DSA-2025-349: Security Update for Dell XtremIO X2 Multiple Component Vulnerabilities

Résumé: Dell XtremIO X2 remediation is available for multiple security vulnerabilities that could be exploited by malicious users to compromise the affected system.

Cet article concerne Cet article ne concerne pas Cet article n’est associé à aucun produit spécifique. Toutes les versions du produit ne sont pas identifiées dans cet article.

Impact

Critical

Détails

Third-party Component CVEs More Information
bind CVE-2021-25220, CVE-2022-2795, CVE-2022-38177, CVE-2022-38178 https://nvd.nist.gov/vuln/searchThis hyperlink is taking you to a website outside of Dell Technologies.
cpp CVE-2020-11023 https://nvd.nist.gov/vuln/searchThis hyperlink is taking you to a website outside of Dell Technologies.
glibc CVE-2021-27645, CVE-2021-35942, CVE-2021-3999, CVE-2022-23218, CVE-2022-23219, CVE-2024-2961, CVE-2024-33599, CVE-2024-33600, CVE-2024-33601, CVE-2024-33602 https://nvd.nist.gov/vuln/searchThis hyperlink is taking you to a website outside of Dell Technologies.
httpd CVE-2006-20001, CVE-2014-8109, CVE-2019-10092, CVE-2020-35452, CVE-2021-26690, CVE-2022-22719, CVE-2022-22721, CVE-2022-23943, CVE-2022-26377, CVE-2022-28615, CVE-2022-29404, CVE-2022-30522, CVE-2022-31813, CVE-2023-31122, CVE-2023-38709, CVE-2024-24795, CVE-2024-38474, CVE-2024-38475, CVE-2024-38476, CVE-2024-38477, CVE-2024-39573, CVE-2024-39884, CVE-2024-40725 https://nvd.nist.gov/vuln/searchThis hyperlink is taking you to a website outside of Dell Technologies.
kernel CVE-2018-10087, CVE-2019-25162, CVE-2020-13974, CVE-2020-26555, CVE-2020-27820, CVE-2021-0129, CVE-2021-20292, CVE-2021-20321, CVE-2021-20322, CVE-2021-28964, CVE-2021-28971, CVE-2021-30178, CVE-2021-3178, CVE-2021-31916, CVE-2021-34693, CVE-2021-3609, CVE-2021-3612, CVE-2021-3640, CVE-2021-3659, CVE-2021-3679, CVE-2021-37159, CVE-2021-38160, CVE-2021-3923, CVE-2021-40490, CVE-2021-4149, CVE-2021-4157, CVE-2021-4159, CVE-2021-41864, CVE-2021-43389, CVE-2021-43975, CVE-2021-43976, CVE-2021-45485, CVE-2021-45868, CVE-2021-46906, CVE-2021-46932, CVE-2021-46936, CVE-2021-47118, CVE-2021-47153, CVE-2021-47171, CVE-2021-47194, CVE-2021-47383, CVE-2022-0812, CVE-2022-0850, CVE-2022-1011, CVE-2022-1016, CVE-2022-1048, CVE-2022-1055, CVE-2022-1353, CVE-2022-1419, CVE-2022-1652, CVE-2022-1679, CVE-2022-20141, CVE-2022-20368, CVE-2022-21499, CVE-2022-2196, CVE-2022-25265, CVE-2022-26365, CVE-2022-28390, CVE-2022-29581, CVE-2022-3028, CVE-2022-33740, CVE-2022-33741, CVE-2022-33742, CVE-2022-3424, CVE-2022-3565, CVE-2022-3566, CVE-2022-36280, CVE-2022-3629, CVE-2022-3640, CVE-2022-4095, CVE-2022-41674, CVE-2022-41858, CVE-2022-42719, CVE-2022-42720, CVE-2022-42895, CVE-2022-45886, CVE-2022-45919, CVE-2022-45934, CVE-2023-1077, CVE-2023-1118, CVE-2023-1380, CVE-2023-1513, CVE-2023-1829, CVE-2023-1838, CVE-2023-1989, CVE-2023-2124, CVE-2023-3111, CVE-2023-3141, CVE-2023-3268, CVE-2023-3567, CVE-2023-35824, CVE-2023-39197, CVE-2023-40283, CVE-2023-4387, CVE-2023-45862, CVE-2023-51042, CVE-2023-51779, CVE-2023-51780, CVE-2023-52340, CVE-2023-52435, CVE-2023-52445, CVE-2023-52469, CVE-2023-52628, CVE-2023-52752, CVE-2023-52885, CVE-2023-6606, CVE-2023-6610, CVE-2023-6931, CVE-2023-6932, CVE-2024-0775, CVE-2024-23307, CVE-2024-26668, CVE-2024-26689, CVE-2024-26791, CVE-2024-26855, CVE-2024-26872, CVE-2024-26882, CVE-2024-26898, CVE-2024-26923, CVE-2024-26934, CVE-2024-26958, CVE-2024-26982, CVE-2024-27008, CVE-2024-27020, CVE-2024-27043, CVE-2024-35849, CVE-2024-35896, CVE-2024-36883, CVE-2024-36960, CVE-2024-36971, CVE-2024-38538, CVE-2024-38555, CVE-2024-38570, CVE-2024-38600, CVE-2024-38627, CVE-2024-39487, CVE-2024-39494, CVE-2024-41013, CVE-2024-41014, CVE-2024-41071, CVE-2024-42148, CVE-2024-42228, CVE-2024-42280, CVE-2024-42301, CVE-2024-43839, CVE-2024-43882, CVE-2024-43900, CVE-2024-44940, CVE-2024-44970, CVE-2024-44987, CVE-2024-46673, CVE-2024-46722, CVE-2024-46723, CVE-2024-46724, CVE-2024-46731, CVE-2024-46738, CVE-2024-46744, CVE-2024-46750, CVE-2024-46756, CVE-2024-46757, CVE-2024-46758, CVE-2024-46800, CVE-2024-46813, CVE-2024-46818, CVE-2024-47659, CVE-2024-47701, CVE-2024-47742, CVE-2024-47745, CVE-2024-49860, CVE-2024-49882, CVE-2024-49889, CVE-2024-49894, CVE-2024-49950, CVE-2024-49960, CVE-2024-49967, CVE-2024-49991, CVE-2024-50007, CVE-2024-50033, CVE-2024-50035, CVE-2024-50055, CVE-2024-50073, CVE-2024-50115, CVE-2024-50143, CVE-2024-50234, CVE-2024-50267, CVE-2024-50282, CVE-2024-50302, CVE-2024-53057, CVE-2024-53103, CVE-2024-53104, CVE-2024-53141, CVE-2024-53142, CVE-2024-53150, CVE-2024-53156, CVE-2024-53173, CVE-2024-53197, CVE-2024-53227, CVE-2024-53239, CVE-2024-56551, CVE-2024-56603, CVE-2024-56604, CVE-2024-56605, CVE-2024-56606, CVE-2024-56650, CVE-2024-56759, CVE-2024-57798, CVE-2024-57980, CVE-2025-21702, CVE-2025-21920, CVE-2025-21969, CVE-2025-21993, CVE-2025-37785 https://nvd.nist.gov/vuln/searchThis hyperlink is taking you to a website outside of Dell Technologies.
libevent CVE-2016-10195, CVE-2016-10196, CVE-2016-10197 https://nvd.nist.gov/vuln/searchThis hyperlink is taking you to a website outside of Dell Technologies.
libkadm5 CVE-2024-3596, CVE-2024-37370, CVE-2024-37371 https://nvd.nist.gov/vuln/searchThis hyperlink is taking you to a website outside of Dell Technologies.
libss CVE-2022-1304 https://nvd.nist.gov/vuln/searchThis hyperlink is taking you to a website outside of Dell Technologies.
nss-softokn CVE-2023-5388 https://nvd.nist.gov/vuln/searchThis hyperlink is taking you to a website outside of Dell Technologies.
openssh CVE-2021-41617 https://nvd.nist.gov/vuln/searchThis hyperlink is taking you to a website outside of Dell Technologies.
openssl CVE-2019-1563, CVE-2022-1292, CVE-2022-2068, CVE-2023-0215, CVE-2023-0464 https://nvd.nist.gov/vuln/searchThis hyperlink is taking you to a website outside of Dell Technologies.
python-pillow CVE-2022-22815 https://nvd.nist.gov/vuln/searchThis hyperlink is taking you to a website outside of Dell Technologies.
zlib CVE-2023-45853 https://nvd.nist.gov/vuln/searchThis hyperlink is taking you to a website outside of Dell Technologies.

 

Dell Technologies recommande à tous les clients de prendre en compte à la fois le score de base CVSS et les scores temporels et environnementaux pertinents qui peuvent avoir un impact sur la gravité potentielle associée à une faille de sécurité donnée.

Produits concernés et mesure corrective

Product Software/Firmware Affected Versions Remediated Versions Link
XtremIO X2 XMS Versions prior to 6.4.4 Version 6.4.4 or later https://www.dell.com/support/product-details/product/xtremio-x2/drivers

 

Product Software/Firmware Affected Versions Remediated Versions Link
XtremIO X2 XMS Versions prior to 6.4.4 Version 6.4.4 or later https://www.dell.com/support/product-details/product/xtremio-x2/drivers

 

Historique des révisions

RevisionDateDescription
1.02025-10-02Initial Release

 

Informations connexes

Produits concernés

XtremIO, XtremIO HW X2-R, XtremIO HW X2-R Encrypt Disable, XtremIO HW X2-S, XtremIO HW X2-S Encrypt Disable, XtremIO HW X2-T, XtremIO HW X2-T Encrypt Disable, XtremIO X2
Propriétés de l’article
Numéro d’article: 000376651
Type d’article: Dell Security Advisory
Dernière modification: 02 oct. 2025
Trouvez des réponses à vos questions auprès d’autres utilisateurs Dell
Services de support
Vérifiez si votre appareil est couvert par les services de support.