DSA-2025-024 : Security Update for Dell Data Lakehouse System Software for Multiple Third-Party Component Vulnerabilities

Resumo: Dell Data Lakehouse System Software remediation is available for multiple security vulnerabilities that could be exploited by malicious users to compromise the affected system.

Este artigo aplica-se a Este artigo não se aplica a Este artigo não está vinculado a nenhum produto específico. Nem todas as versões do produto estão identificadas neste artigo.
Confira outros recursos

Impacto

High

Dados

Third-party Component

CVEs

More Information

curl

CVE-2024-2466, CVE-2024-2398, CVE-2024-0853, CVE-2024-2004, CVE-2024-2379, CVE-2024-6197, CVE-2024-6874

See NVD link below for individual scores for each CVE. 

http://nvd.nist.gov/This hyperlink is taking you to a website outside of Dell Technologies.

libcrypto3

CVE-2024-5535, CVE-2024-4741, CVE-2024-6119

See NVD link below for individual scores for each CVE. 

http://nvd.nist.gov/This hyperlink is taking you to a website outside of Dell Technologies.

libexpat

CVE-2024-45491, CVE-2024-45490

See NVD link below for individual scores for each CVE. 

http://nvd.nist.gov/This hyperlink is taking you to a website outside of Dell Technologies.

ssl_client,busybox-binsh,busybox

CVE-2023-42366, CVE-2023-42365, CVE-2023-42364, CVE-2023-42363

See NVD link below for individual scores for each CVE. 

http://nvd.nist.gov/This hyperlink is taking you to a website outside of Dell Technologies.

zlib

CVE-2023-6992

https://nvd.nist.gov/vuln/detail/CVE-2023-6992This hyperlink is taking you to a website outside of Dell Technologies.

A Dell Technologies recomenda que todos os clientes levem em consideração a pontuação base CVSS e as pontuações temporais e ambientais pertinentes que possam afetar a gravidade potencial associada a uma vulnerabilidade de segurança específica.

Produtos afetados e soluções

CVEs Addressed

Product

Affected Versions

Remediated Versions

Link

CVE-2023-42363, CVE-2023-42364, CVE-2023-42365, CVE-2023-42366, CVE-2023-6992, CVE-2024-0853, CVE-2024-2004, CVE-2024-2379, CVE-2024-2398, CVE-2024-2466, CVE-2024-45490, CVE-2024-45491, CVE-2024-4741, CVE-2024-5535, CVE-2024-6119, CVE-2024-6197, CVE-2024-6874

Dell Data Lakehouse System Software

Versions prior to 1.3.0.0

Version 1.3.0.0 or later

https://www.dell.com/support/home/product-support/product/dell-data-lakehouse/drivers

CVEs Addressed

Product

Affected Versions

Remediated Versions

Link

CVE-2023-42363, CVE-2023-42364, CVE-2023-42365, CVE-2023-42366, CVE-2023-6992, CVE-2024-0853, CVE-2024-2004, CVE-2024-2379, CVE-2024-2398, CVE-2024-2466, CVE-2024-45490, CVE-2024-45491, CVE-2024-4741, CVE-2024-5535, CVE-2024-6119, CVE-2024-6197, CVE-2024-6874

Dell Data Lakehouse System Software

Versions prior to 1.3.0.0

Version 1.3.0.0 or later

https://www.dell.com/support/home/product-support/product/dell-data-lakehouse/drivers

Soluções temporárias e atenuações

CVE ID

Workaround and Mitigation

CVE-2023-42363, CVE-2023-42364, CVE-2023-42365, CVE-2023-42366, CVE-2023-6992, CVE-2024-0853, CVE-2024-2004, CVE-2024-2379, CVE-2024-2398, CVE-2024-2466, CVE-2024-45490, CVE-2024-45491, CVE-2024-4741, CVE-2024-5535, CVE-2024-6119, CVE-2024-6197, CVE-2024-6874

Upgrade to DDLH Version 1.3.0.0

Histórico de revisão

Revision

Date

Description

1.0

2025-01-09

Initial Release

Informações relacionadas

Dell Security Advisories and Notices
Dell Vulnerability Response Policy
CVSS Scoring Guide

Aviso de isenção legal

Produtos afetados

Data Management, Dell Data Lakehouse
Propriedades do artigo
Número do artigo: 000270236
Tipo de artigo: Dell Security Advisory
Último modificado: 09 set. 2025
Encontre as respostas de outros usuários da Dell para suas perguntas.
Serviços de suporte
Verifique se o dispositivo está coberto pelos serviços de suporte.