DSA-2023-381: Security Update for Dell ObjectScale 1.3 Vulnerabilities

概要: Dell ObjectScale 1.3 remediation is available for multiple security vulnerabilities that could be exploited by malicious users to compromise the affected systems

この記事は次に適用されます： この記事は次には適用されません： この記事は、特定の製品に関連付けられていません。 すべての製品パージョンがこの記事に記載されているわけではありません。
他のリソースを確認する

影響

Critical

詳細

Third-Party Component Name CVEs More Information
Apache Commons Net CVE-2021-37533 See NVD link below for individual scores for each CVE.
https://nvd.nist.gov/ This hyperlink is taking you to a website outside of Dell Technologies.
cryptography CVE-2020-36242 See NVD link below for individual scores for each CVE.
https://nvd.nist.gov/ This hyperlink is taking you to a website outside of Dell Technologies.
curl CVE-2023-27538, CVE-2022-32221, CVE-2023-28319 See NVD link below for individual scores for each CVE.
https://nvd.nist.gov/ This hyperlink is taking you to a website outside of Dell Technologies.
Git CVE-2023-23946, CVE-2023-22490, CVE-2022-23521, CVE-2022-41903, CVE-2022-39260, CVE-2022-39253, CVE-2022-29187, CVE-2022-24765, CVE-2022-24975, CVE-2021-21300 See NVD link below for individual scores for each CVE.
https://nvd.nist.gov/ This hyperlink is taking you to a website outside of Dell Technologies.
github.com/containerd/containerd This hyperlink is taking you to a website outside of Dell Technologies. CVE-2023-25173, CVE-2023-25153 See NVD link below for individual scores for each CVE.
https://nvd.nist.gov/ This hyperlink is taking you to a website outside of Dell Technologies.
github.com/docker/docker This hyperlink is taking you to a website outside of Dell Technologies. CVE-2023-28840, CVE-2023-28841, CVE-2023-28842 See NVD link below for individual scores for each CVE.
https://nvd.nist.gov/ This hyperlink is taking you to a website outside of Dell Technologies.
github.com/prometheus/exporter-toolkit This hyperlink is taking you to a website outside of Dell Technologies. CVE-2022-46146 See NVD link below for individual scores for each CVE.
https://nvd.nist.gov/ This hyperlink is taking you to a website outside of Dell Technologies.
github.com/snowflakedb/gosnowflake This hyperlink is taking you to a website outside of Dell Technologies. CVE-2023-34231 See NVD link below for individual scores for each CVE.
https://nvd.nist.gov/This hyperlink is taking you to a website outside of Dell Technologies.
glibc CVE-2023-0687 See NVD link below for individual scores for each CVE.
https://nvd.nist.gov/This hyperlink is taking you to a website outside of Dell Technologies.
go CVE-2020-24553, CVE-2021-3114, CVE-2021-41772, CVE-2021-29923, CVE-2021-38297, CVE-2021-36221, CVE-2020-14039, CVE-2021-41771, CVE-2020-16845, CVE-2020-28362, CVE-2021-33198, CVE-2021-33196, CVE-2021-39293, CVE-2021-34558, CVE-2021-27918, CVE-2020-29510, CVE-2021-33195, CVE-2020-28367, CVE-2020-15586, CVE-2021-33197, CVE-2020-28366, CVE-2020-7919 See NVD link below for individual scores for each CVE.
https://nvd.nist.gov/This hyperlink is taking you to a website outside of Dell Technologies.
golang.org/x/crypto This hyperlink is taking you to a website outside of Dell Technologies. CVE-2020-29652 See NVD link below for individual scores for each CVE.
https://nvd.nist.gov/This hyperlink is taking you to a website outside of Dell Technologies.
golang.org/x/net This hyperlink is taking you to a website outside of Dell Technologies. CVE-2021-31525, CVE-2021-33194, CVE-2022-41721 See NVD link below for individual scores for each CVE.
https://nvd.nist.gov/This hyperlink is taking you to a website outside of Dell Technologies.
golang.org/x/text This hyperlink is taking you to a website outside of Dell Technologies. CVE-2022-32149, CVE-2021-38561 See NVD link below for individual scores for each CVE.
https://nvd.nist.gov/This hyperlink is taking you to a website outside of Dell Technologies.
Grafana  CVE-2022-21713, CVE-2022-21703, CVE-2021-43815, CVE-2022-29170 See NVD link below for individual scores for each CVE.
https://nvd.nist.gov/This hyperlink is taking you to a website outside of Dell Technologies.
helm/helm CVE-2022-23526, CVE-2022-23525, CVE-2022-23524 See NVD link below for individual scores for each CVE.
https://nvd.nist.gov/This hyperlink is taking you to a website outside of Dell Technologies.
jackson-databind CVE-2021-46877 See NVD link below for individual scores for each CVE.
https://nvd.nist.gov/This hyperlink is taking you to a website outside of Dell Technologies.
Jettison - Json Stax implementation CVE-2022-45685, CVE-2022-45693, CVE-2023-1436 See NVD link below for individual scores for each CVE.
https://nvd.nist.gov/This hyperlink is taking you to a website outside of Dell Technologies.
less CVE-2022-46663 See NVD link below for individual scores for each CVE.
https://nvd.nist.gov/This hyperlink is taking you to a website outside of Dell Technologies.
protobuf-java CVE-2022-3509, CVE-2022-3510, CVE-2022-3171, CVE-2021-22570 See NVD link below for individual scores for each CVE.
https://nvd.nist.gov/This hyperlink is taking you to a website outside of Dell Technologies.
Python programming language CVE-2022-37454 See NVD link below for individual scores for each CVE.
https://nvd.nist.gov/This hyperlink is taking you to a website outside of Dell Technologies.
python-wheel CVE-2022-40898 See NVD link below for individual scores for each CVE.
https://nvd.nist.gov/This hyperlink is taking you to a website outside of Dell Technologies.
SnakeYAML CVE-2022-1471 See NVD link below for individual scores for each CVE.
https://nvd.nist.gov/This hyperlink is taking you to a website outside of Dell Technologies.
Spring Framework CVE-2023-20860, CVE-2023-20861, CVE-2023-20863 See NVD link below for individual scores for each CVE.
https://nvd.nist.gov/This hyperlink is taking you to a website outside of Dell Technologies.
sudo CVE-2023-28487, CVE-2023-28486, CVE-2023-27320 See NVD link below for individual scores for each CVE.
https://nvd.nist.gov/This hyperlink is taking you to a website outside of Dell Technologies.
Vim CVE-2023-1175, CVE-2023-1170, CVE-2023-1127, CVE-2023-0512, CVE-2023-0433, CVE-2023-1355, CVE-2023-1264 See NVD link below for individual scores for each CVE.
https://nvd.nist.gov/This hyperlink is taking you to a website outside of Dell Technologies.

デル・テクノロジーズでは、すべてのお客様に対して、CVSSベース スコアに加えて、特定のセキュリティの脆弱性に付随する潜在的な重要度に影響する可能性のある現状スコアや環境スコアも考慮することをお勧めしています。

影響を受ける製品と修復

Product Affected Versions Remediated Versions Link
Dell ObjectScale Versions 1.0.0, 1.0.1, 1.0.2, and 1.2.0 Version 1.3.0 To upgrade to ObjectScale 1.3.0 from older versions, please open a Technical Support case to assist with the ObjectScale upgrade to 1.3.0. 
https://www.dell.com/support/incidents-online/
Product Affected Versions Remediated Versions Link
Dell ObjectScale Versions 1.0.0, 1.0.1, 1.0.2, and 1.2.0 Version 1.3.0 To upgrade to ObjectScale 1.3.0 from older versions, please open a Technical Support case to assist with the ObjectScale upgrade to 1.3.0. 
https://www.dell.com/support/incidents-online/

回避策と緩和策

None

変更履歴

RevisionDateDescription
1.02023-10-17Initial Release
2.02023-11-27Updated language in the Affected Products and Remediation Table.  Separated instructions for fresh installations and upgrading to 1.3.0 into two distinct line items.  Updates are for enhanced presentation only, does not change the content.  

関連情報

Dell Security Advisories and Notices
Dell Vulnerability Response Policy
CVSS Scoring Guide

法的免責事項

対象製品

ObjectScale
文書のプロパティ
文書番号: 000218660
文書の種類: Dell Security Advisory
最終更新: 08 11月 2025
質問に対する他のDellユーザーからの回答を見つける
サポート サービス
お使いのデバイスがサポート サービスの対象かどうかを確認してください。