DSA-2024-071: Security Update for Dell Hybrid Client Multiple Third-Party Component Vulnerabilities
Summary: Dell Hybrid Client remediation is available for multiple third-party component vulnerabilities that could be exploited by malicious users to compromise the affected system.
This article applies to
This article does not apply to
This article is not tied to any specific product.
Not all product versions are identified in this article.
Impact
High
Details
| Third-party Component | CVEs | More Information |
|---|---|---|
| libssh-gcrypt-4 | CVE-2023-1667, CVE-2023-2283 | See NVD link below for individual scores for each CVE. http://nvd.nist.gov/  |
| libsmbclient_2 | CVE-2023-3347, CVE-2023-34968, CVE-2023-34967, CVE-2022-2127, CVE-2023-34966 | See NVD link below for individual scores for each CVE. http://nvd.nist.gov/ |
| libcurl4 | CVE-2023-28322, CVE-2023-28321 | See NVD link below for individual scores for each CVE. http://nvd.nist.gov/ |
Affected Products & Remediation
| Product | Software/ Firmware |
Affected Versions | Remediated Versions | Release Date (MM/DD/YYY) | Link |
|---|---|---|---|---|---|
| Latitude 3440 | Dell Hybrid Client | Versions 2310 and prior |
Versions 2403 or later | 04/26/2024 |
Latitude 3440(Ubuntu 22.04) |
| Latitude 5440 | Dell Hybrid Client | Versions 2310 and prior |
Versions 2403 or later | 04/26/2024 |
Latitude 5440(Ubuntu 22.04) |
| OptiPlex 3000 Thin Client | Dell Hybrid Client | Versions 2310 and prior |
Versions 2403 or later | 04/26/2024 |
OptiPlex 3000 Thin Client (Ubuntu 22.04) |
| OptiPlex 7410 All-In-One | Dell Hybrid Client | Versions 2310 and prior |
Versions 2403 or later | 04/26/2024 |
OptiPlex 7410 All-In-One (Ubuntu 22.04) |
| Precision 3260 | Dell Hybrid Client | Versions 2310 and prior |
Versions 2403 or later | 04/26/2024 |
Precision 3260(Ubuntu 22.04) |
| Product | Software/ Firmware |
Affected Versions | Remediated Versions | Release Date (MM/DD/YYY) | Link |
|---|---|---|---|---|---|
| Latitude 3440 | Dell Hybrid Client | Versions 2310 and prior |
Versions 2403 or later | 04/26/2024 |
Latitude 3440(Ubuntu 22.04) |
| Latitude 5440 | Dell Hybrid Client | Versions 2310 and prior |
Versions 2403 or later | 04/26/2024 |
Latitude 5440(Ubuntu 22.04) |
| OptiPlex 3000 Thin Client | Dell Hybrid Client | Versions 2310 and prior |
Versions 2403 or later | 04/26/2024 |
OptiPlex 3000 Thin Client (Ubuntu 22.04) |
| OptiPlex 7410 All-In-One | Dell Hybrid Client | Versions 2310 and prior |
Versions 2403 or later | 04/26/2024 |
OptiPlex 7410 All-In-One (Ubuntu 22.04) |
| Precision 3260 | Dell Hybrid Client | Versions 2310 and prior |
Versions 2403 or later | 04/26/2024 |
Precision 3260(Ubuntu 22.04) |
Workarounds & Mitigations
None
Revision History
| Revision | Date | Description |
| 1.0 | 2024-04-29 | Initial Release |
| 2.0 | 2024-04-30 | Updated Affected Products and Remediation Table: Updated Platform List |
Related Information
Legal Disclaimer
Affected Products
Latitude 3440, Latitude 5440, OptiPlex 3000 Thin Client, OptiPlex All-In-One 7410, OptiPlex All-in-One Plus 7410, Precision 3260 XE Compact, Precision 3260 CompactArticle Properties
Article Number: 000221836
Article Type: Dell Security Advisory
Last Modified: 30 Apr 2024
Find answers to your questions from other Dell users
Support Services
Check if your device is covered by Support Services.