DSA-2025-234: Security Update for Dell NetWorker Multiple Third-Party Component Vulnerabilities
摘要: Dell NetWorker remediation is available for multiple security vulnerabilities that could be exploited by malicious users to compromise the affected system.
本文章適用於
本文章不適用於
本文無關於任何特定產品。
本文未識別所有產品版本。
影響
Critical
詳細資料
| Third-party Component | CVEs | More Information |
| Erlang | CVE-2023-48795, CVE-2025-32433 | https://nvd.nist.gov/vuln/search |
| libjpeg | CVE-2020-14152 | https://nvd.nist.gov/vuln/search |
| libpng | CVE-2004-0597, CVE-2014-9495, CVE-2017-12652, CVE-2010-1205, CVE-2011-2692, CVE-2011-2690, CVE-2015-8540, CVE-2016-3751, CVE-2008-1382, CVE-2006-3334, CVE-2015-8126, CVE-2015-0973, CVE-2008-6218, CVE-2011-3048, CVE-2011-3045, CVE-2009-0040, CVE-2011-2691, CVE-2011-2501, CVE-2010-2249, CVE-2015-7981, CVE-2007-2445, CVE-2013-7353, CVE-2004-0599, CVE-2013-7354, CVE-2004-0421, CVE-2007-5269, CVE-2008-5907, CVE-2006-7244, CVE-2009-5063, CVE-2013-6954, CVE-2004-0598, CVE-2009-2042, CVE-2007-5267, CVE-2007-5266, CVE-2008-3964, CVE-2007-5268, CVE-2012-3425, CVE-2010-0205, CVE-2006-5793 | |
| libTIFF | CVE-2022-3970, CVE-2023-52355, CVE-2024-7006, CVE-2022-0891, CVE-2023-3618, CVE-2023-40745, CVE-2023-3316, CVE-2022-3626, CVE-2022-40090, CVE-2022-3598, CVE-2022-3599, CVE-2022-3597, CVE-2023-41175, CVE-2022-3627, CVE-2022-1355, CVE-2023-1916, CVE-2022-2953, CVE-2023-0796, CVE-2023-0804, CVE-2023-0798, CVE-2023-3164, CVE-2023-0801, CVE-2022-4645, CVE-2023-0799, CVE-2022-48281, CVE-2022-3570, CVE-2022-0562, CVE-2023-0803, CVE-2023-3576, CVE-2022-2867, CVE-2023-2731, CVE-2023-0800, CVE-2022-0561, CVE-2022-0908, CVE-2022-2869, CVE-2023-0795, CVE-2023-0802, CVE-2023-26965, CVE-2023-2908, CVE-2022-2868, CVE-2023-0797, CVE-2022-1354 | |
| OpenSSL | CVE-2022-1292, CVE-2022-2068, CVE-2022-4304, CVE-2023-0215, CVE-2023-0286, CVE-2023-0464, CVE-2023-0465, CVE-2023-0466, CVE-2023-3446, CVE-2023-3817, CVE-2023-5678 | https://nvd.nist.gov/vuln/search |
| RabbitMQ | CVE-2023-46118 | https://nvd.nist.gov/vuln/search |
受影響的產品與補救措施
| Product | Software/Firmware | Affected Versions | Remediated Versions | Link |
| NetWorker | NetWorker Server, NetWorker Client, NetWorker Storage Node | Versions prior to 19.12.0.2 | Version 19.12.0.2 or later | NetWorker Downloads Area |
| Product | Software/Firmware | Affected Versions | Remediated Versions | Link |
| NetWorker | NetWorker Server, NetWorker Client, NetWorker Storage Node | Versions prior to 19.12.0.2 | Version 19.12.0.2 or later | NetWorker Downloads Area |
Notes:
- Platforms: Windows & Linux (All variants and flavors are impacted).
- The Affected Products and Remediation table above may not be a comprehensive list of all affected supported versions and may be updated as more information becomes available.
- To remediate the vulnerabilities addressed in this security advisory, customers may also upgrade directly to NetWorker 19.13, the latest supported release. To learn more about the NetWorker Security Release Schedule, refer to KB 000217430.
- Versions prior to 19.12.0.2 means version 19.12.0.1, and 19.12.x, 19.11.x, 19.10.x, 19.9.x, 19.8.x, 19.7.x, 19.6.x, 19.5.x, 19.4.x family of releases that are still under standard support. For more information on Dell End-of-Life Documents for converged infrastructure, midrange and enterprise storage, and storage networking products kindly refer to Dell End-of-Life Product List for Converged Infrastructure and Storage.
- Unless specified as impacted, the term “later releases” encompasses all NetWorker releases, under standard support, that are of a higher minor or major version than the specified release. Dell recommends that you always upgrade to the latest release/version for your product.
因應措施與緩解措施
None
修訂歷史記錄
| Revision | Date | Description |
| 1.0 | 2025-06-30 | Initial Release |
| 2.0 | 2025-07-01 | Updated libpng CVE in the Third Party Components table from CVE-2004-059 to CVE-2004-0597 |
| 3.0 | 2025-07-30 | Updated to include 19.12.0.2 release |
| 4.0 | 2025-08-18 | Updated the 'Affected and Remediated Versions' and 'Additional Information' sections for clarity |
相關資訊
法律免責聲明
受影響的產品
NetWorker Family文章屬性
文章編號: 000337969
文章類型: Dell Security Advisory
上次修改時間: 18 8月 2025
向其他 Dell 使用者尋求您問題的答案
支援服務
檢查您的裝置是否在支援服務的涵蓋範圍內。