DSA-2024-071: Security Update for Dell Hybrid Client Multiple Third-Party Component Vulnerabilities

Zhrnutie: Dell Hybrid Client remediation is available for multiple third-party component vulnerabilities that could be exploited by malicious users to compromise the affected system.

Tento článok sa vzťahuje na Tento článok sa nevzťahuje na Tento článok nie je viazaný na žiadny konkrétny produkt. V tomto článku nie sú uvedené všetky verzie produktov.

Dosah

High

Podrobnosti

Third-party Component CVEs More Information
libssh-gcrypt-4 CVE-2023-1667, CVE-2023-2283 See NVD link below for individual scores for each CVE.
http://nvd.nist.gov/ This hyperlink is taking you to a website outside of Dell Technologies.
libsmbclient_2 CVE-2023-3347, CVE-2023-34968, CVE-2023-34967, CVE-2022-2127, CVE-2023-34966 See NVD link below for individual scores for each CVE.
http://nvd.nist.gov/ This hyperlink is taking you to a website outside of Dell Technologies.
libcurl4 CVE-2023-28322, CVE-2023-28321 See NVD link below for individual scores for each CVE.
http://nvd.nist.gov/ This hyperlink is taking you to a website outside of Dell Technologies.

Dell Technologies odporúča všetkým svojim zákazníkom, aby sa riadili nielen základným skóre CVSS, ale aj prechodným skóre a skóre závažnosti v konkrétnych prostrediach, na základe ktorého môžu vyhodnotiť celkové riziko vo vlastnom prostredí.

Dotknuté produkty a riešenie problému

Product Software/
Firmware
Affected Versions Remediated Versions Release Date (MM/DD/YYY) Link
Latitude 3440 Dell Hybrid Client Versions 2310 and prior
 
Versions 2403 or later 04/26/2024
 
Latitude 3440(Ubuntu 22.04)
Latitude 5440 Dell Hybrid Client Versions 2310 and prior
 
Versions 2403 or later 04/26/2024
 
Latitude 5440(Ubuntu 22.04)
OptiPlex 3000 Thin Client Dell Hybrid Client Versions 2310 and prior
 
Versions 2403 or later 04/26/2024
 
OptiPlex 3000 Thin Client (Ubuntu 22.04)
OptiPlex 7410 All-In-One Dell Hybrid Client Versions 2310 and prior
 
Versions 2403 or later 04/26/2024
 
 OptiPlex 7410 All-In-One (Ubuntu 22.04)
Precision 3260 Dell Hybrid Client Versions 2310 and prior
 
Versions 2403 or later 04/26/2024
 
Precision 3260(Ubuntu 22.04)
Product Software/
Firmware
Affected Versions Remediated Versions Release Date (MM/DD/YYY) Link
Latitude 3440 Dell Hybrid Client Versions 2310 and prior
 
Versions 2403 or later 04/26/2024
 
Latitude 3440(Ubuntu 22.04)
Latitude 5440 Dell Hybrid Client Versions 2310 and prior
 
Versions 2403 or later 04/26/2024
 
Latitude 5440(Ubuntu 22.04)
OptiPlex 3000 Thin Client Dell Hybrid Client Versions 2310 and prior
 
Versions 2403 or later 04/26/2024
 
OptiPlex 3000 Thin Client (Ubuntu 22.04)
OptiPlex 7410 All-In-One Dell Hybrid Client Versions 2310 and prior
 
Versions 2403 or later 04/26/2024
 
 OptiPlex 7410 All-In-One (Ubuntu 22.04)
Precision 3260 Dell Hybrid Client Versions 2310 and prior
 
Versions 2403 or later 04/26/2024
 
Precision 3260(Ubuntu 22.04)

Alternatívne riešenia a zmiernenia

None

História revízií

Revision DateDescription
1.02024-04-29Initial Release
2.02024-04-30Updated Affected Products and Remediation Table: Updated Platform List

Súvisiace informácie

Dotknuté produkty

Latitude 3440, Latitude 5440, OptiPlex 3000 Thin Client, OptiPlex All-In-One 7410, OptiPlex All-in-One Plus 7410, Precision 3260 XE Compact, Precision 3260 Compact
Vlastnosti článku
Číslo článku: 000221836
Typ článku: Dell Security Advisory
Dátum poslednej úpravy: 30 apr 2024
Nájdite odpovede na svoje otázky od ostatných používateľov spoločnosti Dell
Služby podpory
Skontrolujte, či sa na vaše zariadenie vzťahujú služby podpory.