DSA-2022-259: Dell Container Storage Modules Security Update for Multiple Vulnerabilities
Riepilogo: Dell Container Storage Modules remediation is available for gofsutil that may be exploited by malicious users to compromise the affected system.
Questo articolo si applica a
Questo articolo non si applica a
Questo articolo non è legato a un prodotto specifico.
Non tutte le versioni del prodotto sono identificate in questo articolo.
Impatto
High
Dettagli
| Proprietary Code CVEs | Description | CVSS Base Score | CVSS Vector String |
| CVE-2022-34427 | Dell Container Storage Modules 1.3 contains an operating system command injection in gofsutil library. A remote authenticated malicious user with low privileges may potentially exploit this vulnerability to run arbitrary operating system commands on the affected system. | 8.8 | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
CVE-2022-34426 |
Dell Container Storage Modules 1.3 contains a path traversal vulnerability in gofsutil library. A remote authenticated malicious user with low privileges may potentially exploit this vulnerability leading to unintentional access to a path outside of restricted directory. | 8.8 | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
| Proprietary Code CVEs | Description | CVSS Base Score | CVSS Vector String |
| CVE-2022-34427 | Dell Container Storage Modules 1.3 contains an operating system command injection in gofsutil library. A remote authenticated malicious user with low privileges may potentially exploit this vulnerability to run arbitrary operating system commands on the affected system. | 8.8 | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
CVE-2022-34426 |
Dell Container Storage Modules 1.3 contains a path traversal vulnerability in gofsutil library. A remote authenticated malicious user with low privileges may potentially exploit this vulnerability leading to unintentional access to a path outside of restricted directory. | 8.8 | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Prodotti interessati e correzione
| CVEs Addressed | Product | Affected Versions | Updated Version | Link to Update |
| CVE-2022-34427 | Dell Container Storage Modules | Versions 1.9 and earlier | 1.10.0 | https://github.com/dell/gofsutil |
| CVE-2022-34426 |
| CVEs Addressed | Product | Affected Versions | Updated Version | Link to Update |
| CVE-2022-34427 | Dell Container Storage Modules | Versions 1.9 and earlier | 1.10.0 | https://github.com/dell/gofsutil |
| CVE-2022-34426 |
Cronologia delle revisioni
| Revision | Date | Description |
| 1.0 | 2022-09-15 | Initial Release |
Informazioni correlate
Dichiarazione di non responsabilità
Prodotti interessati
Container Storage Modules, Product Security InformationProprietà dell'articolo
Numero articolo: 000203352
Tipo di articolo: Dell Security Advisory
Ultima modifica: 18 set 2025
Trova risposta alle tue domande dagli altri utenti Dell
Support Services
Verifica che il dispositivo sia coperto dai Servizi di supporto.