DSA-2023-381: Security Update for Dell ObjectScale 1.3 Vulnerabilities

Samenvatting: Dell ObjectScale 1.3 remediation is available for multiple security vulnerabilities that could be exploited by malicious users to compromise the affected systems

Dit artikel is van toepassing op Dit artikel is niet van toepassing op Dit artikel is niet gebonden aan een specifiek product. Niet alle productversies worden in dit artikel vermeld.
Bekijk andere hulpbronnen

Impact

Critical

Gegevens

Third-Party Component Name CVEs More Information
Apache Commons Net CVE-2021-37533 See NVD link below for individual scores for each CVE.
https://nvd.nist.gov/ This hyperlink is taking you to a website outside of Dell Technologies.
cryptography CVE-2020-36242 See NVD link below for individual scores for each CVE.
https://nvd.nist.gov/ This hyperlink is taking you to a website outside of Dell Technologies.
curl CVE-2023-27538, CVE-2022-32221, CVE-2023-28319 See NVD link below for individual scores for each CVE.
https://nvd.nist.gov/ This hyperlink is taking you to a website outside of Dell Technologies.
Git CVE-2023-23946, CVE-2023-22490, CVE-2022-23521, CVE-2022-41903, CVE-2022-39260, CVE-2022-39253, CVE-2022-29187, CVE-2022-24765, CVE-2022-24975, CVE-2021-21300 See NVD link below for individual scores for each CVE.
https://nvd.nist.gov/ This hyperlink is taking you to a website outside of Dell Technologies.
github.com/containerd/containerd This hyperlink is taking you to a website outside of Dell Technologies. CVE-2023-25173, CVE-2023-25153 See NVD link below for individual scores for each CVE.
https://nvd.nist.gov/ This hyperlink is taking you to a website outside of Dell Technologies.
github.com/docker/docker This hyperlink is taking you to a website outside of Dell Technologies. CVE-2023-28840, CVE-2023-28841, CVE-2023-28842 See NVD link below for individual scores for each CVE.
https://nvd.nist.gov/ This hyperlink is taking you to a website outside of Dell Technologies.
github.com/prometheus/exporter-toolkit This hyperlink is taking you to a website outside of Dell Technologies. CVE-2022-46146 See NVD link below for individual scores for each CVE.
https://nvd.nist.gov/ This hyperlink is taking you to a website outside of Dell Technologies.
github.com/snowflakedb/gosnowflake This hyperlink is taking you to a website outside of Dell Technologies. CVE-2023-34231 See NVD link below for individual scores for each CVE.
https://nvd.nist.gov/This hyperlink is taking you to a website outside of Dell Technologies.
glibc CVE-2023-0687 See NVD link below for individual scores for each CVE.
https://nvd.nist.gov/This hyperlink is taking you to a website outside of Dell Technologies.
go CVE-2020-24553, CVE-2021-3114, CVE-2021-41772, CVE-2021-29923, CVE-2021-38297, CVE-2021-36221, CVE-2020-14039, CVE-2021-41771, CVE-2020-16845, CVE-2020-28362, CVE-2021-33198, CVE-2021-33196, CVE-2021-39293, CVE-2021-34558, CVE-2021-27918, CVE-2020-29510, CVE-2021-33195, CVE-2020-28367, CVE-2020-15586, CVE-2021-33197, CVE-2020-28366, CVE-2020-7919 See NVD link below for individual scores for each CVE.
https://nvd.nist.gov/This hyperlink is taking you to a website outside of Dell Technologies.
golang.org/x/crypto This hyperlink is taking you to a website outside of Dell Technologies. CVE-2020-29652 See NVD link below for individual scores for each CVE.
https://nvd.nist.gov/This hyperlink is taking you to a website outside of Dell Technologies.
golang.org/x/net This hyperlink is taking you to a website outside of Dell Technologies. CVE-2021-31525, CVE-2021-33194, CVE-2022-41721 See NVD link below for individual scores for each CVE.
https://nvd.nist.gov/This hyperlink is taking you to a website outside of Dell Technologies.
golang.org/x/text This hyperlink is taking you to a website outside of Dell Technologies. CVE-2022-32149, CVE-2021-38561 See NVD link below for individual scores for each CVE.
https://nvd.nist.gov/This hyperlink is taking you to a website outside of Dell Technologies.
Grafana  CVE-2022-21713, CVE-2022-21703, CVE-2021-43815, CVE-2022-29170 See NVD link below for individual scores for each CVE.
https://nvd.nist.gov/This hyperlink is taking you to a website outside of Dell Technologies.
helm/helm CVE-2022-23526, CVE-2022-23525, CVE-2022-23524 See NVD link below for individual scores for each CVE.
https://nvd.nist.gov/This hyperlink is taking you to a website outside of Dell Technologies.
jackson-databind CVE-2021-46877 See NVD link below for individual scores for each CVE.
https://nvd.nist.gov/This hyperlink is taking you to a website outside of Dell Technologies.
Jettison - Json Stax implementation CVE-2022-45685, CVE-2022-45693, CVE-2023-1436 See NVD link below for individual scores for each CVE.
https://nvd.nist.gov/This hyperlink is taking you to a website outside of Dell Technologies.
less CVE-2022-46663 See NVD link below for individual scores for each CVE.
https://nvd.nist.gov/This hyperlink is taking you to a website outside of Dell Technologies.
protobuf-java CVE-2022-3509, CVE-2022-3510, CVE-2022-3171, CVE-2021-22570 See NVD link below for individual scores for each CVE.
https://nvd.nist.gov/This hyperlink is taking you to a website outside of Dell Technologies.
Python programming language CVE-2022-37454 See NVD link below for individual scores for each CVE.
https://nvd.nist.gov/This hyperlink is taking you to a website outside of Dell Technologies.
python-wheel CVE-2022-40898 See NVD link below for individual scores for each CVE.
https://nvd.nist.gov/This hyperlink is taking you to a website outside of Dell Technologies.
SnakeYAML CVE-2022-1471 See NVD link below for individual scores for each CVE.
https://nvd.nist.gov/This hyperlink is taking you to a website outside of Dell Technologies.
Spring Framework CVE-2023-20860, CVE-2023-20861, CVE-2023-20863 See NVD link below for individual scores for each CVE.
https://nvd.nist.gov/This hyperlink is taking you to a website outside of Dell Technologies.
sudo CVE-2023-28487, CVE-2023-28486, CVE-2023-27320 See NVD link below for individual scores for each CVE.
https://nvd.nist.gov/This hyperlink is taking you to a website outside of Dell Technologies.
Vim CVE-2023-1175, CVE-2023-1170, CVE-2023-1127, CVE-2023-0512, CVE-2023-0433, CVE-2023-1355, CVE-2023-1264 See NVD link below for individual scores for each CVE.
https://nvd.nist.gov/This hyperlink is taking you to a website outside of Dell Technologies.

Dell Technologies raadt aan dat alle klanten rekening houden met zowel de basisscore van CVSS als alle relevante tijdelijke en omgevingsscores die gevolgen kunnen hebben voor de mogelijke ernst van de specifieke beveiligingsproblemen.

Getroffen producten en herstel

Product Affected Versions Remediated Versions Link
Dell ObjectScale Versions 1.0.0, 1.0.1, 1.0.2, and 1.2.0 Version 1.3.0 To upgrade to ObjectScale 1.3.0 from older versions, please open a Technical Support case to assist with the ObjectScale upgrade to 1.3.0. 
https://www.dell.com/support/incidents-online/
Product Affected Versions Remediated Versions Link
Dell ObjectScale Versions 1.0.0, 1.0.1, 1.0.2, and 1.2.0 Version 1.3.0 To upgrade to ObjectScale 1.3.0 from older versions, please open a Technical Support case to assist with the ObjectScale upgrade to 1.3.0. 
https://www.dell.com/support/incidents-online/

Tijdelijke oplossingen en risicobeperking

None

Revisiegeschiedenis

RevisionDateDescription
1.02023-10-17Initial Release
2.02023-11-27Updated language in the Affected Products and Remediation Table.  Separated instructions for fresh installations and upgrading to 1.3.0 into two distinct line items.  Updates are for enhanced presentation only, does not change the content.  

Verwante informatie

Dell Security Advisories and Notices
Dell Vulnerability Response Policy
CVSS Scoring Guide

Juridische verklaring van afstand

Getroffen producten

ObjectScale
Artikeleigenschappen
Artikelnummer: 000218660
Artikeltype: Dell Security Advisory
Laatst aangepast: 08 nov. 2025
Vind antwoorden op uw vragen via andere Dell gebruikers
Support Services
Controleer of uw apparaat wordt gedekt door Support Services.