DSA-2023-195: Security Update Dell Streaming Data Platform
Shrnutí: Dell Streaming Data Platform remediation is available for multiple security vulnerabilities that could be exploited by malicious users to compromise the affected system.
Tento článek se vztahuje na
Tento článek se nevztahuje na
Tento článek není vázán na žádný konkrétní produkt.
V tomto článku nejsou uvedeny všechny verze produktu.
Vliv
Critical
Podrobnosti
| Third-party Component | CVEs | More Information |
|---|---|---|
| com.fasterxml.jackson.core_jackson-databind | CVE-2022-42003, CVE-2022-42004 | See NVD link below for individual scores for each CVE. https://nvd.nist.gov/  |
| com.google.protobuf_protobuf-java | CVE-2021-22569, CVE-2022-3171 | See NVD link below for individual scores for each CVE. https://nvd.nist.gov/ |
| commons-net_commons-net | CVE-2021-37533 | https://nvd.nist.gov/vuln/detail/CVE-2021-37533 |
| github.com/containerd/containerd | CVE-2022-23471, CVE-2023-25153, CVE-2023-25173 | See NVD link below for individual scores for each CVE. https://nvd.nist.gov/ |
| github.com/opencontainers/runc | CVE-2023-27561 | https://nvd.nist.gov/vuln/detail/CVE-2023-27561 |
| github.com/prometheus/exporter-toolkit | CVE-2022-46146 | https://nvd.nist.gov/vuln/detail/CVE-2022-46146 |
| go | CVE-2022-1705, CVE-2022-1962, CVE-2022-24675, CVE-2022-27664, CVE-2022-28131, CVE-2022-28327, CVE-2022-2879, CVE-2022-2880, CVE-2022-30580, CVE-2022-30630, CVE-2022-30631, CVE-2022-30632, CVE-2022-30633, CVE-2022-30635, CVE-2022-32148, CVE-2022-32189, CVE-2022-32190, CVE-2022-41715, CVE-2022-41716, CVE-2022-41717, CVE-2022-41723, CVE-2022-41724, CVE-2022-41725, CVE-2023-24532 | See NVD link below for individual scores for each CVE. https://nvd.nist.gov/ |
| golang.org/x/crypto | CVE-2021-43565, CVE-2022-27191 | See NVD link below for individual scores for each CVE. https://nvd.nist.gov/ |
| golang.org/x/net | CVE-2022-27664, CVE-2022-41721, CVE-2022-41723 | See NVD link below for individual scores for each CVE. https://nvd.nist.gov/ |
| golang.org/x/sys | CVE-2022-29526 | https://nvd.nist.gov/vuln/detail/CVE-2022-29526 |
| golang.org/x/text/language | CVE-2022-32149 | https://nvd.nist.gov/vuln/detail/CVE-2022-32149 |
| helm.sh/helm/v3 | CVE-2022-23524, CVE-2022-23525, CVE-2022-23526, CVE-2023-25165 | See NVD link below for individual scores for each CVE. https://nvd.nist.gov/ |
| http-cache-semantics | CVE-2022-25881 | https://nvd.nist.gov/vuln/detail/CVE-2022-25881 |
| libcurl,curl | CVE-2023-23914, CVE-2023-23915, CVE-2023-23916 | See NVD link below for individual scores for each CVE. https://nvd.nist.gov/ |
| libgnutls30 | CVE-2023-0361 | https://nvd.nist.gov/vuln/detail/CVE-2023-0361 |
| libcrypto1.1 | CVE-2022-4304, CVE-2022-4450, CVE-2023-0215, CVE-2023-0286 | See NVD link below for individual scores for each CVE. https://nvd.nist.gov/ |
| libcrypto3 | CVE-2022-4203, CVE-2022-4304, CVE-2022-4450, CVE-2023-0215, CVE-2023-0216, CVE-2023-0217, CVE-2023-0286, CVE-2023-0401 | See NVD link below for individual scores for each CVE. https://nvd.nist.gov/ |
| net-snmp-tools | CVE-2022-44792, CVE-2022-44793 | See NVD link below for individual scores for each CVE. https://nvd.nist.gov/ |
| net-snmp-libs | CVE-2022-44792, CVE-2022-44793 | See NVD link below for individual scores for each CVE. https://nvd.nist.gov/ |
| node | CVE-2023-23918, CVE-2023-23920, CVE-2023-23936 | See NVD link below for individual scores for each CVE. https://nvd.nist.gov/ |
| openssl | CVE-2022-2097, CVE-2022-4450, CVE-2023-0215, CVE-2023-0286 | See NVD link below for individual scores for each CVE. https://nvd.nist.gov/ |
Dotčené produkty a náprava
| Product | Affected Versions | Remediated Versions | Link |
|---|---|---|---|
| Dell Streaming Data Platform | Versions 1.1.x through 1.6.x | 1.7.0 | https://www.dell.com/support/home/en-us/product-support/product/streaming-data-platform/drivers |
| Product | Affected Versions | Remediated Versions | Link |
|---|---|---|---|
| Dell Streaming Data Platform | Versions 1.1.x through 1.6.x | 1.7.0 | https://www.dell.com/support/home/en-us/product-support/product/streaming-data-platform/drivers |
The Affected Products and Remediation table above may not be a comprehensive list of all affected supported versions and may be updated as more information becomes available.
Historie změn
| Revision | Date | Description |
|---|---|---|
| 1.0 | 2023-06-05 | Initial Release |
| 2.0 | 2023-08-29 | Updated for enhanced presentation with no changes to content. |
Související informace
Právní upozornění
Dotčené produkty
Streaming Data Platform Family, Streaming Data PlatformVlastnosti článku
Číslo článku: 000214599
Typ článku: Dell Security Advisory
Poslední úprava: 19 zář 2025
Najděte odpovědi na své otázky od ostatních uživatelů společnosti Dell
Služby podpory
Zkontrolujte, zda se na vaše zařízení vztahují služby podpory.