DSA-2025-349: Security Update for Dell XtremIO X2 Multiple Component Vulnerabilities

Summary: Dell XtremIO X2 remediation is available for multiple security vulnerabilities that could be exploited by malicious users to compromise the affected system.

This article applies to This article does not apply to This article is not tied to any specific product. Not all product versions are identified in this article.
Check out other resources

Impact

Critical

Details

Third-party Component CVEs More Information
bind CVE-2021-25220, CVE-2022-2795, CVE-2022-38177, CVE-2022-38178 https://nvd.nist.gov/vuln/searchThis hyperlink is taking you to a website outside of Dell Technologies.
cpp CVE-2020-11023 https://nvd.nist.gov/vuln/searchThis hyperlink is taking you to a website outside of Dell Technologies.
glibc CVE-2021-27645, CVE-2021-35942, CVE-2021-3999, CVE-2022-23218, CVE-2022-23219, CVE-2024-2961, CVE-2024-33599, CVE-2024-33600, CVE-2024-33601, CVE-2024-33602 https://nvd.nist.gov/vuln/searchThis hyperlink is taking you to a website outside of Dell Technologies.
httpd CVE-2006-20001, CVE-2014-8109, CVE-2019-10092, CVE-2020-35452, CVE-2021-26690, CVE-2022-22719, CVE-2022-22721, CVE-2022-23943, CVE-2022-26377, CVE-2022-28615, CVE-2022-29404, CVE-2022-30522, CVE-2022-31813, CVE-2023-31122, CVE-2023-38709, CVE-2024-24795, CVE-2024-38474, CVE-2024-38475, CVE-2024-38476, CVE-2024-38477, CVE-2024-39573, CVE-2024-39884, CVE-2024-40725 https://nvd.nist.gov/vuln/searchThis hyperlink is taking you to a website outside of Dell Technologies.
kernel CVE-2018-10087, CVE-2019-25162, CVE-2020-13974, CVE-2020-26555, CVE-2020-27820, CVE-2021-0129, CVE-2021-20292, CVE-2021-20321, CVE-2021-20322, CVE-2021-28964, CVE-2021-28971, CVE-2021-30178, CVE-2021-3178, CVE-2021-31916, CVE-2021-34693, CVE-2021-3609, CVE-2021-3612, CVE-2021-3640, CVE-2021-3659, CVE-2021-3679, CVE-2021-37159, CVE-2021-38160, CVE-2021-3923, CVE-2021-40490, CVE-2021-4149, CVE-2021-4157, CVE-2021-4159, CVE-2021-41864, CVE-2021-43389, CVE-2021-43975, CVE-2021-43976, CVE-2021-45485, CVE-2021-45868, CVE-2021-46906, CVE-2021-46932, CVE-2021-46936, CVE-2021-47118, CVE-2021-47153, CVE-2021-47171, CVE-2021-47194, CVE-2021-47383, CVE-2022-0812, CVE-2022-0850, CVE-2022-1011, CVE-2022-1016, CVE-2022-1048, CVE-2022-1055, CVE-2022-1353, CVE-2022-1419, CVE-2022-1652, CVE-2022-1679, CVE-2022-20141, CVE-2022-20368, CVE-2022-21499, CVE-2022-2196, CVE-2022-25265, CVE-2022-26365, CVE-2022-28390, CVE-2022-29581, CVE-2022-3028, CVE-2022-33740, CVE-2022-33741, CVE-2022-33742, CVE-2022-3424, CVE-2022-3565, CVE-2022-3566, CVE-2022-36280, CVE-2022-3629, CVE-2022-3640, CVE-2022-4095, CVE-2022-41674, CVE-2022-41858, CVE-2022-42719, CVE-2022-42720, CVE-2022-42895, CVE-2022-45886, CVE-2022-45919, CVE-2022-45934, CVE-2023-1077, CVE-2023-1118, CVE-2023-1380, CVE-2023-1513, CVE-2023-1829, CVE-2023-1838, CVE-2023-1989, CVE-2023-2124, CVE-2023-3111, CVE-2023-3141, CVE-2023-3268, CVE-2023-3567, CVE-2023-35824, CVE-2023-39197, CVE-2023-40283, CVE-2023-4387, CVE-2023-45862, CVE-2023-51042, CVE-2023-51779, CVE-2023-51780, CVE-2023-52340, CVE-2023-52435, CVE-2023-52445, CVE-2023-52469, CVE-2023-52628, CVE-2023-52752, CVE-2023-52885, CVE-2023-6606, CVE-2023-6610, CVE-2023-6931, CVE-2023-6932, CVE-2024-0775, CVE-2024-23307, CVE-2024-26668, CVE-2024-26689, CVE-2024-26791, CVE-2024-26855, CVE-2024-26872, CVE-2024-26882, CVE-2024-26898, CVE-2024-26923, CVE-2024-26934, CVE-2024-26958, CVE-2024-26982, CVE-2024-27008, CVE-2024-27020, CVE-2024-27043, CVE-2024-35849, CVE-2024-35896, CVE-2024-36883, CVE-2024-36960, CVE-2024-36971, CVE-2024-38538, CVE-2024-38555, CVE-2024-38570, CVE-2024-38600, CVE-2024-38627, CVE-2024-39487, CVE-2024-39494, CVE-2024-41013, CVE-2024-41014, CVE-2024-41071, CVE-2024-42148, CVE-2024-42228, CVE-2024-42280, CVE-2024-42301, CVE-2024-43839, CVE-2024-43882, CVE-2024-43900, CVE-2024-44940, CVE-2024-44970, CVE-2024-44987, CVE-2024-46673, CVE-2024-46722, CVE-2024-46723, CVE-2024-46724, CVE-2024-46731, CVE-2024-46738, CVE-2024-46744, CVE-2024-46750, CVE-2024-46756, CVE-2024-46757, CVE-2024-46758, CVE-2024-46800, CVE-2024-46813, CVE-2024-46818, CVE-2024-47659, CVE-2024-47701, CVE-2024-47742, CVE-2024-47745, CVE-2024-49860, CVE-2024-49882, CVE-2024-49889, CVE-2024-49894, CVE-2024-49950, CVE-2024-49960, CVE-2024-49967, CVE-2024-49991, CVE-2024-50007, CVE-2024-50033, CVE-2024-50035, CVE-2024-50055, CVE-2024-50073, CVE-2024-50115, CVE-2024-50143, CVE-2024-50234, CVE-2024-50267, CVE-2024-50282, CVE-2024-50302, CVE-2024-53057, CVE-2024-53103, CVE-2024-53104, CVE-2024-53141, CVE-2024-53142, CVE-2024-53150, CVE-2024-53156, CVE-2024-53173, CVE-2024-53197, CVE-2024-53227, CVE-2024-53239, CVE-2024-56551, CVE-2024-56603, CVE-2024-56604, CVE-2024-56605, CVE-2024-56606, CVE-2024-56650, CVE-2024-56759, CVE-2024-57798, CVE-2024-57980, CVE-2025-21702, CVE-2025-21920, CVE-2025-21969, CVE-2025-21993, CVE-2025-37785 https://nvd.nist.gov/vuln/searchThis hyperlink is taking you to a website outside of Dell Technologies.
libevent CVE-2016-10195, CVE-2016-10196, CVE-2016-10197 https://nvd.nist.gov/vuln/searchThis hyperlink is taking you to a website outside of Dell Technologies.
libkadm5 CVE-2024-3596, CVE-2024-37370, CVE-2024-37371 https://nvd.nist.gov/vuln/searchThis hyperlink is taking you to a website outside of Dell Technologies.
libss CVE-2022-1304 https://nvd.nist.gov/vuln/searchThis hyperlink is taking you to a website outside of Dell Technologies.
nss-softokn CVE-2023-5388 https://nvd.nist.gov/vuln/searchThis hyperlink is taking you to a website outside of Dell Technologies.
openssh CVE-2021-41617 https://nvd.nist.gov/vuln/searchThis hyperlink is taking you to a website outside of Dell Technologies.
openssl CVE-2019-1563, CVE-2022-1292, CVE-2022-2068, CVE-2023-0215, CVE-2023-0464 https://nvd.nist.gov/vuln/searchThis hyperlink is taking you to a website outside of Dell Technologies.
python-pillow CVE-2022-22815 https://nvd.nist.gov/vuln/searchThis hyperlink is taking you to a website outside of Dell Technologies.
zlib CVE-2023-45853 https://nvd.nist.gov/vuln/searchThis hyperlink is taking you to a website outside of Dell Technologies.

 

Dell Technologies recommends all customers consider both the CVSS base score and any relevant temporal and environmental scores that may impact the potential severity associated with a particular security vulnerability.

Affected Products & Remediation

Product Software/Firmware Affected Versions Remediated Versions Link
XtremIO X2 XMS Versions prior to 6.4.4 Version 6.4.4 or later https://www.dell.com/support/product-details/product/xtremio-x2/drivers

 

Product Software/Firmware Affected Versions Remediated Versions Link
XtremIO X2 XMS Versions prior to 6.4.4 Version 6.4.4 or later https://www.dell.com/support/product-details/product/xtremio-x2/drivers

 

Revision History

RevisionDateDescription
1.02025-10-02Initial Release

 

Related Information

Dell Security Advisories and Notices
Dell Vulnerability Response Policy
CVSS Scoring Guide

Legal Disclaimer

Affected Products

XtremIO, XtremIO HW X2-R, XtremIO HW X2-R Encrypt Disable, XtremIO HW X2-S, XtremIO HW X2-S Encrypt Disable, XtremIO HW X2-T, XtremIO HW X2-T Encrypt Disable, XtremIO X2
Article Properties
Article Number: 000376651
Article Type: Dell Security Advisory
Last Modified: 02 Oct 2025
Find answers to your questions from other Dell users
Support Services
Check if your device is covered by Support Services.