DSA-2024-419: Security Update for Dell Data Lakehouse System Software for Multiple Component Vulnerabilities

Riepilogo: Dell Data Lakehouse System Software remediation is available for multiple security vulnerabilities that could be exploited by malicious users to compromise the affected system.

Questo articolo si applica a Questo articolo non si applica a Questo articolo non è legato a un prodotto specifico. Non tutte le versioni del prodotto sono identificate in questo articolo.
Scopri le altre risorse

Impatto

Critical

Dettagli

Third-party Component 

CVEs

More Information 

Elasticsearch 

CVE-2024-23450 

org.apache.hadoop_hadoop-hdfs 

CVE-2021-33036, CVE-2021-25642 

See NVD link below for individual scores for each CVE.

http://nvd.nist.gov/This hyperlink is taking you to a website outside of Dell Technologies.

libyaml 

CVE-2024-35328, CVE-2024-35325, CVE-2024-35326 

See NVD link below for individual scores for each CVE.

http://nvd.nist.gov/This hyperlink is taking you to a website outside of Dell Technologies.

com.amazon.redshift_redshift-jdbc42 

CVE-2024-32888 

curl 

CVE-2024-2004, CVE-2024-2398 

See NVD link below for individual scores for each CVE.

http://nvd.nist.gov/This hyperlink is taking you to a website outside of Dell Technologies.

Ethernet Adapters in PowerEdge R660 BIOS versions prior to 2.2.7

CVE-2024-21769, CVE-2024-21807, CVE-2024-22374, CVE-2024-22376, CVE-2024-23497, CVE-2024-24986, CVE-2024-21801, CVE-2024-21806, CVE-2024-21810, CVE-2024-23499, CVE-2024-23981, CVE-2024-24983

See NVD link below for individual scores for each CVE.

http://nvd.nist.gov/This hyperlink is taking you to a website outside of Dell Technologies.

2024.2 IPU – Intel Processor Stream Cache Advisory in PowerEdge R660 BIOS versions prior to 2.2.7

CVE-2023-49141

https://nvd.nist.gov/vuln/detail/CVE-2023-49141This hyperlink is taking you to a website outside of Dell Technologies.

OpenSSH in PowerEdge R660 iDRAC versions prior to 7.10.50.10

CVE-2024-6387

https://nvd.nist.gov/vuln/detail/CVE-2024-6387This hyperlink is taking you to a website outside of Dell Technologies.

Intel Processor in PowerEdge R660

CVE-2024-21829, CVE-2024-21781, CVE-2024-23984, CVE-2024-24968, CVE-2024-21853

See NVD link below for individual scores for each CVE.

http://nvd.nist.gov/This hyperlink is taking you to a website outside of Dell Technologies.

Proprietary Code CVEs 

Description 

CVSS Base Score 

CVSS Vector String 

CVE-2024-47483 

Dell Data Lakehouse, version(s) 1.0.0.0 and 1.1.0.0, contain(s) an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability. An unauthenticated attacker with local access could potentially exploit this vulnerability, leading to Information disclosure. 

2.9 

CVE-2024-47481 

Dell Data Lakehouse, version(s) 1.0.0.0, 1.1.0., contain(s) an Improper Access Control vulnerability. An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to Denial of service. 

6.5 

Proprietary Code CVEs 

Description 

CVSS Base Score 

CVSS Vector String 

CVE-2024-47483 

Dell Data Lakehouse, version(s) 1.0.0.0 and 1.1.0.0, contain(s) an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability. An unauthenticated attacker with local access could potentially exploit this vulnerability, leading to Information disclosure. 

2.9 

CVE-2024-47481 

Dell Data Lakehouse, version(s) 1.0.0.0, 1.1.0., contain(s) an Improper Access Control vulnerability. An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to Denial of service. 

6.5 
Dell Technologies raccomanda a tutti i clienti di prendere in considerazione sia il punteggio base CVSS, sia ogni eventuale punteggio temporale o ambientale che possa avere effetti sul livello di gravità potenziale associato a una specifica vulnerabilità di sicurezza.

Prodotti interessati e correzione

Product 

Affected Versions 

Remediated Versions  

Link  

DELL Data Lakehouse System Software 

Versions 1.0.0.0 and 1.1.0.0 

 Version 1.2.0.0 or later

Product 

Affected Versions 

Remediated Versions  

Link  

DELL Data Lakehouse System Software 

Versions 1.0.0.0 and 1.1.0.0 

 Version 1.2.0.0 or later

Cronologia delle revisioni

Revision

Date

Description

1.0

2024-10-25

Initial Release

2.0

2024-12-12

Updated Advisory by adding CVE-2024-21769, CVE-2024-21807, CVE-2024-22374, CVE-2024-22376, CVE-2024-23497, CVE-2024-24986, CVE-2024-21801, CVE-2024-21806, CVE-2024-21810, CVE-2024-23499, CVE-2024-23981, CVE-2024-24983, CVE-2023-49141, CVE-2024-6387 under Third-Party Component Table

3.0

2024-12-18

Updated Advisory by adding CVE-2024-21829, CVE-2024-21781, CVE-2024-23984, CVE-2024-24968, CVE-2024-21853 under Third-Party Component Table

Informazioni correlate

Dell Security Advisories and Notices
Dell Vulnerability Response Policy
CVSS Scoring Guide

Dichiarazione di non responsabilità

Prodotti interessati

Dell Data Lakehouse, Product Security Information
Proprietà dell'articolo
Numero articolo: 000240535
Tipo di articolo: Dell Security Advisory
Ultima modifica: 09 set 2025
Trova risposta alle tue domande dagli altri utenti Dell
Support Services
Verifica che il dispositivo sia coperto dai Servizi di supporto.