DSA-2025-349: Security Update for Dell XtremIO X2 Multiple Component Vulnerabilities

Summary: Dell XtremIO X2 remediation is available for multiple security vulnerabilities that could be exploited by malicious users to compromise the affected system.

Acest articol se aplică pentru Acest articol nu se aplică pentru Acest articol nu este legat de un produs specific. Acest articol nu acoperă toate versiunile de produs existente.
Consultați alte resurse

Impact

Critical

Details

Third-party Component CVEs More Information
bind CVE-2021-25220, CVE-2022-2795, CVE-2022-38177, CVE-2022-38178 https://nvd.nist.gov/vuln/searchThis hyperlink is taking you to a website outside of Dell Technologies.
cpp CVE-2020-11023 https://nvd.nist.gov/vuln/searchThis hyperlink is taking you to a website outside of Dell Technologies.
glibc CVE-2021-27645, CVE-2021-35942, CVE-2021-3999, CVE-2022-23218, CVE-2022-23219, CVE-2024-2961, CVE-2024-33599, CVE-2024-33600, CVE-2024-33601, CVE-2024-33602 https://nvd.nist.gov/vuln/searchThis hyperlink is taking you to a website outside of Dell Technologies.
httpd CVE-2006-20001, CVE-2014-8109, CVE-2019-10092, CVE-2020-35452, CVE-2021-26690, CVE-2022-22719, CVE-2022-22721, CVE-2022-23943, CVE-2022-26377, CVE-2022-28615, CVE-2022-29404, CVE-2022-30522, CVE-2022-31813, CVE-2023-31122, CVE-2023-38709, CVE-2024-24795, CVE-2024-38474, CVE-2024-38475, CVE-2024-38476, CVE-2024-38477, CVE-2024-39573, CVE-2024-39884, CVE-2024-40725 https://nvd.nist.gov/vuln/searchThis hyperlink is taking you to a website outside of Dell Technologies.
kernel CVE-2018-10087, CVE-2019-25162, CVE-2020-13974, CVE-2020-26555, CVE-2020-27820, CVE-2021-0129, CVE-2021-20292, CVE-2021-20321, CVE-2021-20322, CVE-2021-28964, CVE-2021-28971, CVE-2021-30178, CVE-2021-3178, CVE-2021-31916, CVE-2021-34693, CVE-2021-3609, CVE-2021-3612, CVE-2021-3640, CVE-2021-3659, CVE-2021-3679, CVE-2021-37159, CVE-2021-38160, CVE-2021-3923, CVE-2021-40490, CVE-2021-4149, CVE-2021-4157, CVE-2021-4159, CVE-2021-41864, CVE-2021-43389, CVE-2021-43975, CVE-2021-43976, CVE-2021-45485, CVE-2021-45868, CVE-2021-46906, CVE-2021-46932, CVE-2021-46936, CVE-2021-47118, CVE-2021-47153, CVE-2021-47171, CVE-2021-47194, CVE-2021-47383, CVE-2022-0812, CVE-2022-0850, CVE-2022-1011, CVE-2022-1016, CVE-2022-1048, CVE-2022-1055, CVE-2022-1353, CVE-2022-1419, CVE-2022-1652, CVE-2022-1679, CVE-2022-20141, CVE-2022-20368, CVE-2022-21499, CVE-2022-2196, CVE-2022-25265, CVE-2022-26365, CVE-2022-28390, CVE-2022-29581, CVE-2022-3028, CVE-2022-33740, CVE-2022-33741, CVE-2022-33742, CVE-2022-3424, CVE-2022-3565, CVE-2022-3566, CVE-2022-36280, CVE-2022-3629, CVE-2022-3640, CVE-2022-4095, CVE-2022-41674, CVE-2022-41858, CVE-2022-42719, CVE-2022-42720, CVE-2022-42895, CVE-2022-45886, CVE-2022-45919, CVE-2022-45934, CVE-2023-1077, CVE-2023-1118, CVE-2023-1380, CVE-2023-1513, CVE-2023-1829, CVE-2023-1838, CVE-2023-1989, CVE-2023-2124, CVE-2023-3111, CVE-2023-3141, CVE-2023-3268, CVE-2023-3567, CVE-2023-35824, CVE-2023-39197, CVE-2023-40283, CVE-2023-4387, CVE-2023-45862, CVE-2023-51042, CVE-2023-51779, CVE-2023-51780, CVE-2023-52340, CVE-2023-52435, CVE-2023-52445, CVE-2023-52469, CVE-2023-52628, CVE-2023-52752, CVE-2023-52885, CVE-2023-6606, CVE-2023-6610, CVE-2023-6931, CVE-2023-6932, CVE-2024-0775, CVE-2024-23307, CVE-2024-26668, CVE-2024-26689, CVE-2024-26791, CVE-2024-26855, CVE-2024-26872, CVE-2024-26882, CVE-2024-26898, CVE-2024-26923, CVE-2024-26934, CVE-2024-26958, CVE-2024-26982, CVE-2024-27008, CVE-2024-27020, CVE-2024-27043, CVE-2024-35849, CVE-2024-35896, CVE-2024-36883, CVE-2024-36960, CVE-2024-36971, CVE-2024-38538, CVE-2024-38555, CVE-2024-38570, CVE-2024-38600, CVE-2024-38627, CVE-2024-39487, CVE-2024-39494, CVE-2024-41013, CVE-2024-41014, CVE-2024-41071, CVE-2024-42148, CVE-2024-42228, CVE-2024-42280, CVE-2024-42301, CVE-2024-43839, CVE-2024-43882, CVE-2024-43900, CVE-2024-44940, CVE-2024-44970, CVE-2024-44987, CVE-2024-46673, CVE-2024-46722, CVE-2024-46723, CVE-2024-46724, CVE-2024-46731, CVE-2024-46738, CVE-2024-46744, CVE-2024-46750, CVE-2024-46756, CVE-2024-46757, CVE-2024-46758, CVE-2024-46800, CVE-2024-46813, CVE-2024-46818, CVE-2024-47659, CVE-2024-47701, CVE-2024-47742, CVE-2024-47745, CVE-2024-49860, CVE-2024-49882, CVE-2024-49889, CVE-2024-49894, CVE-2024-49950, CVE-2024-49960, CVE-2024-49967, CVE-2024-49991, CVE-2024-50007, CVE-2024-50033, CVE-2024-50035, CVE-2024-50055, CVE-2024-50073, CVE-2024-50115, CVE-2024-50143, CVE-2024-50234, CVE-2024-50267, CVE-2024-50282, CVE-2024-50302, CVE-2024-53057, CVE-2024-53103, CVE-2024-53104, CVE-2024-53141, CVE-2024-53142, CVE-2024-53150, CVE-2024-53156, CVE-2024-53173, CVE-2024-53197, CVE-2024-53227, CVE-2024-53239, CVE-2024-56551, CVE-2024-56603, CVE-2024-56604, CVE-2024-56605, CVE-2024-56606, CVE-2024-56650, CVE-2024-56759, CVE-2024-57798, CVE-2024-57980, CVE-2025-21702, CVE-2025-21920, CVE-2025-21969, CVE-2025-21993, CVE-2025-37785 https://nvd.nist.gov/vuln/searchThis hyperlink is taking you to a website outside of Dell Technologies.
libevent CVE-2016-10195, CVE-2016-10196, CVE-2016-10197 https://nvd.nist.gov/vuln/searchThis hyperlink is taking you to a website outside of Dell Technologies.
libkadm5 CVE-2024-3596, CVE-2024-37370, CVE-2024-37371 https://nvd.nist.gov/vuln/searchThis hyperlink is taking you to a website outside of Dell Technologies.
libss CVE-2022-1304 https://nvd.nist.gov/vuln/searchThis hyperlink is taking you to a website outside of Dell Technologies.
nss-softokn CVE-2023-5388 https://nvd.nist.gov/vuln/searchThis hyperlink is taking you to a website outside of Dell Technologies.
openssh CVE-2021-41617 https://nvd.nist.gov/vuln/searchThis hyperlink is taking you to a website outside of Dell Technologies.
openssl CVE-2019-1563, CVE-2022-1292, CVE-2022-2068, CVE-2023-0215, CVE-2023-0464 https://nvd.nist.gov/vuln/searchThis hyperlink is taking you to a website outside of Dell Technologies.
python-pillow CVE-2022-22815 https://nvd.nist.gov/vuln/searchThis hyperlink is taking you to a website outside of Dell Technologies.
zlib CVE-2023-45853 https://nvd.nist.gov/vuln/searchThis hyperlink is taking you to a website outside of Dell Technologies.

 

Dell Technologies recommends all customers consider both the CVSS base score and any relevant temporal and environmental scores that may impact the potential severity associated with a particular security vulnerability.

Produse afectate și măsuri de remediere

Product Software/Firmware Affected Versions Remediated Versions Link
XtremIO X2 XMS Versions prior to 6.4.4 Version 6.4.4 or later https://www.dell.com/support/product-details/product/xtremio-x2/drivers

 

Product Software/Firmware Affected Versions Remediated Versions Link
XtremIO X2 XMS Versions prior to 6.4.4 Version 6.4.4 or later https://www.dell.com/support/product-details/product/xtremio-x2/drivers

 

Revision History

RevisionDateDescription
1.02025-10-02Initial Release

 

Related Information

Dell Security Advisories and Notices
Dell Vulnerability Response Policy
CVSS Scoring Guide

Exonerare de răspundere

Produse afectate

XtremIO, XtremIO HW X2-R, XtremIO HW X2-R Encrypt Disable, XtremIO HW X2-S, XtremIO HW X2-S Encrypt Disable, XtremIO HW X2-T, XtremIO HW X2-T Encrypt Disable, XtremIO X2
Proprietăți articol
Article Number: 000376651
Article Type: Dell Security Advisory
Ultima modificare: 02 oct. 2025
Găsiți răspunsuri la întrebările dvs. de la alți utilizatori Dell
Servicii de asistență
Verificați dacă dispozitivul dvs. este acoperit de serviciile de asistență.