DSA-2021-129: Dell EMC PowerStore Family Security Update for Multiple Third-Party Component Vulnerabilities
Summary: Dell EMC PowerStore Family remediation is available for multiple security vulnerabilities that may be exploited by malicious users to compromise the affected system.
This article applies to
This article does not apply to
This article is not tied to any specific product.
Not all product versions are identified in this article.
Impact
Critical
Details
| Third-Party Component | CVEs | More Information |
| Apache HttpClient | CVE-2020-13956 | See NVD (http://nvd.nist.gov/) for individual scores for each CVE. |
| bind | CVE-2020-8622 | |
| CVE-2020-8623 | ||
| CVE-2020-8624 | ||
| CVE-2020-8625 | ||
| Dell BSAFE™ Micro Edition Suite | CVE-2020-5359 | See DSA-2020-114: KB article 181098: DSA-2020-114: Dell BSAFE™ Micro Edition Suite Multiple Security Vulnerabilities |
| CVE-2020-5360 | ||
| colord-libs | CVE-2019-3820 | See NVD (http://nvd.nist.gov/) for individual scores for each CVE. |
| docker | CVE-2019-13509 | |
| CVE-2020-27534 | ||
| CVE-2021-21284 | ||
| CVE-2021-21285 | ||
| FasterXML jackson-databind | CVE-2020-25649 | |
| CVE-2020-35490 | ||
| CVE-2020-35491 | ||
| CVE-2020-35728 | ||
| CVE-2020-36179 | ||
| CVE-2020-36180 | ||
| CVE-2020-36181 | ||
| CVE-2020-36182 | ||
| CVE-2020-36183 | ||
| CVE-2020-36184 | ||
| CVE-2020-36185 | ||
| CVE-2020-36186 | ||
| CVE-2020-36187 | ||
| CVE-2020-36188 | ||
| CVE-2020-36189 | ||
| CVE-2020-25649 | ||
| CVE-2020-35490 | ||
| CVE-2020-35491 | ||
| CVE-2020-35728 | ||
| FasterXML jackson-databind (eVE container) | CVE-2020-9548 | |
| CVE-2020-9547 | ||
| CVE-2020-9546 | ||
| CVE-2020-11620 | ||
| CVE-2020-11619 | ||
| CVE-2020-11113 | ||
| CVE-2020-11112 | ||
| CVE-2020-11111 | ||
| CVE-2020-10969 | ||
| CVE-2020-10968 | ||
| CVE-2020-10673 | ||
| CVE-2020-10672 | ||
| CVE-2019-20330 | ||
| CVE-2019-17267 | ||
| CVE-2019-16335 | ||
| CVE-2019-14893 | ||
| CVE-2019-14892 | ||
| CVE-2019-14540 | ||
| CVE-2019-14439 | ||
| CVE-2019-14379 | ||
| freetype | CVE-2020-15999 | |
| glibc | CVE-2019-25013 | |
| CVE-2020-10029 | ||
| CVE-2020-29573 | ||
| gsettings-desktop-schemas | CVE-2019-3820 | |
| guava | CVE-2020-8908 | |
| httpd, httpd-tools, mod_ssl | CVE-2017-15710 | |
| CVE-2017-15715 | ||
| CVE-2018-1283 | ||
| CVE-2018-1301 | ||
| CVE-2018-1303 | ||
| CVE-2018-17199 | ||
| CVE-2019-10098 | ||
| CVE-2020-1927 | ||
| CVE-2020-1934 | ||
| httpd (eVE container) | CVE-2017-9788 | |
| CVE-2017-7679 | ||
| CVE-2017-3169 | ||
| CVE-2017-3167 | ||
| CVE-2015-3183 | ||
| CVE-2015-3185 | ||
| Intel | CVE-2019-11139 | Intel-SA-00271 |
| CVE-2019-11136 | Intel-SA-00280 | |
| CVE-2019-11137 | ||
| CVE-2019-0152 | Intel-SA-00240 | |
| CVE-2019-0119 | Intel-SA-00223 | |
| CVE-2019-0126 | ||
| CVE-2019-11109 | Intel-SA-00241 | |
| CVE-2019-14607 | Intel-SA-00317 | |
| Java-1_8_0-openjdk | CVE-2020-14664 | Oracle Critical Patch Update Advisory – July 2020 |
| CVE-2020-14583 | ||
| CVE-2020-14593 | ||
| CVE-2020-14562 | ||
| CVE-2020-14621 | ||
| CVE-2020-14556 | ||
| CVE-2020-14573 | ||
| CVE-2020-14581 | ||
| CVE-2020-14578 | ||
| CVE-2020-14579 | ||
| CVE-2020-14577 | ||
| CVE-2020-14792 | Oracle Critical Patch Update Advisory – October 2020 | |
| CVE-2020-14781 | ||
| CVE-2020-14782 | ||
| CVE-2020-14797 | ||
| CVE-2020-14779 | ||
| CVE-2020-14796 | ||
| CVE-2020-14798 | ||
| CVE-2020-14803 | Oracle Critical Patch Update Advisory – January 2021 | |
| libwbclient | CVE-2020-1472 | See NVD (http://nvd.nist.gov/) for individual scores for each CVE. |
| CVE-2020-14318 | ||
| CVE-2020-14323 | ||
| libX11 | CVE-2020-14363 | |
| libxkbcommon | CVE-2018-14598 | |
| CVE-2018-14599 | ||
| CVE-2018-14600 | ||
| CVE-2018-15853 | ||
| CVE-2018-15854 | ||
| CVE-2018-15855 | ||
| CVE-2018-15856 | ||
| CVE-2018-15857 | ||
| CVE-2018-15859 | ||
| CVE-2018-15861 | ||
| CVE-2018-15862 | ||
| CVE-2018-15863 | ||
| CVE-2018-15864 | ||
| net-snmp | CVE-2020-15862 | |
| openssl | CVE-2020-1971 | |
| pacemaker | CVE-2020-25654 | |
| perl | CVE-2020-10543 | |
| CVE-2020-10878 | ||
| CVE-2020-12723 | ||
| pillow | CVE-2020-35653 | |
| CVE-2020-35654 | ||
| CVE-2020-35655 | ||
| postgres | CVE-2020-25694 | |
| CVE-2020-25695 | ||
| CVE-2020-25696 | ||
| python3 | CVE-2019-20907 | |
| CVE-2020-14422 | ||
| python3 (eVE Container) | CVE-2019-10160 | |
| CVE-2017-1000158 | ||
| CVE-2016-4472 | ||
| CVE-2019-9674 | ||
| CVE-2020-8492 | ||
| CVE-2019-18348 | ||
| CVE-2019-16056 | ||
| CVE-2018-20852 | ||
| CVE-2018-14647 | ||
| CVE-2018-1000802 | ||
| CVE-2017-9233 | ||
| CVE-2016-0718 | ||
| CVE-2016-9063 | ||
| resource-agent | CVE-2020-11078 | |
| samba | CVE-2020-1472 | |
| CVE-2020-14318 | ||
| CVE-2020-14323 | ||
| sudo | CVE-2021-3156 | |
| twisted | CVE-2016-1000111 | |
| CVE-2019-12387 | ||
| Urllib3 | CVE-2020-26137 |
| Third-Party Component | CVEs | More Information |
| Apache HttpClient | CVE-2020-13956 | See NVD (http://nvd.nist.gov/) for individual scores for each CVE. |
| bind | CVE-2020-8622 | |
| CVE-2020-8623 | ||
| CVE-2020-8624 | ||
| CVE-2020-8625 | ||
| Dell BSAFE™ Micro Edition Suite | CVE-2020-5359 | See DSA-2020-114: KB article 181098: DSA-2020-114: Dell BSAFE™ Micro Edition Suite Multiple Security Vulnerabilities |
| CVE-2020-5360 | ||
| colord-libs | CVE-2019-3820 | See NVD (http://nvd.nist.gov/) for individual scores for each CVE. |
| docker | CVE-2019-13509 | |
| CVE-2020-27534 | ||
| CVE-2021-21284 | ||
| CVE-2021-21285 | ||
| FasterXML jackson-databind | CVE-2020-25649 | |
| CVE-2020-35490 | ||
| CVE-2020-35491 | ||
| CVE-2020-35728 | ||
| CVE-2020-36179 | ||
| CVE-2020-36180 | ||
| CVE-2020-36181 | ||
| CVE-2020-36182 | ||
| CVE-2020-36183 | ||
| CVE-2020-36184 | ||
| CVE-2020-36185 | ||
| CVE-2020-36186 | ||
| CVE-2020-36187 | ||
| CVE-2020-36188 | ||
| CVE-2020-36189 | ||
| CVE-2020-25649 | ||
| CVE-2020-35490 | ||
| CVE-2020-35491 | ||
| CVE-2020-35728 | ||
| FasterXML jackson-databind (eVE container) | CVE-2020-9548 | |
| CVE-2020-9547 | ||
| CVE-2020-9546 | ||
| CVE-2020-11620 | ||
| CVE-2020-11619 | ||
| CVE-2020-11113 | ||
| CVE-2020-11112 | ||
| CVE-2020-11111 | ||
| CVE-2020-10969 | ||
| CVE-2020-10968 | ||
| CVE-2020-10673 | ||
| CVE-2020-10672 | ||
| CVE-2019-20330 | ||
| CVE-2019-17267 | ||
| CVE-2019-16335 | ||
| CVE-2019-14893 | ||
| CVE-2019-14892 | ||
| CVE-2019-14540 | ||
| CVE-2019-14439 | ||
| CVE-2019-14379 | ||
| freetype | CVE-2020-15999 | |
| glibc | CVE-2019-25013 | |
| CVE-2020-10029 | ||
| CVE-2020-29573 | ||
| gsettings-desktop-schemas | CVE-2019-3820 | |
| guava | CVE-2020-8908 | |
| httpd, httpd-tools, mod_ssl | CVE-2017-15710 | |
| CVE-2017-15715 | ||
| CVE-2018-1283 | ||
| CVE-2018-1301 | ||
| CVE-2018-1303 | ||
| CVE-2018-17199 | ||
| CVE-2019-10098 | ||
| CVE-2020-1927 | ||
| CVE-2020-1934 | ||
| httpd (eVE container) | CVE-2017-9788 | |
| CVE-2017-7679 | ||
| CVE-2017-3169 | ||
| CVE-2017-3167 | ||
| CVE-2015-3183 | ||
| CVE-2015-3185 | ||
| Intel | CVE-2019-11139 | Intel-SA-00271 |
| CVE-2019-11136 | Intel-SA-00280 | |
| CVE-2019-11137 | ||
| CVE-2019-0152 | Intel-SA-00240 | |
| CVE-2019-0119 | Intel-SA-00223 | |
| CVE-2019-0126 | ||
| CVE-2019-11109 | Intel-SA-00241 | |
| CVE-2019-14607 | Intel-SA-00317 | |
| Java-1_8_0-openjdk | CVE-2020-14664 | Oracle Critical Patch Update Advisory – July 2020 |
| CVE-2020-14583 | ||
| CVE-2020-14593 | ||
| CVE-2020-14562 | ||
| CVE-2020-14621 | ||
| CVE-2020-14556 | ||
| CVE-2020-14573 | ||
| CVE-2020-14581 | ||
| CVE-2020-14578 | ||
| CVE-2020-14579 | ||
| CVE-2020-14577 | ||
| CVE-2020-14792 | Oracle Critical Patch Update Advisory – October 2020 | |
| CVE-2020-14781 | ||
| CVE-2020-14782 | ||
| CVE-2020-14797 | ||
| CVE-2020-14779 | ||
| CVE-2020-14796 | ||
| CVE-2020-14798 | ||
| CVE-2020-14803 | Oracle Critical Patch Update Advisory – January 2021 | |
| libwbclient | CVE-2020-1472 | See NVD (http://nvd.nist.gov/) for individual scores for each CVE. |
| CVE-2020-14318 | ||
| CVE-2020-14323 | ||
| libX11 | CVE-2020-14363 | |
| libxkbcommon | CVE-2018-14598 | |
| CVE-2018-14599 | ||
| CVE-2018-14600 | ||
| CVE-2018-15853 | ||
| CVE-2018-15854 | ||
| CVE-2018-15855 | ||
| CVE-2018-15856 | ||
| CVE-2018-15857 | ||
| CVE-2018-15859 | ||
| CVE-2018-15861 | ||
| CVE-2018-15862 | ||
| CVE-2018-15863 | ||
| CVE-2018-15864 | ||
| net-snmp | CVE-2020-15862 | |
| openssl | CVE-2020-1971 | |
| pacemaker | CVE-2020-25654 | |
| perl | CVE-2020-10543 | |
| CVE-2020-10878 | ||
| CVE-2020-12723 | ||
| pillow | CVE-2020-35653 | |
| CVE-2020-35654 | ||
| CVE-2020-35655 | ||
| postgres | CVE-2020-25694 | |
| CVE-2020-25695 | ||
| CVE-2020-25696 | ||
| python3 | CVE-2019-20907 | |
| CVE-2020-14422 | ||
| python3 (eVE Container) | CVE-2019-10160 | |
| CVE-2017-1000158 | ||
| CVE-2016-4472 | ||
| CVE-2019-9674 | ||
| CVE-2020-8492 | ||
| CVE-2019-18348 | ||
| CVE-2019-16056 | ||
| CVE-2018-20852 | ||
| CVE-2018-14647 | ||
| CVE-2018-1000802 | ||
| CVE-2017-9233 | ||
| CVE-2016-0718 | ||
| CVE-2016-9063 | ||
| resource-agent | CVE-2020-11078 | |
| samba | CVE-2020-1472 | |
| CVE-2020-14318 | ||
| CVE-2020-14323 | ||
| sudo | CVE-2021-3156 | |
| twisted | CVE-2016-1000111 | |
| CVE-2019-12387 | ||
| Urllib3 | CVE-2020-26137 |
Affected Products & Remediation
| Products | Affected Versions | Updated Versions | Link to Update |
| Dell EMC PowerStore Family Operating System | versions prior to 2.0.0.0-1376722 | 2.0.0.0-1376722 | https://www.dell.com/support/software/us/en/4#/registration |
| Products | Affected Versions | Updated Versions | Link to Update |
| Dell EMC PowerStore Family Operating System | versions prior to 2.0.0.0-1376722 | 2.0.0.0-1376722 | https://www.dell.com/support/software/us/en/4#/registration |
Revision History
| Revision | Date | More Information |
| 1.0 | 2021-06-14 | Initial Release |
| 2.0 | 2022-04-18 | Reformatted for improved presentation without any changes to content. |
Related Information
Legal Disclaimer
Affected Products
PowerStore 1000X, PowerStore 1000T, PowerStore 3000X, PowerStore 3000T, PowerStore 5000X, PowerStore 5000T, PowerStore 500T, PowerStore 7000X, PowerStore 7000T, PowerStore 9000TProducts
PowerStore 9000X, Product Security InformationArticle Properties
Article Number: 000188392
Article Type: Dell Security Advisory
Last Modified: 18 Apr 2023
Find answers to your questions from other Dell users
Support Services
Check if your device is covered by Support Services.