DSA-2023-245: Dell Container Storage Modules Security Update for Multiple Vulnerabilities

Summary: Dell Container Storage Modules remediation is available for multiple security vulnerabilities that could be exploited by malicious users to compromise the affected system.

This article applies to This article does not apply to This article is not tied to any specific product. Not all product versions are identified in this article.
Check out other resources

Impact

Critical

Details

Third-Party Component CVE(s) More information
go CVE-2023-29400 https://nvd.nist.gov/vuln/detail/CVE-2023-29400
go CVE-2023-24539 https://nvd.nist.gov/vuln/detail/CVE-2023-24539
github.com/docker/distribution This hyperlink is taking you to a website outside of Dell Technologies. CVE-2023-2253 https://nvd.nist.gov/vuln/detail/CVE-2023-2253
github.com/opencontainers/runc This hyperlink is taking you to a website outside of Dell Technologies. CVE-2023-27561 https://nvd.nist.gov/vuln/detail/CVE-2023-27561
golang.org/x/net This hyperlink is taking you to a website outside of Dell Technologies. CVE-2022-41721 https://nvd.nist.gov/vuln/detail/CVE-2022-41721
golang.org/x/net This hyperlink is taking you to a website outside of Dell Technologies. CVE-2022-41723 https://nvd.nist.gov/vuln/detail/CVE-2022-41723
github.com/opencontainers/runc This hyperlink is taking you to a website outside of Dell Technologies. CVE-2023-28642 https://nvd.nist.gov/vuln/detail/CVE-2023-28642
github.com/opencontainers/runc This hyperlink is taking you to a website outside of Dell Technologies. CVE-2023-25809 https://nvd.nist.gov/vuln/detail/CVE-2023-25809
golang.org/x/net This hyperlink is taking you to a website outside of Dell Technologies. CVE-2022-41723 https://nvd.nist.gov/vuln/detail/CVE-2022-41723
golang.org/x/net This hyperlink is taking you to a website outside of Dell Technologies. CVE-2022-27664 https://nvd.nist.gov/vuln/detail/CVE-2022-27664
golang.org/x/crypto This hyperlink is taking you to a website outside of Dell Technologies. CVE-2022-27191 https://nvd.nist.gov/vuln/detail/CVE-2022-27191
golang.org/x/text This hyperlink is taking you to a website outside of Dell Technologies. CVE-2022-32149 https://nvd.nist.gov/vuln/detail/CVE-2022-32149
golang.org/x/sys This hyperlink is taking you to a website outside of Dell Technologies. CVE-2022-29526 https://nvd.nist.gov/vuln/detail/CVE-2022-29526
github.com/opencontainers/runc This hyperlink is taking you to a website outside of Dell Technologies. CVE-2022-29162 https://nvd.nist.gov/vuln/detail/CVE-2022-29162
github.com/opencontainers/image-spec This hyperlink is taking you to a website outside of Dell Technologies. GHSA-77vh-xpmg-72qh https://github.com/advisories/GHSA-77vh-xpmg-72qhThis hyperlink is taking you to a website outside of Dell Technologies.
curl / libcurl CVE-2023-23916 https://nvd.nist.gov/vuln/detail/CVE-2023-23916This hyperlink is taking you to a website outside of Dell Technologies.
curl / libcurl CVE-2022-35252 https://nvd.nist.gov/vuln/detail/CVE-2022-35252This hyperlink is taking you to a website outside of Dell Technologies.
curl / libcurl CVE-2022-43552 https://nvd.nist.gov/vuln/detail/CVE-2022-43552This hyperlink is taking you to a website outside of Dell Technologies.
device-mapper-multipath /  device-mapper-multipath-libs CVE-2022-41973 https://nvd.nist.gov/vuln/detail/CVE-2022-41973This hyperlink is taking you to a website outside of Dell Technologies.
file-libs CVE-2019-8905 https://nvd.nist.gov/vuln/detail/CVE-2019-8905This hyperlink is taking you to a website outside of Dell Technologies.
file-libs CVE-2019-8906 https://nvd.nist.gov/vuln/detail/CVE-2019-8906This hyperlink is taking you to a website outside of Dell Technologies.
github.com/docker/distribution This hyperlink is taking you to a website outside of Dell Technologies. CVE-2022-28391 https://nvd.nist.gov/vuln/detail/CVE-2022-28391This hyperlink is taking you to a website outside of Dell Technologies.
gnupg2 CVE-2022-3219 https://nvd.nist.gov/vuln/detail/CVE-2022-3219This hyperlink is taking you to a website outside of Dell Technologies.
github.com/docker/distribution This hyperlink is taking you to a website outside of Dell Technologies. CVE-2023-28840 https://nvd.nist.gov/vuln/detail/CVE-2023-28840This hyperlink is taking you to a website outside of Dell Technologies.
github.com/docker/distribution This hyperlink is taking you to a website outside of Dell Technologies. CVE-2023-28841 https://nvd.nist.gov/vuln/detail/CVE-2023-28841This hyperlink is taking you to a website outside of Dell Technologies.
github.com/docker/distribution This hyperlink is taking you to a website outside of Dell Technologies. CVE-2023-28842 https://nvd.nist.gov/vuln/detail/CVE-2023-28842This hyperlink is taking you to a website outside of Dell Technologies.
 gnutls CVE-2023-0361 https://nvd.nist.gov/vuln/detail/CVE-2023-0361This hyperlink is taking you to a website outside of Dell Technologies.
 kpartx CVE-2022-41973 https://nvd.nist.gov/vuln/detail/CVE-2022-41973This hyperlink is taking you to a website outside of Dell Technologies.
libsolv CVE-2021-44568 https://nvd.nist.gov/vuln/detail/CVE-2021-44568This hyperlink is taking you to a website outside of Dell Technologies.
libstdc++ CVE-2021-42694 https://nvd.nist.gov/vuln/detail/CVE-2021-42694This hyperlink is taking you to a website outside of Dell Technologies.
libstdc++ CVE-2018-20657 https://nvd.nist.gov/vuln/detail/CVE-2018-20657This hyperlink is taking you to a website outside of Dell Technologies.
libstdc++  CVE-2019-14250 https://nvd.nist.gov/vuln/detail/CVE-2019-14250This hyperlink is taking you to a website outside of Dell Technologies.
libstdc++ CVE-2022-27943 https://nvd.nist.gov/vuln/detail/CVE-2022-27943This hyperlink is taking you to a website outside of Dell Technologies.
openssl-libs CVE-2023-0215 https://nvd.nist.gov/vuln/detail/CVE-2023-0215This hyperlink is taking you to a website outside of Dell Technologies.
openssl-libs CVE-2023-0286 https://nvd.nist.gov/vuln/detail/CVE-2023-0286This hyperlink is taking you to a website outside of Dell Technologies.
openssl-libs CVE-2022-4304 https://nvd.nist.gov/vuln/detail/CVE-2022-4304This hyperlink is taking you to a website outside of Dell Technologies.
bash CVE-2022-3715 https://nvd.nist.gov/vuln/detail/CVE-2022-3715This hyperlink is taking you to a website outside of Dell Technologies.
libstdc++ , libgcc CVE-2021-3826 https://nvd.nist.gov/vuln/detail/CVE-2021-3826
libsolv CVE-2021-44568 https://nvd.nist.gov/vuln/detail/CVE-2021-44568
libarchive CVE-2017-14501 https://nvd.nist.gov/vuln/detail/CVE-2017-14501
libarchive CVE-2017-14166 https://nvd.nist.gov/vuln/detail/CVE-2017-14166
openssl-libs CVE-2022-4450 https://nvd.nist.gov/vuln/detail/CVE-2022-4450
sqlite-libs CVE-2019-19244 https://nvd.nist.gov/vuln/detail/CVE-2019-19244
sqlite-libs  CVE-2019-9936 https://nvd.nist.gov/vuln/detail/CVE-2019-9936
sqlite-libs CVE-2019-9937 https://nvd.nist.gov/vuln/detail/CVE-2019-9937
golang.org/x/sys This hyperlink is taking you to a website outside of Dell Technologies. CVE-2022-29526 https://nvd.nist.gov/vuln/detail/CVE-2022-29526

Dell Technologies recommends all customers consider both the CVSS base score and any relevant temporal and environmental scores that may impact the potential severity associated with a particular security vulnerability.

Affected Products & Remediation

CVE(s) Addressed 
 		 Product Affected Version(s) Updated Version(s) Link to Update
CVE-2023-24539 Dell Container Storage Modules Versions prior to 1.7 1.7 https://github.com/dell/csmThis hyperlink is taking you to a website outside of Dell Technologies.
CVE-2023-2253 Dell Container Storage Modules Versions prior to 1.7 1.7 https://github.com/dell/csmThis hyperlink is taking you to a website outside of Dell Technologies.
CVE-2023-27561 Dell Container Storage Modules Versions prior to 1.7 1.7 https://github.com/dell/csmThis hyperlink is taking you to a website outside of Dell Technologies.
CVE-2022-41721 Dell Container Storage Modules Versions prior to 1.7 1.7 https://github.com/dell/csmThis hyperlink is taking you to a website outside of Dell Technologies.
CVE-2022-41723 Dell Container Storage Modules Versions prior to 1.7 1.7 https://github.com/dell/csmThis hyperlink is taking you to a website outside of Dell Technologies.
CVE-2023-28642 Dell Container Storage Modules Versions prior to 1.7 1.7 https://github.com/dell/csmThis hyperlink is taking you to a website outside of Dell Technologies.
CVE-2023-25809 Dell Container Storage Modules Versions prior to 1.7 1.7 https://github.com/dell/csmThis hyperlink is taking you to a website outside of Dell Technologies.
CVE-2022-41723 Dell Container Storage Modules Versions prior to 1.7 1.7 https://github.com/dell/csmThis hyperlink is taking you to a website outside of Dell Technologies.
CVE-2022-27664 Dell Container Storage Modules Versions prior to 1.7 1.7 https://github.com/dell/csmThis hyperlink is taking you to a website outside of Dell Technologies.
CVE-2022-27191 Dell Container Storage Modules Versions prior to 1.7 1.7 https://github.com/dell/csmThis hyperlink is taking you to a website outside of Dell Technologies.
CVE-2022-32149 Dell Container Storage Modules Versions prior to 1.7 1.7 https://github.com/dell/csmThis hyperlink is taking you to a website outside of Dell Technologies.
CVE-2022-29526 Dell Container Storage Modules Versions prior to 1.7 1.7 https://github.com/dell/csmThis hyperlink is taking you to a website outside of Dell Technologies.
CVE-2022-29162 Dell Container Storage Modules Versions prior to 1.7 1.7 https://github.com/dell/csmThis hyperlink is taking you to a website outside of Dell Technologies.
GHSA-77vh-xpmg-72qh Dell Container Storage Modules Versions prior to 1.7 1.7 https://github.com/dell/csmThis hyperlink is taking you to a website outside of Dell Technologies.
CVE-2023-23916 Dell Container Storage Modules Versions prior to 1.7 1.7 https://github.com/dell/csmThis hyperlink is taking you to a website outside of Dell Technologies.
CVE-2022-35252 Dell Container Storage Modules Versions prior to 1.7 1.7 https://github.com/dell/csmThis hyperlink is taking you to a website outside of Dell Technologies.
CVE-2022-43552 Dell Container Storage Modules Versions prior to 1.7 1.7 https://github.com/dell/csmThis hyperlink is taking you to a website outside of Dell Technologies.
CVE-2022-41973 Dell Container Storage Modules Versions prior to 1.7 1.7 https://github.com/dell/csmThis hyperlink is taking you to a website outside of Dell Technologies.
CVE-2019-8905 Dell Container Storage Modules Versions prior to 1.7 1.7 https://github.com/dell/csmThis hyperlink is taking you to a website outside of Dell Technologies.
CVE-2019-8906 Dell Container Storage Modules Versions prior to 1.7 1.7 https://github.com/dell/csmThis hyperlink is taking you to a website outside of Dell Technologies.
CVE-2022-28391 Dell Container Storage Modules Versions prior to 1.7 1.7 https://github.com/dell/csmThis hyperlink is taking you to a website outside of Dell Technologies.
CVE-2022-3219 Dell Container Storage Modules Versions prior to 1.7 1.7 https://github.com/dell/csmThis hyperlink is taking you to a website outside of Dell Technologies.
CVE-2023-28840 Dell Container Storage Modules Versions prior to 1.7 1.7 https://github.com/dell/csmThis hyperlink is taking you to a website outside of Dell Technologies.
CVE-2023-28841 Dell Container Storage Modules Versions prior to 1.7 1.7 https://github.com/dell/csmThis hyperlink is taking you to a website outside of Dell Technologies.
CVE-2023-28842 Dell Container Storage Modules Versions prior to 1.7 1.7 https://github.com/dell/csmThis hyperlink is taking you to a website outside of Dell Technologies.
CVE-2023-0361 Dell Container Storage Modules Versions prior to 1.7 1.7 https://github.com/dell/csmThis hyperlink is taking you to a website outside of Dell Technologies.
CVE-2022-41973 Dell Container Storage Modules Versions prior to 1.7 1.7 https://github.com/dell/csmThis hyperlink is taking you to a website outside of Dell Technologies.
CVE-2021-44568 Dell Container Storage Modules Versions prior to 1.7 1.7 https://github.com/dell/csmThis hyperlink is taking you to a website outside of Dell Technologies.
CVE-2021-42694 Dell Container Storage Modules Versions prior to 1.7 1.7 https://github.com/dell/csmThis hyperlink is taking you to a website outside of Dell Technologies.
CVE-2018-20657 Dell Container Storage Modules Versions prior to 1.7 1.7 https://github.com/dell/csmThis hyperlink is taking you to a website outside of Dell Technologies.
 CVE-2019-14250 Dell Container Storage Modules Versions prior to 1.7 1.7 https://github.com/dell/csmThis hyperlink is taking you to a website outside of Dell Technologies.
CVE-2022-27943 Dell Container Storage Modules Versions prior to 1.7 1.7 https://github.com/dell/csmThis hyperlink is taking you to a website outside of Dell Technologies.
CVE-2023-0215 Dell Container Storage Modules Versions prior to 1.7 1.7 https://github.com/dell/csmThis hyperlink is taking you to a website outside of Dell Technologies.
CVE-2023-0286 Dell Container Storage Modules Versions prior to 1.7 1.7 https://github.com/dell/csmThis hyperlink is taking you to a website outside of Dell Technologies.
CVE-2022-4304 Dell Container Storage Modules Versions prior to 1.7 1.7 https://github.com/dell/csmThis hyperlink is taking you to a website outside of Dell Technologies.
CVE-2022-3715 Dell Container Storage Modules Versions prior to 1.7 1.7 https://github.com/dell/csmThis hyperlink is taking you to a website outside of Dell Technologies.
CVE-2021-3826 Dell Container Storage Modules Versions prior to 1.7 1.7 https://github.com/dell/csmThis hyperlink is taking you to a website outside of Dell Technologies.
CVE-2021-44568 Dell Container Storage Modules Versions prior to 1.7 1.7 https://github.com/dell/csmThis hyperlink is taking you to a website outside of Dell Technologies.
CVE-2017-14501 Dell Container Storage Modules Versions prior to 1.7 1.7 https://github.com/dell/csmThis hyperlink is taking you to a website outside of Dell Technologies.
CVE-2017-14166 Dell Container Storage Modules Versions prior to 1.7 1.7 https://github.com/dell/csmThis hyperlink is taking you to a website outside of Dell Technologies.
CVE-2022-4450 Dell Container Storage Modules Versions prior to 1.7 1.7 https://github.com/dell/csmThis hyperlink is taking you to a website outside of Dell Technologies.
CVE-2019-19244 Dell Container Storage Modules Versions prior to 1.7 1.7 https://github.com/dell/csmThis hyperlink is taking you to a website outside of Dell Technologies.
 CVE-2019-9936 Dell Container Storage Modules Versions prior to 1.7 1.7 https://github.com/dell/csmThis hyperlink is taking you to a website outside of Dell Technologies.
CVE-2019-9937 Dell Container Storage Modules Versions prior to 1.7 1.7 https://github.com/dell/csmThis hyperlink is taking you to a website outside of Dell Technologies.
CVE-2022-29526 Dell Container Storage Modules Versions prior to 1.7 1.7 https://github.com/dell/csmThis hyperlink is taking you to a website outside of Dell Technologies.
CVE(s) Addressed 
 		 Product Affected Version(s) Updated Version(s) Link to Update
CVE-2023-24539 Dell Container Storage Modules Versions prior to 1.7 1.7 https://github.com/dell/csmThis hyperlink is taking you to a website outside of Dell Technologies.
CVE-2023-2253 Dell Container Storage Modules Versions prior to 1.7 1.7 https://github.com/dell/csmThis hyperlink is taking you to a website outside of Dell Technologies.
CVE-2023-27561 Dell Container Storage Modules Versions prior to 1.7 1.7 https://github.com/dell/csmThis hyperlink is taking you to a website outside of Dell Technologies.
CVE-2022-41721 Dell Container Storage Modules Versions prior to 1.7 1.7 https://github.com/dell/csmThis hyperlink is taking you to a website outside of Dell Technologies.
CVE-2022-41723 Dell Container Storage Modules Versions prior to 1.7 1.7 https://github.com/dell/csmThis hyperlink is taking you to a website outside of Dell Technologies.
CVE-2023-28642 Dell Container Storage Modules Versions prior to 1.7 1.7 https://github.com/dell/csmThis hyperlink is taking you to a website outside of Dell Technologies.
CVE-2023-25809 Dell Container Storage Modules Versions prior to 1.7 1.7 https://github.com/dell/csmThis hyperlink is taking you to a website outside of Dell Technologies.
CVE-2022-41723 Dell Container Storage Modules Versions prior to 1.7 1.7 https://github.com/dell/csmThis hyperlink is taking you to a website outside of Dell Technologies.
CVE-2022-27664 Dell Container Storage Modules Versions prior to 1.7 1.7 https://github.com/dell/csmThis hyperlink is taking you to a website outside of Dell Technologies.
CVE-2022-27191 Dell Container Storage Modules Versions prior to 1.7 1.7 https://github.com/dell/csmThis hyperlink is taking you to a website outside of Dell Technologies.
CVE-2022-32149 Dell Container Storage Modules Versions prior to 1.7 1.7 https://github.com/dell/csmThis hyperlink is taking you to a website outside of Dell Technologies.
CVE-2022-29526 Dell Container Storage Modules Versions prior to 1.7 1.7 https://github.com/dell/csmThis hyperlink is taking you to a website outside of Dell Technologies.
CVE-2022-29162 Dell Container Storage Modules Versions prior to 1.7 1.7 https://github.com/dell/csmThis hyperlink is taking you to a website outside of Dell Technologies.
GHSA-77vh-xpmg-72qh Dell Container Storage Modules Versions prior to 1.7 1.7 https://github.com/dell/csmThis hyperlink is taking you to a website outside of Dell Technologies.
CVE-2023-23916 Dell Container Storage Modules Versions prior to 1.7 1.7 https://github.com/dell/csmThis hyperlink is taking you to a website outside of Dell Technologies.
CVE-2022-35252 Dell Container Storage Modules Versions prior to 1.7 1.7 https://github.com/dell/csmThis hyperlink is taking you to a website outside of Dell Technologies.
CVE-2022-43552 Dell Container Storage Modules Versions prior to 1.7 1.7 https://github.com/dell/csmThis hyperlink is taking you to a website outside of Dell Technologies.
CVE-2022-41973 Dell Container Storage Modules Versions prior to 1.7 1.7 https://github.com/dell/csmThis hyperlink is taking you to a website outside of Dell Technologies.
CVE-2019-8905 Dell Container Storage Modules Versions prior to 1.7 1.7 https://github.com/dell/csmThis hyperlink is taking you to a website outside of Dell Technologies.
CVE-2019-8906 Dell Container Storage Modules Versions prior to 1.7 1.7 https://github.com/dell/csmThis hyperlink is taking you to a website outside of Dell Technologies.
CVE-2022-28391 Dell Container Storage Modules Versions prior to 1.7 1.7 https://github.com/dell/csmThis hyperlink is taking you to a website outside of Dell Technologies.
CVE-2022-3219 Dell Container Storage Modules Versions prior to 1.7 1.7 https://github.com/dell/csmThis hyperlink is taking you to a website outside of Dell Technologies.
CVE-2023-28840 Dell Container Storage Modules Versions prior to 1.7 1.7 https://github.com/dell/csmThis hyperlink is taking you to a website outside of Dell Technologies.
CVE-2023-28841 Dell Container Storage Modules Versions prior to 1.7 1.7 https://github.com/dell/csmThis hyperlink is taking you to a website outside of Dell Technologies.
CVE-2023-28842 Dell Container Storage Modules Versions prior to 1.7 1.7 https://github.com/dell/csmThis hyperlink is taking you to a website outside of Dell Technologies.
CVE-2023-0361 Dell Container Storage Modules Versions prior to 1.7 1.7 https://github.com/dell/csmThis hyperlink is taking you to a website outside of Dell Technologies.
CVE-2022-41973 Dell Container Storage Modules Versions prior to 1.7 1.7 https://github.com/dell/csmThis hyperlink is taking you to a website outside of Dell Technologies.
CVE-2021-44568 Dell Container Storage Modules Versions prior to 1.7 1.7 https://github.com/dell/csmThis hyperlink is taking you to a website outside of Dell Technologies.
CVE-2021-42694 Dell Container Storage Modules Versions prior to 1.7 1.7 https://github.com/dell/csmThis hyperlink is taking you to a website outside of Dell Technologies.
CVE-2018-20657 Dell Container Storage Modules Versions prior to 1.7 1.7 https://github.com/dell/csmThis hyperlink is taking you to a website outside of Dell Technologies.
 CVE-2019-14250 Dell Container Storage Modules Versions prior to 1.7 1.7 https://github.com/dell/csmThis hyperlink is taking you to a website outside of Dell Technologies.
CVE-2022-27943 Dell Container Storage Modules Versions prior to 1.7 1.7 https://github.com/dell/csmThis hyperlink is taking you to a website outside of Dell Technologies.
CVE-2023-0215 Dell Container Storage Modules Versions prior to 1.7 1.7 https://github.com/dell/csmThis hyperlink is taking you to a website outside of Dell Technologies.
CVE-2023-0286 Dell Container Storage Modules Versions prior to 1.7 1.7 https://github.com/dell/csmThis hyperlink is taking you to a website outside of Dell Technologies.
CVE-2022-4304 Dell Container Storage Modules Versions prior to 1.7 1.7 https://github.com/dell/csmThis hyperlink is taking you to a website outside of Dell Technologies.
CVE-2022-3715 Dell Container Storage Modules Versions prior to 1.7 1.7 https://github.com/dell/csmThis hyperlink is taking you to a website outside of Dell Technologies.
CVE-2021-3826 Dell Container Storage Modules Versions prior to 1.7 1.7 https://github.com/dell/csmThis hyperlink is taking you to a website outside of Dell Technologies.
CVE-2021-44568 Dell Container Storage Modules Versions prior to 1.7 1.7 https://github.com/dell/csmThis hyperlink is taking you to a website outside of Dell Technologies.
CVE-2017-14501 Dell Container Storage Modules Versions prior to 1.7 1.7 https://github.com/dell/csmThis hyperlink is taking you to a website outside of Dell Technologies.
CVE-2017-14166 Dell Container Storage Modules Versions prior to 1.7 1.7 https://github.com/dell/csmThis hyperlink is taking you to a website outside of Dell Technologies.
CVE-2022-4450 Dell Container Storage Modules Versions prior to 1.7 1.7 https://github.com/dell/csmThis hyperlink is taking you to a website outside of Dell Technologies.
CVE-2019-19244 Dell Container Storage Modules Versions prior to 1.7 1.7 https://github.com/dell/csmThis hyperlink is taking you to a website outside of Dell Technologies.
 CVE-2019-9936 Dell Container Storage Modules Versions prior to 1.7 1.7 https://github.com/dell/csmThis hyperlink is taking you to a website outside of Dell Technologies.
CVE-2019-9937 Dell Container Storage Modules Versions prior to 1.7 1.7 https://github.com/dell/csmThis hyperlink is taking you to a website outside of Dell Technologies.
CVE-2022-29526 Dell Container Storage Modules Versions prior to 1.7 1.7 https://github.com/dell/csmThis hyperlink is taking you to a website outside of Dell Technologies.

Workarounds & Mitigations

None

Revision History

RevisionDateDescription
1.02023-06-30Initial Release
2.02023-08-02 Major Update

Related Information

Dell Security Advisories and Notices
Dell Vulnerability Response Policy
CVSS Scoring Guide

Legal Disclaimer

Article Properties
Article Number: 000215527
Article Type: Dell Security Advisory
Last Modified: 02 Aug 2023
Find answers to your questions from other Dell users
Support Services
Check if your device is covered by Support Services.