DSA-2022-046: Dell EMC Secure Remote Services Virtual Edition Security Update for Multiple Third-Party Component Vulnerabilities
Summary: Dell EMC Secure Remote Services (SRS) Virtual Edition contains remediation for multiple third-party components that may be exploited by malicious users to compromise the affected system. ...
This article applies to
This article does not apply to
This article is not tied to any specific product.
Not all product versions are identified in this article.
Impact
Critical
Details
| Third-party Component | CVEs | More information |
| Apache Commons BeanUtils | CVE-2014-0114 | See NVD (http://nvd.nist.gov/) for individual scores for each CVE |
| CVE-2019-10086 | ||
| Apache Commons Compress | CVE-2016-1000031 | |
| CVE-2018-11771 | ||
| CVE-2021-35515 | ||
| CVE-2021-35516 | ||
| CVE-2021-35517 | ||
| CVE-2021-36090 | ||
| Apache HttpClient | CVE-2012-5783 | |
| CVE-2012-6153 | ||
| CVE-2014-3577 | ||
| CVE-2015-5262 | ||
| CVE-2020-13956 | ||
| Apache Log4j | CVE-2019-17571 | |
| CVE-2020-9488 | ||
| CVE-2021-4104 | ||
| CVE-2022-23302 | ||
| CVE-2022-23305 | ||
| CVE-2022-23307 | ||
| Apache Tomcat | CVE-2012-5568 | |
| CVE-2013-0346 | ||
| CVE-2013-2185 | ||
| CVE-2013-4286 | ||
| CVE-2013-4322 | ||
| CVE-2013-4444 | ||
| CVE-2013-4590 | ||
| CVE-2014-0050 | ||
| CVE-2014-0075 | ||
| CVE-2014-0096 | ||
| CVE-2014-0099 | ||
| CVE-2014-0119 | ||
| CVE-2014-0227 | ||
| CVE-2014-0230 | ||
| CVE-2014-7810 | ||
| CVE-2015-5174 | ||
| CVE-2015-5345 | ||
| CVE-2015-5346 | ||
| CVE-2015-5351 | ||
| CVE-2016-0706 | ||
| CVE-2016-0714 | ||
| CVE-2016-0762 | ||
| CVE-2016-0763 | ||
| CVE-2016-3092 | ||
| CVE-2016-5018 | ||
| CVE-2016-5388 | ||
| CVE-2016-6794 | ||
| CVE-2016-6796 | ||
| CVE-2016-6797 | ||
| CVE-2016-6816 | ||
| CVE-2016-8735 | ||
| CVE-2016-8745 | ||
| CVE-2017-5647 | ||
| CVE-2017-5648 | ||
| CVE-2017-5664 | ||
| CVE-2017-12615 | ||
| CVE-2017-12616 | ||
| CVE-2017-12617 | ||
| CVE-2018-1304 | ||
| CVE-2018-1305 | ||
| CVE-2018-1336 | ||
| CVE-2018-8034 | ||
| CVE-2018-11784 | ||
| CVE-2019-0221 | ||
| CVE-2019-0232 | ||
| CVE-2019-12418 | ||
| CVE-2019-17563 | ||
| CVE-2020-1935 | ||
| CVE-2020-1938 | ||
| CVE-2020-8022 | ||
| CVE-2020-9484 | ||
| CVE-2020-13934 | ||
| CVE-2020-13935 | ||
| CVE-2020-13943 | ||
| CVE-2020-17527 | ||
| CVE-2021-24122 | ||
| CVE-2021-25329 | ||
| CVE-2021-30639 | ||
| CVE-2021-30640 | ||
| Apache Xalan (Java) |
CVE-2012-0881 | |
| CVE-2013-4002 | ||
| CVE-2014-0107 | ||
| CVE-2022-23437 | ||
| Apache XML Graphics Commons | CVE-2020-11988 | |
| BeanShell | CVE-2016-2510 | |
| Commons IO | CVE-2021-29425 | |
| Data Mapper for Jackson | CVE-2019-10172 | |
| Hibernate Validator | CVE-2020-10693 | |
| Java | CVE-2020-14803 | |
| CVE-2021-2161 | ||
| CVE-2021-2388 | ||
| jackson-databind | CVE-2020-25649 | |
| Jsoup | CVE-2021-37714 | |
| JUnit | CVE-2020-15250 | |
| OWASP AntiSamy | CVE-2016-10006 | |
| CVE-2017-14735 | ||
| CVE-2021-35043 | ||
| PostgreSQL JDBC Driver (pgjdbc) | CVE-2020-13692 | |
| CVE-2021-3393 | ||
| CVE-2022-21724 | ||
| Spring Framework | CVE-2020-5421 | |
| Slf4j-ext | CVE-2018-8088 | |
| netty | CVE-2021-21409 | |
| apache2 | CVE-2017-3167 | |
| CVE-2017-3169 | ||
| CVE-2017-7659 | ||
| CVE-2017-7679 | ||
| CVE-2018-1333 | ||
| CVE-2021-34798 | ||
| CVE-2021-39275 | ||
| CVE-2021-40438 | ||
| curl | CVE-2021-22946 | |
| CVE-2021-22947 | ||
| expat | CVE-2021-45960 | |
| CVE-2021-46143 | ||
| CVE-2022-22822 | ||
| CVE-2022-22823 | ||
| CVE-2022-22824 | ||
| CVE-2022-22825 | ||
| CVE-2022-22826 | ||
| CVE-2022-22827 | ||
| glibc | CVE-2016-10228 | |
| CVE-2019-25013 | ||
| CVE-2020-29562 | ||
| CVE-2021-33574 | ||
| Apache2 Supported Components | CVE-2017-9788 | |
| CVE-2017-9789 | ||
| CVE-2017-15710 | ||
| CVE-2017-15715 | ||
| CVE-2018-1283 | ||
| CVE-2018-1301 | ||
| CVE-2018-1302 | ||
| CVE-2018-1303 | ||
| CVE-2018-1312 | ||
| CVE-2019-0196 | ||
| CVE-2019-0197 | ||
| CVE-2019-0211 | ||
| CVE-2019-0215 | ||
| CVE-2019-0217 | ||
| CVE-2019-0220 | ||
| CVE-2019-9517 | ||
| CVE-2019-10081 | ||
| CVE-2019-10082 | ||
| CVE-2019-10092 | ||
| CVE-2019-10097 | ||
| CVE-2019-10098 | ||
| CVE-2020-1927 | ||
| CVE-2020-1934 | ||
| CVE-2021-33193 | ||
| iproute2 | CVE-2019-20795 | |
| libmagic | CVE-2019-18218 | |
| Libncurses & ncurses | CVE-2021-39537 | |
| Libxml2 | CVE-2018-0489 | |
| CVE-2021-3517 | ||
| CVE-2021-3541 | ||
| kernel-default-base | CVE-2018-9517 | |
| CVE-2018-25020 | ||
| CVE-2019-3874 | ||
| CVE-2019-3900 | ||
| CVE-2019-15126 | ||
| CVE-2020-3702 | ||
| CVE-2020-12770 | ||
| CVE-2020-27820 | ||
| CVE-2021-0920 | ||
| CVE-2021-0935 | ||
| CVE-2021-3640 | ||
| CVE-2021-3653 | ||
| CVE-2021-3679 | ||
| CVE-2021-3732 | ||
| CVE-2021-3744 | ||
| CVE-2021-3752 | ||
| CVE-2021-3753 | ||
| CVE-2021-3759 | ||
| CVE-2021-3764 | ||
| CVE-2021-4002 | ||
| CVE-2021-28711 | ||
| CVE-2021-28712 | ||
| CVE-2021-28713 | ||
| CVE-2021-28714 | ||
| CVE-2021-28715 | ||
| CVE-2021-33098 | ||
| CVE-2021-34556 | ||
| CVE-2021-35477 | ||
| CVE-2021-38160 | ||
| CVE-2021-38198 | ||
| CVE-2021-38204 | ||
| CVE-2021-40490 | ||
| CVE-2021-43975 | ||
| CVE-2021-43976 | ||
| CVE-2021-45485 | ||
| CVE-2021-45486 | ||
| libsqlite3 | CVE-2015-3415 | |
| CVE-2016-6153 | ||
| CVE-2017-2518 | ||
| CVE-2017-10989 | ||
| CVE-2018-8740 | ||
| CVE-2018-20346 | ||
| CVE-2019-8457 | ||
| CVE-2019-16168 | ||
| CVE-2019-19244 | ||
| CVE-2019-19244 | ||
| CVE-2019-19603 | ||
| CVE-2019-19645 | ||
| CVE-2019-19646 | ||
| CVE-2019-19923 | ||
| CVE-2019-19880 | ||
| CVE-2019-19924 | ||
| CVE-2019-19925 | ||
| CVE-2019-19926 | ||
| CVE-2019-19959 | ||
| CVE-2019-20218 | ||
| CVE-2020-9327 | ||
| CVE-2020-13434 | ||
| CVE-2020-13435 | ||
| CVE-2020-15358 | ||
| CVE-2020-13630 | ||
| CVE-2020-13631 | ||
| CVE-2020-13632 | ||
| Openssl & libopenssl | CVE-2020-1971 | |
| CVE-2021-3711 | ||
| CVE-2021-3712 | ||
| CVE-2021-23840 | ||
| CVE-2021-23841 | ||
| systemd | CVE-2021-37600 | |
| CVE-2021-33910 | ||
| postgresql10 | CVE-2021-32027 | |
| CVE-2021-32028 | ||
| CVE-2021-32029 | ||
| python | CVE-2021-3733 | |
| CVE-2021-3737 | ||
| CVE-2021-25219 | ||
| ruby | CVE-2020-25613 | |
| CVE-2021-31799 | ||
| CVE-2021-31810 | ||
| CVE-2021-32066 |
| Third-party Component | CVEs | More information |
| Apache Commons BeanUtils | CVE-2014-0114 | See NVD (http://nvd.nist.gov/) for individual scores for each CVE |
| CVE-2019-10086 | ||
| Apache Commons Compress | CVE-2016-1000031 | |
| CVE-2018-11771 | ||
| CVE-2021-35515 | ||
| CVE-2021-35516 | ||
| CVE-2021-35517 | ||
| CVE-2021-36090 | ||
| Apache HttpClient | CVE-2012-5783 | |
| CVE-2012-6153 | ||
| CVE-2014-3577 | ||
| CVE-2015-5262 | ||
| CVE-2020-13956 | ||
| Apache Log4j | CVE-2019-17571 | |
| CVE-2020-9488 | ||
| CVE-2021-4104 | ||
| CVE-2022-23302 | ||
| CVE-2022-23305 | ||
| CVE-2022-23307 | ||
| Apache Tomcat | CVE-2012-5568 | |
| CVE-2013-0346 | ||
| CVE-2013-2185 | ||
| CVE-2013-4286 | ||
| CVE-2013-4322 | ||
| CVE-2013-4444 | ||
| CVE-2013-4590 | ||
| CVE-2014-0050 | ||
| CVE-2014-0075 | ||
| CVE-2014-0096 | ||
| CVE-2014-0099 | ||
| CVE-2014-0119 | ||
| CVE-2014-0227 | ||
| CVE-2014-0230 | ||
| CVE-2014-7810 | ||
| CVE-2015-5174 | ||
| CVE-2015-5345 | ||
| CVE-2015-5346 | ||
| CVE-2015-5351 | ||
| CVE-2016-0706 | ||
| CVE-2016-0714 | ||
| CVE-2016-0762 | ||
| CVE-2016-0763 | ||
| CVE-2016-3092 | ||
| CVE-2016-5018 | ||
| CVE-2016-5388 | ||
| CVE-2016-6794 | ||
| CVE-2016-6796 | ||
| CVE-2016-6797 | ||
| CVE-2016-6816 | ||
| CVE-2016-8735 | ||
| CVE-2016-8745 | ||
| CVE-2017-5647 | ||
| CVE-2017-5648 | ||
| CVE-2017-5664 | ||
| CVE-2017-12615 | ||
| CVE-2017-12616 | ||
| CVE-2017-12617 | ||
| CVE-2018-1304 | ||
| CVE-2018-1305 | ||
| CVE-2018-1336 | ||
| CVE-2018-8034 | ||
| CVE-2018-11784 | ||
| CVE-2019-0221 | ||
| CVE-2019-0232 | ||
| CVE-2019-12418 | ||
| CVE-2019-17563 | ||
| CVE-2020-1935 | ||
| CVE-2020-1938 | ||
| CVE-2020-8022 | ||
| CVE-2020-9484 | ||
| CVE-2020-13934 | ||
| CVE-2020-13935 | ||
| CVE-2020-13943 | ||
| CVE-2020-17527 | ||
| CVE-2021-24122 | ||
| CVE-2021-25329 | ||
| CVE-2021-30639 | ||
| CVE-2021-30640 | ||
| Apache Xalan (Java) |
CVE-2012-0881 | |
| CVE-2013-4002 | ||
| CVE-2014-0107 | ||
| CVE-2022-23437 | ||
| Apache XML Graphics Commons | CVE-2020-11988 | |
| BeanShell | CVE-2016-2510 | |
| Commons IO | CVE-2021-29425 | |
| Data Mapper for Jackson | CVE-2019-10172 | |
| Hibernate Validator | CVE-2020-10693 | |
| Java | CVE-2020-14803 | |
| CVE-2021-2161 | ||
| CVE-2021-2388 | ||
| jackson-databind | CVE-2020-25649 | |
| Jsoup | CVE-2021-37714 | |
| JUnit | CVE-2020-15250 | |
| OWASP AntiSamy | CVE-2016-10006 | |
| CVE-2017-14735 | ||
| CVE-2021-35043 | ||
| PostgreSQL JDBC Driver (pgjdbc) | CVE-2020-13692 | |
| CVE-2021-3393 | ||
| CVE-2022-21724 | ||
| Spring Framework | CVE-2020-5421 | |
| Slf4j-ext | CVE-2018-8088 | |
| netty | CVE-2021-21409 | |
| apache2 | CVE-2017-3167 | |
| CVE-2017-3169 | ||
| CVE-2017-7659 | ||
| CVE-2017-7679 | ||
| CVE-2018-1333 | ||
| CVE-2021-34798 | ||
| CVE-2021-39275 | ||
| CVE-2021-40438 | ||
| curl | CVE-2021-22946 | |
| CVE-2021-22947 | ||
| expat | CVE-2021-45960 | |
| CVE-2021-46143 | ||
| CVE-2022-22822 | ||
| CVE-2022-22823 | ||
| CVE-2022-22824 | ||
| CVE-2022-22825 | ||
| CVE-2022-22826 | ||
| CVE-2022-22827 | ||
| glibc | CVE-2016-10228 | |
| CVE-2019-25013 | ||
| CVE-2020-29562 | ||
| CVE-2021-33574 | ||
| Apache2 Supported Components | CVE-2017-9788 | |
| CVE-2017-9789 | ||
| CVE-2017-15710 | ||
| CVE-2017-15715 | ||
| CVE-2018-1283 | ||
| CVE-2018-1301 | ||
| CVE-2018-1302 | ||
| CVE-2018-1303 | ||
| CVE-2018-1312 | ||
| CVE-2019-0196 | ||
| CVE-2019-0197 | ||
| CVE-2019-0211 | ||
| CVE-2019-0215 | ||
| CVE-2019-0217 | ||
| CVE-2019-0220 | ||
| CVE-2019-9517 | ||
| CVE-2019-10081 | ||
| CVE-2019-10082 | ||
| CVE-2019-10092 | ||
| CVE-2019-10097 | ||
| CVE-2019-10098 | ||
| CVE-2020-1927 | ||
| CVE-2020-1934 | ||
| CVE-2021-33193 | ||
| iproute2 | CVE-2019-20795 | |
| libmagic | CVE-2019-18218 | |
| Libncurses & ncurses | CVE-2021-39537 | |
| Libxml2 | CVE-2018-0489 | |
| CVE-2021-3517 | ||
| CVE-2021-3541 | ||
| kernel-default-base | CVE-2018-9517 | |
| CVE-2018-25020 | ||
| CVE-2019-3874 | ||
| CVE-2019-3900 | ||
| CVE-2019-15126 | ||
| CVE-2020-3702 | ||
| CVE-2020-12770 | ||
| CVE-2020-27820 | ||
| CVE-2021-0920 | ||
| CVE-2021-0935 | ||
| CVE-2021-3640 | ||
| CVE-2021-3653 | ||
| CVE-2021-3679 | ||
| CVE-2021-3732 | ||
| CVE-2021-3744 | ||
| CVE-2021-3752 | ||
| CVE-2021-3753 | ||
| CVE-2021-3759 | ||
| CVE-2021-3764 | ||
| CVE-2021-4002 | ||
| CVE-2021-28711 | ||
| CVE-2021-28712 | ||
| CVE-2021-28713 | ||
| CVE-2021-28714 | ||
| CVE-2021-28715 | ||
| CVE-2021-33098 | ||
| CVE-2021-34556 | ||
| CVE-2021-35477 | ||
| CVE-2021-38160 | ||
| CVE-2021-38198 | ||
| CVE-2021-38204 | ||
| CVE-2021-40490 | ||
| CVE-2021-43975 | ||
| CVE-2021-43976 | ||
| CVE-2021-45485 | ||
| CVE-2021-45486 | ||
| libsqlite3 | CVE-2015-3415 | |
| CVE-2016-6153 | ||
| CVE-2017-2518 | ||
| CVE-2017-10989 | ||
| CVE-2018-8740 | ||
| CVE-2018-20346 | ||
| CVE-2019-8457 | ||
| CVE-2019-16168 | ||
| CVE-2019-19244 | ||
| CVE-2019-19244 | ||
| CVE-2019-19603 | ||
| CVE-2019-19645 | ||
| CVE-2019-19646 | ||
| CVE-2019-19923 | ||
| CVE-2019-19880 | ||
| CVE-2019-19924 | ||
| CVE-2019-19925 | ||
| CVE-2019-19926 | ||
| CVE-2019-19959 | ||
| CVE-2019-20218 | ||
| CVE-2020-9327 | ||
| CVE-2020-13434 | ||
| CVE-2020-13435 | ||
| CVE-2020-15358 | ||
| CVE-2020-13630 | ||
| CVE-2020-13631 | ||
| CVE-2020-13632 | ||
| Openssl & libopenssl | CVE-2020-1971 | |
| CVE-2021-3711 | ||
| CVE-2021-3712 | ||
| CVE-2021-23840 | ||
| CVE-2021-23841 | ||
| systemd | CVE-2021-37600 | |
| CVE-2021-33910 | ||
| postgresql10 | CVE-2021-32027 | |
| CVE-2021-32028 | ||
| CVE-2021-32029 | ||
| python | CVE-2021-3733 | |
| CVE-2021-3737 | ||
| CVE-2021-25219 | ||
| ruby | CVE-2020-25613 | |
| CVE-2021-31799 | ||
| CVE-2021-31810 | ||
| CVE-2021-32066 |
Affected Products & Remediation
| Product | Affected Versions | Updated Versions | Link to Update |
| Dell EMC SRS Virtual Edition | 3.40.00.14 3.42.10.06 3.44.00.08 3.46.00.04 3.48.00.04 3.50.00.06 3.50.10.06 3.50.20.06 3.52.00.08 3.52.10.08 |
3.52.20.08 | The SRS-VE patch is published in SRS SUMA (SUSE Manager) repository and the existing process triggers an Email notification to customer’s SRS-VE primary and secondary contacts. Email notification contains a link to Release notes (along with details of security updates) and a link to update the customer’s VE to the latest patch. Contact Dell EMC SRS Virtual Edition Customer Support for any questions regarding upgrading your Dell EMC SRS Virtual Edition system. |
| Product | Affected Versions | Updated Versions | Link to Update |
| Dell EMC SRS Virtual Edition | 3.40.00.14 3.42.10.06 3.44.00.08 3.46.00.04 3.48.00.04 3.50.00.06 3.50.10.06 3.50.20.06 3.52.00.08 3.52.10.08 |
3.52.20.08 | The SRS-VE patch is published in SRS SUMA (SUSE Manager) repository and the existing process triggers an Email notification to customer’s SRS-VE primary and secondary contacts. Email notification contains a link to Release notes (along with details of security updates) and a link to update the customer’s VE to the latest patch. Contact Dell EMC SRS Virtual Edition Customer Support for any questions regarding upgrading your Dell EMC SRS Virtual Edition system. |
Revision History
| Revision | Date | Description |
| 1.0 | 22-02-2022 | Initial Release |
Related Information
Legal Disclaimer
Products
Product Security InformationArticle Properties
Article Number: 000196606
Article Type: Dell Security Advisory
Last Modified: 19 Sept 2025
Find answers to your questions from other Dell users
Support Services
Check if your device is covered by Support Services.