DSA-2020-216: PowerFlex Rack Security Update for Multiple Third-Party Component Vulnerabilities

Sammanfattning: DSA-2020-216: PowerFlex Rack Security Update for Multiple Third-Party Component Vulnerabilities

Den här artikeln gäller för Den här artikeln gäller inte för Den här artikeln är inte kopplad till någon specifik produkt. Alla produktversioner identifieras inte i den här artikeln.
Kolla in andra resurser

Påverkan

High

Information

Summary:
Multiple components within Dell EMC PowerFlex Rack require a security update to address various vulnerabilities.

Third-party Component CVE(s) More information
iDRAC version 4.20.20.20 CVE-2020-5366 See NVD (http://nvd.nist.gov/) for individual scores for each CVE
VMware ESXi 6.5 EP 20 16389870 (Build 16389870) and ESXi 6.7 EP 15 Build Number 16316930 CVE-2020-3967 VMSA-2020-0011
VMSA-2020-0012
VMSA-2020-0014

 
CVE-2020-3968
CVE-2020-3966
CVE-2020-3965
CVE-2020-3963
CVE-2020-3964
CVE-2020-3960
CVE-2020-3959
GRUB Bootloader Vulnerability CVE-2020-10713 See NVD (http://nvd.nist.gov/) for individual scores for each CVE
Third-party Component CVE(s) More information
iDRAC version 4.20.20.20 CVE-2020-5366 See NVD (http://nvd.nist.gov/) for individual scores for each CVE
VMware ESXi 6.5 EP 20 16389870 (Build 16389870) and ESXi 6.7 EP 15 Build Number 16316930 CVE-2020-3967 VMSA-2020-0011
VMSA-2020-0012
VMSA-2020-0014

 
CVE-2020-3968
CVE-2020-3966
CVE-2020-3965
CVE-2020-3963
CVE-2020-3964
CVE-2020-3960
CVE-2020-3959
GRUB Bootloader Vulnerability CVE-2020-10713 See NVD (http://nvd.nist.gov/) for individual scores for each CVE
Dell Technologies rekommenderar att alla kunder beaktar både CVSS Base Score (baspoäng) och relevanta tidsmässiga och miljömässiga poäng som kan påverka den potentiella allvarlighetsgraden hos specifika säkerhetsrisker.

Berörda produkter och åtgärder

Affected Products:
Dell EMC PowerFlex Rack versions prior to 3.3.8.1
Dell EMC PowerFlex Rack versions prior to 3.4.3.1
Dell EMC PowerFlex Rack versions prior to 3.5.3.1

Resolution:
The following Dell EMC PowerFlex Rack releases contain a resolution to these vulnerabilities:
  • Dell EMC PowerFlex Rack version 3.3.8.1
  • Dell EMC PowerFlex Rack version 3.4.3.1
  • Dell EMC PowerFlex Rack version 3.5.3.1

Dell EMC recommends all customers upgrade at the earliest opportunity.
For RCM release information: https://cpsdocs.dellemc.com/rcm/#/home.
For RCM download: https://vce.flexnetoperations.com/control/vcec/product?plneID=740417

Affected Products:
Dell EMC PowerFlex Rack versions prior to 3.3.8.1
Dell EMC PowerFlex Rack versions prior to 3.4.3.1
Dell EMC PowerFlex Rack versions prior to 3.5.3.1

Resolution:
The following Dell EMC PowerFlex Rack releases contain a resolution to these vulnerabilities:
  • Dell EMC PowerFlex Rack version 3.3.8.1
  • Dell EMC PowerFlex Rack version 3.4.3.1
  • Dell EMC PowerFlex Rack version 3.5.3.1

Dell EMC recommends all customers upgrade at the earliest opportunity.
For RCM release information: https://cpsdocs.dellemc.com/rcm/#/home.
For RCM download: https://vce.flexnetoperations.com/control/vcec/product?plneID=740417

Relaterad information

Dell Security Advisories and Notices
Dell Vulnerability Response Policy
CVSS Scoring Guide

Juridisk friskrivning

Berörda produkter

VxFlex Product Family

Produkter

Product Security Information, VxFlex Product Family
Artikelegenskaper
Artikelnummer: 000001679
Artikeltyp: Dell Security Advisory
Senast ändrad: 10 apr. 2021
Få svar på dina frågor från andra Dell-användare
Supporttjänster
Kontrollera om din enhet omfattas av supporttjänster.