DSA-2021-162: Dell EMC ECS Security Update for Multiple Third-Party Component Vulnerabilities

Summary: Dell EMC ECS remediation is available for multiple security vulnerabilities that could be exploited by malicious users to compromise the affected system.

This article applies to This article does not apply to This article is not tied to any specific product. Not all product versions are identified in this article.
Check out other resources

Impact

Critical

Details

Third-Party Component CVE(s) More information
Netty CVE-2019-20444 NVD - CVE-2019-20444
CVE-2019-20445 NVD - CVE-2019-20445
CVE-2020-11612 NVD - CVE-2020-11612
CVE-2020-7238 NVD - CVE-2020-7238
Square Retrofit CVE-2018-1000850 NVD - CVE-2018-1000850
Linux Kernel CVE-2020-29368 NVD - CVE-2020-29368
CVE-2020-29661 NVD - CVE-2020-29661
CVE-2020-35519 NVD - CVE-2020-35519
CVE-2021-23133 NVD - CVE-2021-23133
CVE-2021-23134 NVD - CVE-2021-23134
CVE-2021-27364 NVD - CVE-2021-27364
CVE-2021-27365 NVD - CVE-2021-27365
CVE-2021-28660 NVD - CVE-2021-28660
CVE-2021-29154 NVD - CVE-2021-29154
CVE-2021-32399 NVD - CVE-2021-32399
CVE-2021-33034 NVD - CVE-2021-33034
CVE-2021-33200 NVD - CVE-2021-33200
CVE-2021-3347 NVD - CVE-2021-3347
CVE-2021-3444 NVD - CVE-2021-3444
GNU C Library CVE-2020-29573 NVD - CVE-2020-29573
JSON Smart CVE-2021-27568 NVD - CVE-2021-27568
XStream CVE-2019-10173 NVD - CVE-2019-10173
CVE-2021-21341 NVD - CVE-2021-21341
CVE-2021-21342 NVD - CVE-2021-21342
CVE-2021-21343 NVD - CVE-2021-21343
CVE-2021-21344 NVD - CVE-2021-21344
CVE-2021-21345 NVD - CVE-2021-21345
CVE-2021-21346 NVD - CVE-2021-21346
CVE-2021-21347 NVD - CVE-2021-21347
CVE-2021-21348 NVD - CVE-2021-21348
CVE-2021-21349 NVD - CVE-2021-21349
CVE-2021-21350 NVD - CVE-2021-21350
CVE-2021-21351 NVD - CVE-2021-21351
CVE-2021-29505 NVD - CVE-2021-29505
GRUB2 CVE-2020-14372 NVD - CVE-2020-14372
CVE-2020-25632 NVD - CVE-2020-25632
CVE-2020-25647 NVD - CVE-2020-25647
CVE-2020-27779 NVD - CVE-2020-27779
CVE-2021-20233 NVD - CVE-2021-20233
libX11 CVE-2021-31535 NVD - CVE-2021-31535
Nettle CVE-2021-20305 NVD - CVE-2021-20305
Python 3 CVE-2020-27619 NVD - CVE-2020-27619
Jasper Runtime CVE-2020-27828 NVD - CVE-2020-27828
Sudo CVE-2021-3156 NVD - CVE-2021-3156
Third-Party Component CVE(s) More information
Netty CVE-2019-20444 NVD - CVE-2019-20444
CVE-2019-20445 NVD - CVE-2019-20445
CVE-2020-11612 NVD - CVE-2020-11612
CVE-2020-7238 NVD - CVE-2020-7238
Square Retrofit CVE-2018-1000850 NVD - CVE-2018-1000850
Linux Kernel CVE-2020-29368 NVD - CVE-2020-29368
CVE-2020-29661 NVD - CVE-2020-29661
CVE-2020-35519 NVD - CVE-2020-35519
CVE-2021-23133 NVD - CVE-2021-23133
CVE-2021-23134 NVD - CVE-2021-23134
CVE-2021-27364 NVD - CVE-2021-27364
CVE-2021-27365 NVD - CVE-2021-27365
CVE-2021-28660 NVD - CVE-2021-28660
CVE-2021-29154 NVD - CVE-2021-29154
CVE-2021-32399 NVD - CVE-2021-32399
CVE-2021-33034 NVD - CVE-2021-33034
CVE-2021-33200 NVD - CVE-2021-33200
CVE-2021-3347 NVD - CVE-2021-3347
CVE-2021-3444 NVD - CVE-2021-3444
GNU C Library CVE-2020-29573 NVD - CVE-2020-29573
JSON Smart CVE-2021-27568 NVD - CVE-2021-27568
XStream CVE-2019-10173 NVD - CVE-2019-10173
CVE-2021-21341 NVD - CVE-2021-21341
CVE-2021-21342 NVD - CVE-2021-21342
CVE-2021-21343 NVD - CVE-2021-21343
CVE-2021-21344 NVD - CVE-2021-21344
CVE-2021-21345 NVD - CVE-2021-21345
CVE-2021-21346 NVD - CVE-2021-21346
CVE-2021-21347 NVD - CVE-2021-21347
CVE-2021-21348 NVD - CVE-2021-21348
CVE-2021-21349 NVD - CVE-2021-21349
CVE-2021-21350 NVD - CVE-2021-21350
CVE-2021-21351 NVD - CVE-2021-21351
CVE-2021-29505 NVD - CVE-2021-29505
GRUB2 CVE-2020-14372 NVD - CVE-2020-14372
CVE-2020-25632 NVD - CVE-2020-25632
CVE-2020-25647 NVD - CVE-2020-25647
CVE-2020-27779 NVD - CVE-2020-27779
CVE-2021-20233 NVD - CVE-2021-20233
libX11 CVE-2021-31535 NVD - CVE-2021-31535
Nettle CVE-2021-20305 NVD - CVE-2021-20305
Python 3 CVE-2020-27619 NVD - CVE-2020-27619
Jasper Runtime CVE-2020-27828 NVD - CVE-2020-27828
Sudo CVE-2021-3156 NVD - CVE-2021-3156
Dell Technologies recommends all customers consider both the CVSS base score and any relevant temporal and environmental scores that may impact the potential severity associated with a particular security vulnerability.

Affected Products & Remediation

CVE(s) Addressed Product Affected Version(s) Updated Version(s) Link to Update
CVE-2019-20444 Dell EMC ECS All versions < 3.6.2.0 3.6.2.0 Link to update

 
CVE-2019-20445
CVE-2020-11612
CVE-2020-7238
CVE-2018-1000850
CVE-2020-29368
CVE-2020-29661
CVE-2020-35519
CVE-2021-23133
CVE-2021-23134
CVE-2021-27364
CVE-2021-27365
CVE-2021-28660
CVE-2021-29154
CVE-2021-32399
CVE-2021-33034
CVE-2021-33200
CVE-2021-3347
CVE-2021-3444
CVE-2020-29573
CVE-2021-27568
CVE-2019-10173
CVE-2021-21341
CVE-2021-21342
CVE-2021-21343
CVE-2021-21344
CVE-2021-21345
CVE-2021-21346
CVE-2021-21347
CVE-2021-21348
CVE-2021-21349
CVE-2021-21350
CVE-2021-21351
CVE-2021-29505
CVE-2020-14372
CVE-2020-25632
CVE-2020-25647
CVE-2020-27779
CVE-2021-20233
CVE-2021-31535
CVE-2021-20305
CVE-2020-27619
CVE-2020-27828
CVE-2021-3156
CVE(s) Addressed Product Affected Version(s) Updated Version(s) Link to Update
CVE-2019-20444 Dell EMC ECS All versions < 3.6.2.0 3.6.2.0 Link to update

 
CVE-2019-20445
CVE-2020-11612
CVE-2020-7238
CVE-2018-1000850
CVE-2020-29368
CVE-2020-29661
CVE-2020-35519
CVE-2021-23133
CVE-2021-23134
CVE-2021-27364
CVE-2021-27365
CVE-2021-28660
CVE-2021-29154
CVE-2021-32399
CVE-2021-33034
CVE-2021-33200
CVE-2021-3347
CVE-2021-3444
CVE-2020-29573
CVE-2021-27568
CVE-2019-10173
CVE-2021-21341
CVE-2021-21342
CVE-2021-21343
CVE-2021-21344
CVE-2021-21345
CVE-2021-21346
CVE-2021-21347
CVE-2021-21348
CVE-2021-21349
CVE-2021-21350
CVE-2021-21351
CVE-2021-29505
CVE-2020-14372
CVE-2020-25632
CVE-2020-25647
CVE-2020-27779
CVE-2021-20233
CVE-2021-31535
CVE-2021-20305
CVE-2020-27619
CVE-2020-27828
CVE-2021-3156

Workarounds & Mitigations

None.

Revision History

RevisionDateDescription
1.02021-08-23Initial Release

Related Information

Dell Security Advisories and Notices
Dell Vulnerability Response Policy
CVSS Scoring Guide

Legal Disclaimer

Affected Products

ECS, ECS Appliance, ECS Appliance Gen 2, ECS Appliance Gen 3, ECS Appliance Hardware Gen3 EX300, ECS Appliance Hardware Gen3 EX3000, ECS Appliance Hardware Gen2 C-Series, ECS Appliance Hardware Gen3 EX500, ECS Appliance Hardware Gen3 EXF900 , ECS Appliance Software with Encryption, ECS Appliance Software without Encryption, Product Security Information ...
Article Properties
Article Number: 000190876
Article Type: Dell Security Advisory
Last Modified: 23 Aug 2021
Find answers to your questions from other Dell users
Support Services
Check if your device is covered by Support Services.