DSA-2022-266: Dell NetWorker vProxy Security Update for Multiple Third-Party Vulnerabilities

Resumen: Dell NetWorker vProxy remediation is available for multiple security vulnerabilities that may be exploited by malicious users to compromise the affected system.

Este artículo se aplica a Este artículo no se aplica a Este artículo no está vinculado a ningún producto específico. No se identifican todas las versiones del producto en este artículo.

Impacto

Critical

Detalles

Third-party Component  CVEs More information
kernel CVE-2020-26541
https://www.tenable.com/plugins/nessus/163096
CVE-2021-4157
CVE-2022-1012
CVE-2022-1679
CVE-2022-2318
CVE-2022-20132
CVE-2022-20141
CVE-2022-20154
CVE-2022-26365
CVE-2022-29900
CVE-2022-29901
CVE-2022-33740
CVE-2022-33741
CVE-2022-33742
CVE-2022-33981
curl CVE-2022-32206 https://www.tenable.com/plugins/nessus/162966
 
CVE-2022-32208

 
OpenSSL CVE-2022-2097 https://www.tenable.com/plugins/nessus/162959
 
rsyslog CVE-2022-24903 https://www.tenable.com/plugins/nessus/162946
 
Third-party Component  CVEs More information
kernel CVE-2020-26541
https://www.tenable.com/plugins/nessus/163096
CVE-2021-4157
CVE-2022-1012
CVE-2022-1679
CVE-2022-2318
CVE-2022-20132
CVE-2022-20141
CVE-2022-20154
CVE-2022-26365
CVE-2022-29900
CVE-2022-29901
CVE-2022-33740
CVE-2022-33741
CVE-2022-33742
CVE-2022-33981
curl CVE-2022-32206 https://www.tenable.com/plugins/nessus/162966
 
CVE-2022-32208

 
OpenSSL CVE-2022-2097 https://www.tenable.com/plugins/nessus/162959
 
rsyslog CVE-2022-24903 https://www.tenable.com/plugins/nessus/162946
 
Dell Technologies recomienda que todos los clientes tengan en cuenta tanto la puntuación base como cualquier otra puntuación ambiental y temporal relevante que pueda afectar la posible gravedad asociada con la vulnerabilidad de seguridad en particular.

Corrección y productos afectados

 
Product Affected Versions Updated Versions Link to Update
NetWorker vProxy 4.3.0-31 and earlier Version 4.3.0-34 
NetWorker vProxy and NetWorker compatibility documentation are at: E-Lab Interoperability Navigator 2.0-Components View (dell.com).
https://dl.dell.com/downloads/DLD3204_NetWorker-vProxy-OVA-(4.3.0-34).ova

NOTE: These vulnerabilities are reported on NetWorker vProxy version 4.3.0-31. All the reported CVEs are addressed in NetWorker vProxy 4.3.0-34.The latest NetWorker vProxy (version 4.3.0-34) can be used with any NetWorker 19.6.1, 19.6.1.2, 19.7.0, and 19.7.0.1 version. NetWorker vProxy is compatible with all current and previous NetWorker versions (from NetWorker 19.4 onwards). See the above E-Lab link for the compatibility matrix.
 
Product Affected Versions Updated Versions Link to Update
NetWorker vProxy 4.3.0-31 and earlier Version 4.3.0-34 
NetWorker vProxy and NetWorker compatibility documentation are at: E-Lab Interoperability Navigator 2.0-Components View (dell.com).
https://dl.dell.com/downloads/DLD3204_NetWorker-vProxy-OVA-(4.3.0-34).ova

NOTE: These vulnerabilities are reported on NetWorker vProxy version 4.3.0-31. All the reported CVEs are addressed in NetWorker vProxy 4.3.0-34.The latest NetWorker vProxy (version 4.3.0-34) can be used with any NetWorker 19.6.1, 19.6.1.2, 19.7.0, and 19.7.0.1 version. NetWorker vProxy is compatible with all current and previous NetWorker versions (from NetWorker 19.4 onwards). See the above E-Lab link for the compatibility matrix.

Historial de revisiones

RevisionDateDescription
1.02022-09-20Initial Release

Información relacionada

Productos afectados

NetWorker Family, NetWorker, NetWorker Series, NetWorker Module, Product Security Information
Propiedades del artículo
Número del artículo: 000203560
Tipo de artículo: Dell Security Advisory
Última modificación: 09 sept 2025
Encuentre respuestas a sus preguntas de otros usuarios de Dell
Servicios de soporte
Compruebe si el dispositivo está cubierto por los servicios de soporte.