DSA-2020-167: Dell EMC Data Computing Appliance (DCA) Security Update for Multiple Third-Party Component Vulnerabilities
Impact
Critical
Details
Summary:
Multiple components within Dell EMC DCA require a security update to address various vulnerabilities.
| Third-party Component | CVE(s) | More information |
| Kernel | CVE-2019-14816 | See NVD (http://nvd.nist.gov/) for individual scores for each CVE. |
| CVE-2019-14895 | ||
| CVE-2019-14898 | ||
| CVE-2019-14901 | ||
| CVE-2019-17133 | ||
| CVE-2019-11487 | ||
| CVE-2019-17666 | ||
| CVE-2019-19338 | ||
| CVE-2015-9289 | ||
| CVE-2017-17807 | ||
| CVE-2018-7191 | ||
| CVE-2018-19985 | ||
| CVE-2018-20169 | ||
| CVE-2019-3901 | ||
| CVE-2019-9503 | ||
| CVE-2019-10207 | ||
| CVE-2019-10638 | ||
| CVE-2019-10639 | ||
| CVE-2019-11190 | ||
| CVE-2019-11884 | ||
| CVE-2019-12382 | ||
| CVE-2019-13233 | ||
| CVE-2019-13648 | ||
| CVE-2019-14283 | ||
| CVE-2019-14815 | ||
| CVE-2019-15090 | ||
| CVE-2019-15221 | ||
| CVE-2019-15916 | ||
| CVE-2019-16746 | ||
| CVE-2019-18660 | ||
| telnet | CVE-2020-10188 | |
| bash | CVE-2019-9924 | |
| ImageMagick | CVE-2017-11166 | |
| CVE-2017-12805 | ||
| CVE-2017-12806 | ||
| CVE-2017-18251 | ||
| CVE-2017-18252 | ||
| CVE-2017-18254 | ||
| CVE-2017-18271 | ||
| CVE-2017-18273 | ||
| CVE-2017-1000476 | ||
| CVE-2018-8804 | ||
| CVE-2018-9133 | ||
| CVE-2018-10177 | ||
| CVE-2018-10804 | ||
| CVE-2018-10805 | ||
| CVE-2018-11656 | ||
| CVE-2018-12599 | ||
| CVE-2018-12600 | ||
| CVE-2018-13153 | ||
| CVE-2018-14434 | ||
| CVE-2018-14435 | ||
| CVE-2018-14436 | ||
| CVE-2018-14437 | ||
| CVE-2018-15607 | ||
| CVE-2018-16328 | ||
| CVE-2018-16749 | ||
| CVE-2018-16750 | ||
| CVE-2018-18544 | ||
| CVE-2018-20467 | ||
| CVE-2019-7175 | ||
| CVE-2019-7397 | ||
| CVE-2019-7398 | ||
| CVE-2019-9956 | ||
| CVE-2019-10131 | ||
| CVE-2019-10650 | ||
| CVE-2019-11470 | ||
| CVE-2019-11472 | ||
| CVE-2019-11597 | ||
| CVE-2019-11598 | ||
| CVE-2019-12974 | ||
| CVE-2019-12975 | ||
| CVE-2019-12976 | ||
| CVE-2019-12978 | ||
| CVE-2019-12979 | ||
| CVE-2019-13133 | ||
| CVE-2019-13134 | ||
| CVE-2019-13135 | ||
| CVE-2019-13295 | ||
| CVE-2019-13297 | ||
| CVE-2019-13300 | ||
| CVE-2019-13301 | ||
| CVE-2019-13304 | ||
| CVE-2019-13305 | ||
| CVE-2019-13306 | ||
| CVE-2019-13307 | ||
| CVE-2019-13309 | ||
| CVE-2019-13310 | ||
| CVE-2019-13311 | ||
| CVE-2019-13454 | ||
| CVE-2019-14980 | ||
| CVE-2019-14981 | ||
| CVE-2019-15139 | ||
| CVE-2019-15140 | ||
| CVE-2019-15141 | ||
| CVE-2019-16708 | ||
| CVE-2019-16709 | ||
| CVE-2019-16710 | ||
| CVE-2019-16711 | ||
| CVE-2019-16712 | ||
| CVE-2019-16713 | ||
| CVE-2019-17540 | ||
| CVE-2019-17541 | ||
| CVE-2019-19948 | ||
| CVE-2019-19949 | ||
| ansible | CVE-2018-10874 | |
| CVE-2018-10875 | ||
| getnext | CVE-2018-18751 | |
| rsyslog | CVE-2019-17041 | |
| CVE-2019-17042 | ||
| Tomcat | CVE-2020-1938 | |
| JRE Security Vulnerability Oracle April 2020 CPU | CVE-2020-2803 | |
| CVE-2020-2805 | ||
| CVE-2020-18197 | ||
| CVE-2020-2816 | ||
| CVE-2020-2781 | ||
| CVE-2020-2830 | ||
| CVE-2020-2867 | ||
| CVE-2020-2800 | ||
| CVE-2020-2778 | ||
| CVE-2020-2764 | ||
| CVE-2020-2754 | ||
| CVE-2020-2755 | ||
| CVE-2020-2773 | ||
| CVE-2020-2756 | ||
| CVE-2020-2757 |
| Third-party Component | CVE(s) | More information |
| Kernel | CVE-2019-14816 | See NVD (http://nvd.nist.gov/) for individual scores for each CVE. |
| CVE-2019-14895 | ||
| CVE-2019-14898 | ||
| CVE-2019-14901 | ||
| CVE-2019-17133 | ||
| CVE-2019-11487 | ||
| CVE-2019-17666 | ||
| CVE-2019-19338 | ||
| CVE-2015-9289 | ||
| CVE-2017-17807 | ||
| CVE-2018-7191 | ||
| CVE-2018-19985 | ||
| CVE-2018-20169 | ||
| CVE-2019-3901 | ||
| CVE-2019-9503 | ||
| CVE-2019-10207 | ||
| CVE-2019-10638 | ||
| CVE-2019-10639 | ||
| CVE-2019-11190 | ||
| CVE-2019-11884 | ||
| CVE-2019-12382 | ||
| CVE-2019-13233 | ||
| CVE-2019-13648 | ||
| CVE-2019-14283 | ||
| CVE-2019-14815 | ||
| CVE-2019-15090 | ||
| CVE-2019-15221 | ||
| CVE-2019-15916 | ||
| CVE-2019-16746 | ||
| CVE-2019-18660 | ||
| telnet | CVE-2020-10188 | |
| bash | CVE-2019-9924 | |
| ImageMagick | CVE-2017-11166 | |
| CVE-2017-12805 | ||
| CVE-2017-12806 | ||
| CVE-2017-18251 | ||
| CVE-2017-18252 | ||
| CVE-2017-18254 | ||
| CVE-2017-18271 | ||
| CVE-2017-18273 | ||
| CVE-2017-1000476 | ||
| CVE-2018-8804 | ||
| CVE-2018-9133 | ||
| CVE-2018-10177 | ||
| CVE-2018-10804 | ||
| CVE-2018-10805 | ||
| CVE-2018-11656 | ||
| CVE-2018-12599 | ||
| CVE-2018-12600 | ||
| CVE-2018-13153 | ||
| CVE-2018-14434 | ||
| CVE-2018-14435 | ||
| CVE-2018-14436 | ||
| CVE-2018-14437 | ||
| CVE-2018-15607 | ||
| CVE-2018-16328 | ||
| CVE-2018-16749 | ||
| CVE-2018-16750 | ||
| CVE-2018-18544 | ||
| CVE-2018-20467 | ||
| CVE-2019-7175 | ||
| CVE-2019-7397 | ||
| CVE-2019-7398 | ||
| CVE-2019-9956 | ||
| CVE-2019-10131 | ||
| CVE-2019-10650 | ||
| CVE-2019-11470 | ||
| CVE-2019-11472 | ||
| CVE-2019-11597 | ||
| CVE-2019-11598 | ||
| CVE-2019-12974 | ||
| CVE-2019-12975 | ||
| CVE-2019-12976 | ||
| CVE-2019-12978 | ||
| CVE-2019-12979 | ||
| CVE-2019-13133 | ||
| CVE-2019-13134 | ||
| CVE-2019-13135 | ||
| CVE-2019-13295 | ||
| CVE-2019-13297 | ||
| CVE-2019-13300 | ||
| CVE-2019-13301 | ||
| CVE-2019-13304 | ||
| CVE-2019-13305 | ||
| CVE-2019-13306 | ||
| CVE-2019-13307 | ||
| CVE-2019-13309 | ||
| CVE-2019-13310 | ||
| CVE-2019-13311 | ||
| CVE-2019-13454 | ||
| CVE-2019-14980 | ||
| CVE-2019-14981 | ||
| CVE-2019-15139 | ||
| CVE-2019-15140 | ||
| CVE-2019-15141 | ||
| CVE-2019-16708 | ||
| CVE-2019-16709 | ||
| CVE-2019-16710 | ||
| CVE-2019-16711 | ||
| CVE-2019-16712 | ||
| CVE-2019-16713 | ||
| CVE-2019-17540 | ||
| CVE-2019-17541 | ||
| CVE-2019-19948 | ||
| CVE-2019-19949 | ||
| ansible | CVE-2018-10874 | |
| CVE-2018-10875 | ||
| getnext | CVE-2018-18751 | |
| rsyslog | CVE-2019-17041 | |
| CVE-2019-17042 | ||
| Tomcat | CVE-2020-1938 | |
| JRE Security Vulnerability Oracle April 2020 CPU | CVE-2020-2803 | |
| CVE-2020-2805 | ||
| CVE-2020-18197 | ||
| CVE-2020-2816 | ||
| CVE-2020-2781 | ||
| CVE-2020-2830 | ||
| CVE-2020-2867 | ||
| CVE-2020-2800 | ||
| CVE-2020-2778 | ||
| CVE-2020-2764 | ||
| CVE-2020-2754 | ||
| CVE-2020-2755 | ||
| CVE-2020-2773 | ||
| CVE-2020-2756 | ||
| CVE-2020-2757 |
Affected Products & Remediation
Affected products:
EMC Software: Only EMC Data Computing Appliance (DCA) version 4.0.0.0 can be upgraded to version 4.1.0.0. To upgrade an earlier DCA version, migrate to version 4.0.0.0 (THEL7) and then to version 4.1.0.0.
Resolution:
The following Dell EMC DCA release addresses this vulnerability:
-
Dell EMC DCA version: 4.1.0.0
For Dell EMC DCA version 4.1.0.0 and later, the security update is contained in the release 4.1.0.0.
Dell EMC recommends all customers upgrade at the earliest opportunity. Contact Dell EMC DCA customer support to download the required rpm file and install it.
Affected products:
EMC Software: Only EMC Data Computing Appliance (DCA) version 4.0.0.0 can be upgraded to version 4.1.0.0. To upgrade an earlier DCA version, migrate to version 4.0.0.0 (THEL7) and then to version 4.1.0.0.
Resolution:
The following Dell EMC DCA release addresses this vulnerability:
-
Dell EMC DCA version: 4.1.0.0
For Dell EMC DCA version 4.1.0.0 and later, the security update is contained in the release 4.1.0.0.
Dell EMC recommends all customers upgrade at the earliest opportunity. Contact Dell EMC DCA customer support to download the required rpm file and install it.