DSA-2025-349: Security Update for Dell XtremIO X2 Multiple Component Vulnerabilities

Resumen: Dell XtremIO X2 remediation is available for multiple security vulnerabilities that could be exploited by malicious users to compromise the affected system.

Este artículo se aplica a Este artículo no se aplica a Este artículo no está vinculado a ningún producto específico. No se identifican todas las versiones del producto en este artículo.
Consulte estos recursos

Impacto

Critical

Detalles

Third-party Component CVEs More Information
bind CVE-2021-25220, CVE-2022-2795, CVE-2022-38177, CVE-2022-38178 https://nvd.nist.gov/vuln/searchThis hyperlink is taking you to a website outside of Dell Technologies.
cpp CVE-2020-11023 https://nvd.nist.gov/vuln/searchThis hyperlink is taking you to a website outside of Dell Technologies.
glibc CVE-2021-27645, CVE-2021-35942, CVE-2021-3999, CVE-2022-23218, CVE-2022-23219, CVE-2024-2961, CVE-2024-33599, CVE-2024-33600, CVE-2024-33601, CVE-2024-33602 https://nvd.nist.gov/vuln/searchThis hyperlink is taking you to a website outside of Dell Technologies.
httpd CVE-2006-20001, CVE-2014-8109, CVE-2019-10092, CVE-2020-35452, CVE-2021-26690, CVE-2022-22719, CVE-2022-22721, CVE-2022-23943, CVE-2022-26377, CVE-2022-28615, CVE-2022-29404, CVE-2022-30522, CVE-2022-31813, CVE-2023-31122, CVE-2023-38709, CVE-2024-24795, CVE-2024-38474, CVE-2024-38475, CVE-2024-38476, CVE-2024-38477, CVE-2024-39573, CVE-2024-39884, CVE-2024-40725 https://nvd.nist.gov/vuln/searchThis hyperlink is taking you to a website outside of Dell Technologies.
kernel CVE-2018-10087, CVE-2019-25162, CVE-2020-13974, CVE-2020-26555, CVE-2020-27820, CVE-2021-0129, CVE-2021-20292, CVE-2021-20321, CVE-2021-20322, CVE-2021-28964, CVE-2021-28971, CVE-2021-30178, CVE-2021-3178, CVE-2021-31916, CVE-2021-34693, CVE-2021-3609, CVE-2021-3612, CVE-2021-3640, CVE-2021-3659, CVE-2021-3679, CVE-2021-37159, CVE-2021-38160, CVE-2021-3923, CVE-2021-40490, CVE-2021-4149, CVE-2021-4157, CVE-2021-4159, CVE-2021-41864, CVE-2021-43389, CVE-2021-43975, CVE-2021-43976, CVE-2021-45485, CVE-2021-45868, CVE-2021-46906, CVE-2021-46932, CVE-2021-46936, CVE-2021-47118, CVE-2021-47153, CVE-2021-47171, CVE-2021-47194, CVE-2021-47383, CVE-2022-0812, CVE-2022-0850, CVE-2022-1011, CVE-2022-1016, CVE-2022-1048, CVE-2022-1055, CVE-2022-1353, CVE-2022-1419, CVE-2022-1652, CVE-2022-1679, CVE-2022-20141, CVE-2022-20368, CVE-2022-21499, CVE-2022-2196, CVE-2022-25265, CVE-2022-26365, CVE-2022-28390, CVE-2022-29581, CVE-2022-3028, CVE-2022-33740, CVE-2022-33741, CVE-2022-33742, CVE-2022-3424, CVE-2022-3565, CVE-2022-3566, CVE-2022-36280, CVE-2022-3629, CVE-2022-3640, CVE-2022-4095, CVE-2022-41674, CVE-2022-41858, CVE-2022-42719, CVE-2022-42720, CVE-2022-42895, CVE-2022-45886, CVE-2022-45919, CVE-2022-45934, CVE-2023-1077, CVE-2023-1118, CVE-2023-1380, CVE-2023-1513, CVE-2023-1829, CVE-2023-1838, CVE-2023-1989, CVE-2023-2124, CVE-2023-3111, CVE-2023-3141, CVE-2023-3268, CVE-2023-3567, CVE-2023-35824, CVE-2023-39197, CVE-2023-40283, CVE-2023-4387, CVE-2023-45862, CVE-2023-51042, CVE-2023-51779, CVE-2023-51780, CVE-2023-52340, CVE-2023-52435, CVE-2023-52445, CVE-2023-52469, CVE-2023-52628, CVE-2023-52752, CVE-2023-52885, CVE-2023-6606, CVE-2023-6610, CVE-2023-6931, CVE-2023-6932, CVE-2024-0775, CVE-2024-23307, CVE-2024-26668, CVE-2024-26689, CVE-2024-26791, CVE-2024-26855, CVE-2024-26872, CVE-2024-26882, CVE-2024-26898, CVE-2024-26923, CVE-2024-26934, CVE-2024-26958, CVE-2024-26982, CVE-2024-27008, CVE-2024-27020, CVE-2024-27043, CVE-2024-35849, CVE-2024-35896, CVE-2024-36883, CVE-2024-36960, CVE-2024-36971, CVE-2024-38538, CVE-2024-38555, CVE-2024-38570, CVE-2024-38600, CVE-2024-38627, CVE-2024-39487, CVE-2024-39494, CVE-2024-41013, CVE-2024-41014, CVE-2024-41071, CVE-2024-42148, CVE-2024-42228, CVE-2024-42280, CVE-2024-42301, CVE-2024-43839, CVE-2024-43882, CVE-2024-43900, CVE-2024-44940, CVE-2024-44970, CVE-2024-44987, CVE-2024-46673, CVE-2024-46722, CVE-2024-46723, CVE-2024-46724, CVE-2024-46731, CVE-2024-46738, CVE-2024-46744, CVE-2024-46750, CVE-2024-46756, CVE-2024-46757, CVE-2024-46758, CVE-2024-46800, CVE-2024-46813, CVE-2024-46818, CVE-2024-47659, CVE-2024-47701, CVE-2024-47742, CVE-2024-47745, CVE-2024-49860, CVE-2024-49882, CVE-2024-49889, CVE-2024-49894, CVE-2024-49950, CVE-2024-49960, CVE-2024-49967, CVE-2024-49991, CVE-2024-50007, CVE-2024-50033, CVE-2024-50035, CVE-2024-50055, CVE-2024-50073, CVE-2024-50115, CVE-2024-50143, CVE-2024-50234, CVE-2024-50267, CVE-2024-50282, CVE-2024-50302, CVE-2024-53057, CVE-2024-53103, CVE-2024-53104, CVE-2024-53141, CVE-2024-53142, CVE-2024-53150, CVE-2024-53156, CVE-2024-53173, CVE-2024-53197, CVE-2024-53227, CVE-2024-53239, CVE-2024-56551, CVE-2024-56603, CVE-2024-56604, CVE-2024-56605, CVE-2024-56606, CVE-2024-56650, CVE-2024-56759, CVE-2024-57798, CVE-2024-57980, CVE-2025-21702, CVE-2025-21920, CVE-2025-21969, CVE-2025-21993, CVE-2025-37785 https://nvd.nist.gov/vuln/searchThis hyperlink is taking you to a website outside of Dell Technologies.
libevent CVE-2016-10195, CVE-2016-10196, CVE-2016-10197 https://nvd.nist.gov/vuln/searchThis hyperlink is taking you to a website outside of Dell Technologies.
libkadm5 CVE-2024-3596, CVE-2024-37370, CVE-2024-37371 https://nvd.nist.gov/vuln/searchThis hyperlink is taking you to a website outside of Dell Technologies.
libss CVE-2022-1304 https://nvd.nist.gov/vuln/searchThis hyperlink is taking you to a website outside of Dell Technologies.
nss-softokn CVE-2023-5388 https://nvd.nist.gov/vuln/searchThis hyperlink is taking you to a website outside of Dell Technologies.
openssh CVE-2021-41617 https://nvd.nist.gov/vuln/searchThis hyperlink is taking you to a website outside of Dell Technologies.
openssl CVE-2019-1563, CVE-2022-1292, CVE-2022-2068, CVE-2023-0215, CVE-2023-0464 https://nvd.nist.gov/vuln/searchThis hyperlink is taking you to a website outside of Dell Technologies.
python-pillow CVE-2022-22815 https://nvd.nist.gov/vuln/searchThis hyperlink is taking you to a website outside of Dell Technologies.
zlib CVE-2023-45853 https://nvd.nist.gov/vuln/searchThis hyperlink is taking you to a website outside of Dell Technologies.

 

Dell Technologies recomienda que todos los clientes tengan en cuenta tanto la puntuación base como cualquier otra puntuación ambiental y temporal relevante que pueda afectar la posible gravedad asociada con la vulnerabilidad de seguridad en particular.

Corrección y productos afectados

Product Software/Firmware Affected Versions Remediated Versions Link
XtremIO X2 XMS Versions prior to 6.4.4 Version 6.4.4 or later https://www.dell.com/support/product-details/product/xtremio-x2/drivers

 

Product Software/Firmware Affected Versions Remediated Versions Link
XtremIO X2 XMS Versions prior to 6.4.4 Version 6.4.4 or later https://www.dell.com/support/product-details/product/xtremio-x2/drivers

 

Historial de revisiones

RevisionDateDescription
1.02025-10-02Initial Release

 

Información relacionada

Dell Security Advisories and Notices
Dell Vulnerability Response Policy
CVSS Scoring Guide

Descargo de responsabilidad

Productos afectados

XtremIO, XtremIO HW X2-R, XtremIO HW X2-R Encrypt Disable, XtremIO HW X2-S, XtremIO HW X2-S Encrypt Disable, XtremIO HW X2-T, XtremIO HW X2-T Encrypt Disable, XtremIO X2
Propiedades del artículo
Número del artículo: 000376651
Tipo de artículo: Dell Security Advisory
Última modificación: 02 oct 2025
Encuentre respuestas a sus preguntas de otros usuarios de Dell
Servicios de soporte
Compruebe si el dispositivo está cubierto por los servicios de soporte.