DSA-2020-235: Dell EMC VxRail Appliance Security Update for Multiple Third-Party Component Vulnerabilities

이 문서는 다음에 적용됩니다. 이 문서는 다음에 적용되지 않습니다. 이 문서는 특정 제품과 관련이 없습니다. 모든 제품 버전이 이 문서에 나와 있는 것은 아닙니다.

영향

Critical

세부 정보

Multiple components within Dell EMC VxRail Appliance require a security update to address various vulnerabilities.

Third-party Component CVE(s) More information
VMware ESXi 7.0 U1 CVE-2020-3981 VMSA-2020-0023
CVE-2020-3982
CVE-2020-3992
Oracle Critical Patch Update CVE-2020-14583 Oracle Critical Patch Update - July 2020
CVE-2020-14593
CVE-2020-14562
CVE-2020-14621
CVE-2020-14556
CVE-2020-14581
CVE-2020-14577
CVE-2020-14573
SUSE Enterprise Linux Server CVE-2020-10713 Security Vulnerability: "Boothole" grub2 UEFI secure boot lockdown bypass
SUSE Enterprise Linux Server 15 SP1 Updates
Intel Platform Updates CVE-2020-0527 DSA-2020-147: Dell EMC Server Platform Security Advisory for the 2020.1 Intel Platform Updates (June 2020) - Intel SSD
JQuery CVE-2020-11022
CVE-2019-11358
For more information about any of the Common Vulnerabilities and Exposures (CVEs) mentioned here, consult the National Vulnerability Database (NVD) at http://nvd.nist.gov/.  

To search for a particular CVE, use the database s search utility at http://web.nvd.nist.gov/view/vuln/search
Third-party Component CVE(s) More information
VMware ESXi 7.0 U1 CVE-2020-3981 VMSA-2020-0023
CVE-2020-3982
CVE-2020-3992
Oracle Critical Patch Update CVE-2020-14583 Oracle Critical Patch Update - July 2020
CVE-2020-14593
CVE-2020-14562
CVE-2020-14621
CVE-2020-14556
CVE-2020-14581
CVE-2020-14577
CVE-2020-14573
SUSE Enterprise Linux Server CVE-2020-10713 Security Vulnerability: "Boothole" grub2 UEFI secure boot lockdown bypass
SUSE Enterprise Linux Server 15 SP1 Updates
Intel Platform Updates CVE-2020-0527 DSA-2020-147: Dell EMC Server Platform Security Advisory for the 2020.1 Intel Platform Updates (June 2020) - Intel SSD
JQuery CVE-2020-11022
CVE-2019-11358
For more information about any of the Common Vulnerabilities and Exposures (CVEs) mentioned here, consult the National Vulnerability Database (NVD) at http://nvd.nist.gov/.  

To search for a particular CVE, use the database s search utility at http://web.nvd.nist.gov/view/vuln/search
Dell Technologies는 모든 고객이 CVSS 기본 점수와 관련 임시 및 환경 점수를 모두 고려할 것을 권장합니다. 이 경우 특정 보안 취약성과 관련된 잠재적인 심각도에 영향을 미칠 수 있습니다.

영향을 받는 제품 및 문제 해결

Affected products:     
Dell EMC VxRail Appliance 7.x versions prior to 7.0.100


Remediation:     
The following Dell EMC VxRail Appliance release addresses these vulnerabilities:      

  • Dell EMC VxRail Appliance 7.0.100

Dell EMC recommends all customers upgrade at the earliest opportunity.



Affected products:     
Dell EMC VxRail Appliance 7.x versions prior to 7.0.100


Remediation:     
The following Dell EMC VxRail Appliance release addresses these vulnerabilities:      

  • Dell EMC VxRail Appliance 7.0.100

Dell EMC recommends all customers upgrade at the earliest opportunity.



관련 정보

해당 제품

VxRail Software

제품

Product Security Information, VxRail Appliance Family, VxRail Appliance Series, VxRail Software
문서 속성
문서 번호: 000180948
문서 유형: Dell Security Advisory
마지막 수정 시간: 22 5월 2021
다른 Dell 사용자에게 질문에 대한 답변 찾기
지원 서비스
디바이스에 지원 서비스가 적용되는지 확인하십시오.