DSA-2025-187: Security Update for Dell NetWorker vProxy Multiple Third-Party Component Vulnerabilities
Summary: Dell NetWorker vProxy remediation is available for multiple security vulnerabilities that could be exploited by malicious users to compromise the affected system.
Ez a cikk a következő(k)re vonatkozik:
Ez a cikk nem vonatkozik a következő(k)re:
Ez a cikk nem kapcsolódik egyetlen konkrét termékhez sem.
Ez a cikk nem azonosítja az összes termékverziót.
Impact
High
Details
| Third-party Component | CVEs | More Information |
| cURL | CVE-2023-46218, CVE-2023-46219, CVE-2024-9681 | https://nvd.nist.gov/vuln/search |
| libexpat | CVE-2023-52425, CVE-2023-52426 | https://nvd.nist.gov/vuln/search |
| Linux kernel | CVE-2024-8805 | https://nvd.nist.gov/vuln/search |
| OpenSSL | CVE-2023-5678, CVE-2023-6129, CVE-2024-0727 | https://nvd.nist.gov/vuln/search |
Érintett termékek és helyreállítás
| Product | Software/Firmware | Affected Versions | Remediated Versions | Link |
| NetWorker vProxy | vProxy OVA | Version 19.12 | Version 19.12.0.1 or later | |
| NetWorker vProxy | vProxy OVA | Versions prior to 19.11.0.5 | Version 19.11.0.5 or later | NetWorker Downloads Area |
| Product | Software/Firmware | Affected Versions | Remediated Versions | Link |
| NetWorker vProxy | vProxy OVA | Version 19.12 | Version 19.12.0.1 or later | |
| NetWorker vProxy | vProxy OVA | Versions prior to 19.11.0.5 | Version 19.11.0.5 or later | NetWorker Downloads Area |
Notes:
- The Affected Products and Remediation table above may not be a comprehensive list of all affected supported versions and may be updated as more information becomes available.
- Platforms: Windows & Linux (All variants and flavors are impacted)
- Versions prior to 19.11.0.5 means versions 19.11.0.4, 19.11.x, 19.10.x, 19.9.x, 19.8.x, 19.7.x, 19.6.x, 19.5.x, 19.4.x family of releases that are still under standard support. For more information on Dell End-of-Life Documents for converged infrastructure, midrange and enterprise storage, and storage networking products kindly refer to Dell End-of-Life Product List for Converged Infrastructure and Storage.
- Unless specified as impacted, the term “later releases” encompasses all NetWorker releases, under standard support, that are of a higher minor or major version than the specified release. Dell recommends that you always upgrade to the latest release/version for your product.
Revision History
| Revision | Date | Description |
| 1.0 | 2025-04-18 | Initial Release |
| 2.0 | 2025-05-26 | Minor Updates related to 19.11.0.5 release and other formatting updates, no content changes. |
| 3.0 | 2025-10-23 | Minor formatting changes |
Related Information
Jogi nyilatkozat
Érintett termékek
NetWorker Family, NetWorkerTermék tulajdonságai
Article Number: 000309762
Article Type: Dell Security Advisory
Utoljára módosítva: 23 okt. 2025
Választ kaphat kérdéseire más Dell-felhasználóktól
Támogatási szolgáltatások
Ellenőrizze, hogy a készüléke rendelkezik-e támogatási szolgáltatással.