DSA-2020-216: PowerFlex Rack Security Update for Multiple Third-Party Component Vulnerabilities

Summary: DSA-2020-216: PowerFlex Rack Security Update for Multiple Third-Party Component Vulnerabilities

Acest articol se aplică pentru Acest articol nu se aplică pentru Acest articol nu este legat de un produs specific. Acest articol nu acoperă toate versiunile de produs existente.
Consultați alte resurse

Impact

High

Details

Summary:
Multiple components within Dell EMC PowerFlex Rack require a security update to address various vulnerabilities.

Third-party Component CVE(s) More information
iDRAC version 4.20.20.20 CVE-2020-5366 See NVD (http://nvd.nist.gov/) for individual scores for each CVE
VMware ESXi 6.5 EP 20 16389870 (Build 16389870) and ESXi 6.7 EP 15 Build Number 16316930 CVE-2020-3967 VMSA-2020-0011
VMSA-2020-0012
VMSA-2020-0014

 
CVE-2020-3968
CVE-2020-3966
CVE-2020-3965
CVE-2020-3963
CVE-2020-3964
CVE-2020-3960
CVE-2020-3959
GRUB Bootloader Vulnerability CVE-2020-10713 See NVD (http://nvd.nist.gov/) for individual scores for each CVE
Third-party Component CVE(s) More information
iDRAC version 4.20.20.20 CVE-2020-5366 See NVD (http://nvd.nist.gov/) for individual scores for each CVE
VMware ESXi 6.5 EP 20 16389870 (Build 16389870) and ESXi 6.7 EP 15 Build Number 16316930 CVE-2020-3967 VMSA-2020-0011
VMSA-2020-0012
VMSA-2020-0014

 
CVE-2020-3968
CVE-2020-3966
CVE-2020-3965
CVE-2020-3963
CVE-2020-3964
CVE-2020-3960
CVE-2020-3959
GRUB Bootloader Vulnerability CVE-2020-10713 See NVD (http://nvd.nist.gov/) for individual scores for each CVE
Dell Technologies recommends all customers consider both the CVSS base score and any relevant temporal and environmental scores that may impact the potential severity associated with a particular security vulnerability.

Produse afectate și măsuri de remediere

Affected Products:
Dell EMC PowerFlex Rack versions prior to 3.3.8.1
Dell EMC PowerFlex Rack versions prior to 3.4.3.1
Dell EMC PowerFlex Rack versions prior to 3.5.3.1

Resolution:
The following Dell EMC PowerFlex Rack releases contain a resolution to these vulnerabilities:
  • Dell EMC PowerFlex Rack version 3.3.8.1
  • Dell EMC PowerFlex Rack version 3.4.3.1
  • Dell EMC PowerFlex Rack version 3.5.3.1

Dell EMC recommends all customers upgrade at the earliest opportunity.
For RCM release information: https://cpsdocs.dellemc.com/rcm/#/home.
For RCM download: https://vce.flexnetoperations.com/control/vcec/product?plneID=740417

Affected Products:
Dell EMC PowerFlex Rack versions prior to 3.3.8.1
Dell EMC PowerFlex Rack versions prior to 3.4.3.1
Dell EMC PowerFlex Rack versions prior to 3.5.3.1

Resolution:
The following Dell EMC PowerFlex Rack releases contain a resolution to these vulnerabilities:
  • Dell EMC PowerFlex Rack version 3.3.8.1
  • Dell EMC PowerFlex Rack version 3.4.3.1
  • Dell EMC PowerFlex Rack version 3.5.3.1

Dell EMC recommends all customers upgrade at the earliest opportunity.
For RCM release information: https://cpsdocs.dellemc.com/rcm/#/home.
For RCM download: https://vce.flexnetoperations.com/control/vcec/product?plneID=740417

Related Information

Dell Security Advisories and Notices
Dell Vulnerability Response Policy
CVSS Scoring Guide

Exonerare de răspundere

Produse afectate

VxFlex Product Family

Produse

Product Security Information, VxFlex Product Family
Proprietăți articol
Article Number: 000001679
Article Type: Dell Security Advisory
Ultima modificare: 10 Apr 2021
Găsiți răspunsuri la întrebările dvs. de la alți utilizatori Dell
Servicii de asistență
Verificați dacă dispozitivul dvs. este acoperit de serviciile de asistență.