DSA-2025-349: Security Update for Dell XtremIO X2 Multiple Component Vulnerabilities

Zhrnutie: Dell XtremIO X2 remediation is available for multiple security vulnerabilities that could be exploited by malicious users to compromise the affected system.

Tento článok sa vzťahuje na Tento článok sa nevzťahuje na Tento článok nie je viazaný na žiadny konkrétny produkt. V tomto článku nie sú uvedené všetky verzie produktov.
Pozrite si ďalšie zdroje

Dosah

Critical

Podrobnosti

Third-party Component CVEs More Information
bind CVE-2021-25220, CVE-2022-2795, CVE-2022-38177, CVE-2022-38178 https://nvd.nist.gov/vuln/searchThis hyperlink is taking you to a website outside of Dell Technologies.
cpp CVE-2020-11023 https://nvd.nist.gov/vuln/searchThis hyperlink is taking you to a website outside of Dell Technologies.
glibc CVE-2021-27645, CVE-2021-35942, CVE-2021-3999, CVE-2022-23218, CVE-2022-23219, CVE-2024-2961, CVE-2024-33599, CVE-2024-33600, CVE-2024-33601, CVE-2024-33602 https://nvd.nist.gov/vuln/searchThis hyperlink is taking you to a website outside of Dell Technologies.
httpd CVE-2006-20001, CVE-2014-8109, CVE-2019-10092, CVE-2020-35452, CVE-2021-26690, CVE-2022-22719, CVE-2022-22721, CVE-2022-23943, CVE-2022-26377, CVE-2022-28615, CVE-2022-29404, CVE-2022-30522, CVE-2022-31813, CVE-2023-31122, CVE-2023-38709, CVE-2024-24795, CVE-2024-38474, CVE-2024-38475, CVE-2024-38476, CVE-2024-38477, CVE-2024-39573, CVE-2024-39884, CVE-2024-40725 https://nvd.nist.gov/vuln/searchThis hyperlink is taking you to a website outside of Dell Technologies.
kernel CVE-2018-10087, CVE-2019-25162, CVE-2020-13974, CVE-2020-26555, CVE-2020-27820, CVE-2021-0129, CVE-2021-20292, CVE-2021-20321, CVE-2021-20322, CVE-2021-28964, CVE-2021-28971, CVE-2021-30178, CVE-2021-3178, CVE-2021-31916, CVE-2021-34693, CVE-2021-3609, CVE-2021-3612, CVE-2021-3640, CVE-2021-3659, CVE-2021-3679, CVE-2021-37159, CVE-2021-38160, CVE-2021-3923, CVE-2021-40490, CVE-2021-4149, CVE-2021-4157, CVE-2021-4159, CVE-2021-41864, CVE-2021-43389, CVE-2021-43975, CVE-2021-43976, CVE-2021-45485, CVE-2021-45868, CVE-2021-46906, CVE-2021-46932, CVE-2021-46936, CVE-2021-47118, CVE-2021-47153, CVE-2021-47171, CVE-2021-47194, CVE-2021-47383, CVE-2022-0812, CVE-2022-0850, CVE-2022-1011, CVE-2022-1016, CVE-2022-1048, CVE-2022-1055, CVE-2022-1353, CVE-2022-1419, CVE-2022-1652, CVE-2022-1679, CVE-2022-20141, CVE-2022-20368, CVE-2022-21499, CVE-2022-2196, CVE-2022-25265, CVE-2022-26365, CVE-2022-28390, CVE-2022-29581, CVE-2022-3028, CVE-2022-33740, CVE-2022-33741, CVE-2022-33742, CVE-2022-3424, CVE-2022-3565, CVE-2022-3566, CVE-2022-36280, CVE-2022-3629, CVE-2022-3640, CVE-2022-4095, CVE-2022-41674, CVE-2022-41858, CVE-2022-42719, CVE-2022-42720, CVE-2022-42895, CVE-2022-45886, CVE-2022-45919, CVE-2022-45934, CVE-2023-1077, CVE-2023-1118, CVE-2023-1380, CVE-2023-1513, CVE-2023-1829, CVE-2023-1838, CVE-2023-1989, CVE-2023-2124, CVE-2023-3111, CVE-2023-3141, CVE-2023-3268, CVE-2023-3567, CVE-2023-35824, CVE-2023-39197, CVE-2023-40283, CVE-2023-4387, CVE-2023-45862, CVE-2023-51042, CVE-2023-51779, CVE-2023-51780, CVE-2023-52340, CVE-2023-52435, CVE-2023-52445, CVE-2023-52469, CVE-2023-52628, CVE-2023-52752, CVE-2023-52885, CVE-2023-6606, CVE-2023-6610, CVE-2023-6931, CVE-2023-6932, CVE-2024-0775, CVE-2024-23307, CVE-2024-26668, CVE-2024-26689, CVE-2024-26791, CVE-2024-26855, CVE-2024-26872, CVE-2024-26882, CVE-2024-26898, CVE-2024-26923, CVE-2024-26934, CVE-2024-26958, CVE-2024-26982, CVE-2024-27008, CVE-2024-27020, CVE-2024-27043, CVE-2024-35849, CVE-2024-35896, CVE-2024-36883, CVE-2024-36960, CVE-2024-36971, CVE-2024-38538, CVE-2024-38555, CVE-2024-38570, CVE-2024-38600, CVE-2024-38627, CVE-2024-39487, CVE-2024-39494, CVE-2024-41013, CVE-2024-41014, CVE-2024-41071, CVE-2024-42148, CVE-2024-42228, CVE-2024-42280, CVE-2024-42301, CVE-2024-43839, CVE-2024-43882, CVE-2024-43900, CVE-2024-44940, CVE-2024-44970, CVE-2024-44987, CVE-2024-46673, CVE-2024-46722, CVE-2024-46723, CVE-2024-46724, CVE-2024-46731, CVE-2024-46738, CVE-2024-46744, CVE-2024-46750, CVE-2024-46756, CVE-2024-46757, CVE-2024-46758, CVE-2024-46800, CVE-2024-46813, CVE-2024-46818, CVE-2024-47659, CVE-2024-47701, CVE-2024-47742, CVE-2024-47745, CVE-2024-49860, CVE-2024-49882, CVE-2024-49889, CVE-2024-49894, CVE-2024-49950, CVE-2024-49960, CVE-2024-49967, CVE-2024-49991, CVE-2024-50007, CVE-2024-50033, CVE-2024-50035, CVE-2024-50055, CVE-2024-50073, CVE-2024-50115, CVE-2024-50143, CVE-2024-50234, CVE-2024-50267, CVE-2024-50282, CVE-2024-50302, CVE-2024-53057, CVE-2024-53103, CVE-2024-53104, CVE-2024-53141, CVE-2024-53142, CVE-2024-53150, CVE-2024-53156, CVE-2024-53173, CVE-2024-53197, CVE-2024-53227, CVE-2024-53239, CVE-2024-56551, CVE-2024-56603, CVE-2024-56604, CVE-2024-56605, CVE-2024-56606, CVE-2024-56650, CVE-2024-56759, CVE-2024-57798, CVE-2024-57980, CVE-2025-21702, CVE-2025-21920, CVE-2025-21969, CVE-2025-21993, CVE-2025-37785 https://nvd.nist.gov/vuln/searchThis hyperlink is taking you to a website outside of Dell Technologies.
libevent CVE-2016-10195, CVE-2016-10196, CVE-2016-10197 https://nvd.nist.gov/vuln/searchThis hyperlink is taking you to a website outside of Dell Technologies.
libkadm5 CVE-2024-3596, CVE-2024-37370, CVE-2024-37371 https://nvd.nist.gov/vuln/searchThis hyperlink is taking you to a website outside of Dell Technologies.
libss CVE-2022-1304 https://nvd.nist.gov/vuln/searchThis hyperlink is taking you to a website outside of Dell Technologies.
nss-softokn CVE-2023-5388 https://nvd.nist.gov/vuln/searchThis hyperlink is taking you to a website outside of Dell Technologies.
openssh CVE-2021-41617 https://nvd.nist.gov/vuln/searchThis hyperlink is taking you to a website outside of Dell Technologies.
openssl CVE-2019-1563, CVE-2022-1292, CVE-2022-2068, CVE-2023-0215, CVE-2023-0464 https://nvd.nist.gov/vuln/searchThis hyperlink is taking you to a website outside of Dell Technologies.
python-pillow CVE-2022-22815 https://nvd.nist.gov/vuln/searchThis hyperlink is taking you to a website outside of Dell Technologies.
zlib CVE-2023-45853 https://nvd.nist.gov/vuln/searchThis hyperlink is taking you to a website outside of Dell Technologies.

 

Dell Technologies odporúča všetkým svojim zákazníkom, aby sa riadili nielen základným skóre CVSS, ale aj prechodným skóre a skóre závažnosti v konkrétnych prostrediach, na základe ktorého môžu vyhodnotiť celkové riziko vo vlastnom prostredí.

Dotknuté produkty a riešenie problému

Product Software/Firmware Affected Versions Remediated Versions Link
XtremIO X2 XMS Versions prior to 6.4.4 Version 6.4.4 or later https://www.dell.com/support/product-details/product/xtremio-x2/drivers

 

Product Software/Firmware Affected Versions Remediated Versions Link
XtremIO X2 XMS Versions prior to 6.4.4 Version 6.4.4 or later https://www.dell.com/support/product-details/product/xtremio-x2/drivers

 

História revízií

RevisionDateDescription
1.02025-10-02Initial Release

 

Súvisiace informácie

Dell Security Advisories and Notices
Dell Vulnerability Response Policy
CVSS Scoring Guide

Legal Disclaimer

Dotknuté produkty

XtremIO, XtremIO HW X2-R, XtremIO HW X2-R Encrypt Disable, XtremIO HW X2-S, XtremIO HW X2-S Encrypt Disable, XtremIO HW X2-T, XtremIO HW X2-T Encrypt Disable, XtremIO X2
Vlastnosti článku
Číslo článku: 000376651
Typ článku: Dell Security Advisory
Dátum poslednej úpravy: 02 okt 2025
Nájdite odpovede na svoje otázky od ostatných používateľov spoločnosti Dell
Služby podpory
Skontrolujte, či sa na vaše zariadenie vzťahujú služby podpory.