plugins/nessus/163096
CVE-2021-4157
CVE-2022-1012
CVE-2022-1679
CVE-2022-2318
CVE-2022-20132
CVE-2022-20141
CVE-2022-20154
CVE-2022-26365
CVE-2022-29900
CVE-2022-29901
CVE-2022-33740
CVE-2022-33741
CVE-2022-33742
CVE-2022-33981
curl CVE-2022-32206 https://www.tenable.com/plugins/nessus/162966
 
CVE-2022-32208

 
OpenSSL CVE-2022-2097 https://www.tenable.com/plugins/nessus/162959
 
rsyslog CVE-2022-24903 https://www.tenable.com/plugins/nessus/162946
 
Dell Technologies 建议所有客户考虑 CVSS 基本分数以及任何相关的时间和环境分数,这可能会影响与特定安全漏洞相关的潜在严重程度。

受影响的产品和补救措施

 
Product Affected Versions Updated Versions Link to Update
NetWorker vProxy 4.3.0-31 and earlier Version 4.3.0-34 
NetWorker vProxy and NetWorker compatibility documentation are at: E-Lab Interoperability Navigator 2.0-Components View (dell.com).
https://dl.dell.com/downloads/DLD3204_NetWorker-vProxy-OVA-(4.3.0-34).ova

NOTE: These vulnerabilities are reported on NetWorker vProxy version 4.3.0-31. All the reported CVEs are addressed in NetWorker vProxy 4.3.0-34.The latest NetWorker vProxy (version 4.3.0-34) can be used with any NetWorker 19.6.1, 19.6.1.2, 19.7.0, and 19.7.0.1 version. NetWorker vProxy is compatible with all current and previous NetWorker versions (from NetWorker 19.4 onwards). See the above E-Lab link for the compatibility matrix.
 
Product Affected Versions Updated Versions Link to Update
NetWorker vProxy 4.3.0-31 and earlier Version 4.3.0-34 
NetWorker vProxy and NetWorker compatibility documentation are at: E-Lab Interoperability Navigator 2.0-Components View (dell.com).
https://dl.dell.com/downloads/DLD3204_NetWorker-vProxy-OVA-(4.3.0-34).ova

NOTE: These vulnerabilities are reported on NetWorker vProxy version 4.3.0-31. All the reported CVEs are addressed in NetWorker vProxy 4.3.0-34.The latest NetWorker vProxy (version 4.3.0-34) can be used with any NetWorker 19.6.1, 19.6.1.2, 19.7.0, and 19.7.0.1 version. NetWorker vProxy is compatible with all current and previous NetWorker versions (from NetWorker 19.4 onwards). See the above E-Lab link for the compatibility matrix.

修订历史记录

RevisionDateDescription
1.02022-09-20Initial Release

相关信息

受影响的产品

NetWorker Family, NetWorker, NetWorker Series, NetWorker Module, Product Security Information
文章属性
文章编号: 000203560
文章类型: Dell Security Advisory
上次修改时间: 09 9月 2025
从其他戴尔用户那里查找问题的答案
支持服务
检查您的设备是否在支持服务涵盖的范围内。