DSA-2022-259: Dell Container Storage Modules Security Update for Multiple Vulnerabilities
Oversigt: Dell Container Storage Modules remediation is available for gofsutil that may be exploited by malicious users to compromise the affected system.
Denne artikel gælder for
Denne artikel gælder ikke for
Denne artikel er ikke knyttet til et bestemt produkt.
Det er ikke alle produktversioner, der er identificeret i denne artikel.
Virkning
High
Oplysninger
| Proprietary Code CVEs | Description | CVSS Base Score | CVSS Vector String |
| CVE-2022-34427 | Dell Container Storage Modules 1.3 contains an operating system command injection in gofsutil library. A remote authenticated malicious user with low privileges may potentially exploit this vulnerability to run arbitrary operating system commands on the affected system. | 8.8 | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
CVE-2022-34426 |
Dell Container Storage Modules 1.3 contains a path traversal vulnerability in gofsutil library. A remote authenticated malicious user with low privileges may potentially exploit this vulnerability leading to unintentional access to a path outside of restricted directory. | 8.8 | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
| Proprietary Code CVEs | Description | CVSS Base Score | CVSS Vector String |
| CVE-2022-34427 | Dell Container Storage Modules 1.3 contains an operating system command injection in gofsutil library. A remote authenticated malicious user with low privileges may potentially exploit this vulnerability to run arbitrary operating system commands on the affected system. | 8.8 | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
CVE-2022-34426 |
Dell Container Storage Modules 1.3 contains a path traversal vulnerability in gofsutil library. A remote authenticated malicious user with low privileges may potentially exploit this vulnerability leading to unintentional access to a path outside of restricted directory. | 8.8 | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Berørte produkter og udbedring
| CVEs Addressed | Product | Affected Versions | Updated Version | Link to Update |
| CVE-2022-34427 | Dell Container Storage Modules | Versions 1.9 and earlier | 1.10.0 | https://github.com/dell/gofsutil |
| CVE-2022-34426 |
| CVEs Addressed | Product | Affected Versions | Updated Version | Link to Update |
| CVE-2022-34427 | Dell Container Storage Modules | Versions 1.9 and earlier | 1.10.0 | https://github.com/dell/gofsutil |
| CVE-2022-34426 |
Revisionshistorik
| Revision | Date | Description |
| 1.0 | 2022-09-15 | Initial Release |
Relaterede oplysninger
Ansvarsfraskrivelse
Berørte produkter
Container Storage Modules, Product Security InformationArtikelegenskaber
Artikelnummer: 000203352
Artikeltype: Dell Security Advisory
Senest ændret: 18 sep. 2025
Find svar på dine spørgsmål fra andre Dell-brugere
Supportservices
Kontrollér, om din enhed er dækket af supportservices.