DSA-2024-146: Security Update for Dell Secured Component Verification (SCV) Vulnerabilities
요약: Dell Secured Component Verification (SCV) remediation is available for multiple security vulnerabilities that could be exploited by malicious users to compromise the affected system.
이 문서는 다음에 적용됩니다.
이 문서는 다음에 적용되지 않습니다.
이 문서는 특정 제품과 관련이 없습니다.
모든 제품 버전이 이 문서에 나와 있는 것은 아닙니다.
영향
Critical
세부 정보
| Third-party Component | CVEs | More Information |
|---|---|---|
| LibcURL | CVE-2018-0500, CVE-2018-14618, CVE-2018-16839, CVE-2018-16840, CVE-2018-16842, CVE-2018-16890, CVE-2019-5443, CVE-2020-8177, CVE-2020-8284, CVE-2020-8285, CVE-2021-22876, CVE-2021-22898, CVE-2021-22923 |
See NVD link below for individual scores for each CVE. https://nvd.nist.gov/  |
| OpenSSL 1.1.1n | CVE-2022-1292, CVE-2022-2068, CVE-2023-4807, CVE-2022-4450, CVE-2023-0215, CVE-2023-0464, CVE-2023-0286, CVE-2023-2650, CVE-2023-4304, CVE-2024-0727, CVE-2022-2097, CVE-2023-0465, CVE-2023-0466, CVE-2023-3817, CVE-2023-5678 | See NVD link below for individual scores for each CVE. https://nvd.nist.gov/ |
영향을 받는 제품 및 문제 해결
| Product | Software/Firmware | Affected Versions | Remediated Versions | Link |
|---|---|---|---|---|
| Dell Secured Component Verification (SCV) | SCV for Microsoft Windows Server | Versions prior to 1.92.0 | Version 1.92.0 or later | https://www.dell.com/support/home/drivers/DriversDetails?driverId=05F3Y |
| Dell Secured Component Verification (SCV) | SCV for Linux Server | Versions prior to 1.92.0 | Version 1.92.0 or later | https://www.dell.com/support/home/drivers/DriversDetails?driverId=FC8C2 |
| Dell Secured Component Verification (SCV) | SCV for WinPE | Versions prior to 1.92.0 | Version 1.92.0 or later | https://www.dell.com/support/home/drivers/DriversDetails?driverId=RJDJM |
| Product | Software/Firmware | Affected Versions | Remediated Versions | Link |
|---|---|---|---|---|
| Dell Secured Component Verification (SCV) | SCV for Microsoft Windows Server | Versions prior to 1.92.0 | Version 1.92.0 or later | https://www.dell.com/support/home/drivers/DriversDetails?driverId=05F3Y |
| Dell Secured Component Verification (SCV) | SCV for Linux Server | Versions prior to 1.92.0 | Version 1.92.0 or later | https://www.dell.com/support/home/drivers/DriversDetails?driverId=FC8C2 |
| Dell Secured Component Verification (SCV) | SCV for WinPE | Versions prior to 1.92.0 | Version 1.92.0 or later | https://www.dell.com/support/home/drivers/DriversDetails?driverId=RJDJM |
We strongly recommend upgrading your SCV software to the latest version. The latest version includes critical security fixes that are not available in earlier versions of SCV.
Security Update Release Schedule for Supported Versions of SCV: https://www.dell.com/support/kbdoc/000218852
Security Update Release Schedule for Supported Versions of SCV: https://www.dell.com/support/kbdoc/000218852
개정 내역
| Revision | Date | Description |
|---|---|---|
| 1.0 | 2024-04-01 | Initial release |
관련 정보
법적 고지 사항
해당 제품
Secured Component Verification (SCV)제품
Secured Component Verification (SCV)문서 속성
문서 번호: 000223688
문서 유형: Dell Security Advisory
마지막 수정 시간: 01 4월 2024
다른 Dell 사용자에게 질문에 대한 답변 찾기
지원 서비스
디바이스에 지원 서비스가 적용되는지 확인하십시오.