DSA-2024-487: Security Update for Cloud Tiering Appliance/VE Multiple Third-Party Component Vulnerabilities.

요약: Dell Cloud Tiering Appliance/VE remediation is available for multiple security vulnerabilities that could be exploited by malicious users to compromise the affected system.

이 문서는 다음에 적용됩니다. 이 문서는 다음에 적용되지 않습니다. 이 문서는 특정 제품과 관련이 없습니다. 모든 제품 버전이 이 문서에 나와 있는 것은 아닙니다.

영향

Critical

세부 정보

Third-party Component

CVEs

More Information

openssl-1_1 

CVE-2024-5535, CVE-2023-50782 

See NVD link below for individual scores for each CVE. 

http://nvd.nist.gov/This hyperlink is taking you to a website outside of Dell Technologies.

postgresql16 

CVE-2024-7348 

See NVD link below for individual scores for each CVE. 

http://nvd.nist.gov/This hyperlink is taking you to a website outside of Dell Technologies.

kernel-default 

CVE-2022-0854, CVE-2022-20368, CVE-2022-28748, CVE-2022-2964, CVE-2022-48686, CVE-2022-48791, CVE-2022-48802, CVE-2022-48805, CVE-2022-48839, CVE-2022-48853, CVE-2022-48872, CVE-2022-48873, CVE-2022-48901, CVE-2022-48912, CVE-2022-48919, CVE-2022-48925, CVE-2023-1582, CVE-2023-2176,  CVE-2023-52854, CVE-2024-26583, CVE-2024-26584, CVE-2024-26800, CVE-2024-41011, CVE-2024-41062, CVE-2024-42077, CVE-2024-42232, CVE-2024-42271, CVE-2024-43861, CVE-2024-43882, CVE-2024-43883, CVE-2024-44947, CVE-2021-47069, CVE-2022-48911, CVE-2022-48945, CVE-2024-36971, CVE-2024-41087, CVE-2024-44946, CVE-2024-45003, CVE-2024-45021, CVE-2024-46695, CVE-2024-46774

See NVD link below for individual scores for each CVE. 

http://nvd.nist.gov/This hyperlink is taking you to a website outside of Dell Technologies.

Python-setuptools 

CVE-2024-6345

See NVD link below for individual scores for each CVE. 

http://nvd.nist.gov/This hyperlink is taking you to a website outside of Dell Technologies.

xen-libs 

CVE-2024-31145, CVE-2024-31146 

See NVD link below for individual scores for each CVE. 

http://nvd.nist.gov/This hyperlink is taking you to a website outside of Dell Technologies.

python3  

CVE-2024-6923, CVE-2024-7592 

See NVD link below for individual scores for each CVE. 

http://nvd.nist.gov/This hyperlink is taking you to a website outside of Dell Technologies.

kernel-firmware 

CVE-2023-31315 

See NVD link below for individual scores for each CVE. 

http://nvd.nist.gov/This hyperlink is taking you to a website outside of Dell Technologies.

java-11-openjdk

CVE-2024-21208, CVE-2024-21210, CVE-2024-21217, CVE-2024-21235 

See NVD link below for individual scores for each CVE. 

http://nvd.nist.gov/This hyperlink is taking you to a website outside of Dell Technologies.

Dell Technologies는 모든 고객이 CVSS 기본 점수와 관련 임시 및 환경 점수를 모두 고려할 것을 권장합니다. 이 경우 특정 보안 취약성과 관련된 잠재적인 심각도에 영향을 미칠 수 있습니다.

영향을 받는 제품 및 문제 해결

Product

Software/Firmware

Affected Versions

Remediated Versions

Link

Cloud Tiering Appliance

CTA and CTA-HA 

Versions prior to 13.2.0.2.32 

Version 13.2.0.2.32 or later 

https://www.dell.com/support/home/product-support/product/cloud-tiering-applianceve/drivers 

Cloud Tiering Appliance/VE

CTA/VE and CTA-HA/VE 

Versions prior to 13.2.0.2.32 

Version 13.2.0.2.32 or later 

https://www.dell.com/support/home/product-support/product/cloud-tiering-applianceve/drivers 

Product

Software/Firmware

Affected Versions

Remediated Versions

Link

Cloud Tiering Appliance

CTA and CTA-HA 

Versions prior to 13.2.0.2.32 

Version 13.2.0.2.32 or later 

https://www.dell.com/support/home/product-support/product/cloud-tiering-applianceve/drivers 

Cloud Tiering Appliance/VE

CTA/VE and CTA-HA/VE 

Versions prior to 13.2.0.2.32 

Version 13.2.0.2.32 or later 

https://www.dell.com/support/home/product-support/product/cloud-tiering-applianceve/drivers 

개정 내역

Revision

Date

Description

1.0

2024-12-09

Initial Release

관련 정보

해당 제품

Cloud Tiering Appliance/VE
문서 속성
문서 번호: 000258232
문서 유형: Dell Security Advisory
마지막 수정 시간: 09 9월 2025
다른 Dell 사용자에게 질문에 대한 답변 찾기
지원 서비스
디바이스에 지원 서비스가 적용되는지 확인하십시오.