DSA-2025-024 : Security Update for Dell Data Lakehouse System Software for Multiple Third-Party Component Vulnerabilities
Сводка: Dell Data Lakehouse System Software remediation is available for multiple security vulnerabilities that could be exploited by malicious users to compromise the affected system.
Влияние
High
Подробные сведения
|
Third-party Component |
CVEs |
More Information |
|
curl |
CVE-2024-2466, CVE-2024-2398, CVE-2024-0853, CVE-2024-2004, CVE-2024-2379, CVE-2024-6197, CVE-2024-6874 |
See NVD link below for individual scores for each CVE. |
|
libcrypto3 |
CVE-2024-5535, CVE-2024-4741, CVE-2024-6119 |
See NVD link below for individual scores for each CVE. |
|
libexpat |
CVE-2024-45491, CVE-2024-45490 |
See NVD link below for individual scores for each CVE. |
|
ssl_client,busybox-binsh,busybox |
CVE-2023-42366, CVE-2023-42365, CVE-2023-42364, CVE-2023-42363 |
See NVD link below for individual scores for each CVE. |
|
zlib |
CVE-2023-6992 |
Затронутые продукты и исправление
|
CVEs Addressed |
Product |
Affected Versions |
Remediated Versions |
Link |
|
CVE-2023-42363, CVE-2023-42364, CVE-2023-42365, CVE-2023-42366, CVE-2023-6992, CVE-2024-0853, CVE-2024-2004, CVE-2024-2379, CVE-2024-2398, CVE-2024-2466, CVE-2024-45490, CVE-2024-45491, CVE-2024-4741, CVE-2024-5535, CVE-2024-6119, CVE-2024-6197, CVE-2024-6874 |
Dell Data Lakehouse System Software |
Versions prior to 1.3.0.0 |
Version 1.3.0.0 or later |
https://www.dell.com/support/home/product-support/product/dell-data-lakehouse/drivers |
|
CVEs Addressed |
Product |
Affected Versions |
Remediated Versions |
Link |
|
CVE-2023-42363, CVE-2023-42364, CVE-2023-42365, CVE-2023-42366, CVE-2023-6992, CVE-2024-0853, CVE-2024-2004, CVE-2024-2379, CVE-2024-2398, CVE-2024-2466, CVE-2024-45490, CVE-2024-45491, CVE-2024-4741, CVE-2024-5535, CVE-2024-6119, CVE-2024-6197, CVE-2024-6874 |
Dell Data Lakehouse System Software |
Versions prior to 1.3.0.0 |
Version 1.3.0.0 or later |
https://www.dell.com/support/home/product-support/product/dell-data-lakehouse/drivers |
Временные решения и снижение риска
|
CVE ID |
Workaround and Mitigation |
|
CVE-2023-42363, CVE-2023-42364, CVE-2023-42365, CVE-2023-42366, CVE-2023-6992, CVE-2024-0853, CVE-2024-2004, CVE-2024-2379, CVE-2024-2398, CVE-2024-2466, CVE-2024-45490, CVE-2024-45491, CVE-2024-4741, CVE-2024-5535, CVE-2024-6119, CVE-2024-6197, CVE-2024-6874 |
Upgrade to DDLH Version 1.3.0.0 |
История изменений
|
Revision |
Date |
Description |
|
1.0 |
2025-01-09 |
Initial Release |