DSA-2020-180: Dell EMC CloudBoost Virtual Appliance Security Update for Multiple Third Party Component Vulnerabilities
本文适用于
本文不适用于
本文并非针对某种特定的产品。
本文并非包含所有产品版本。
影响
Critical
详情
Multiple components within Dell EMC CloudBoost Virtual Appliance require a security update to address various vulnerabilities.
|
Third-party Component |
CVE(s) |
More information |
|
sqlite3 |
CVE-2017-2520 |
See NVD (http://nvd.nist.gov/) for individual scores for each CVE. |
|
CVE-2017-2519 |
||
|
CVE-2017-2518 |
||
|
CVE-2018-20506 |
||
|
CVE-2018-20346 |
||
|
CVE-2017-10989 |
||
|
CVE-2019-9937 |
||
|
CVE-2017-13685 |
||
|
CVE-2019-9936 |
||
|
CVE-2016-6153 |
||
|
libtiff5 |
CVE-2019-7663 |
|
|
CVE-2018-10779 |
||
|
CVE-2018-12900 |
||
|
CVE-2018-17000 |
||
|
CVE-2018-19210 |
||
|
CVE-2019-6128 |
||
|
ruby rails |
CVE-2016-10173 |
|
|
CVE-2013-4389 |
||
|
CVE-2013-1855 |
||
|
CVE-2013-1857 |
||
|
CVE-2014-0082 |
||
|
CVE-2013-0277 |
||
|
CVE-2013-0276 |
||
|
CVE-2014-3482 |
||
|
CVE-2013-1856 |
||
|
CVE-2013-0269 |
||
|
CVE-2012-2139 |
||
|
CVE-2012-2140 |
||
|
CVE-2013-0183 |
||
|
CVE-2013-0262 |
||
|
CVE-2013-0263 |
||
|
CVE-2013-0256 |
||
|
CVE-2013-1854 |
||
|
CVE-2014-2538 |
||
|
Wget |
CVE-2019-5953 |
|
|
libxslt1 |
CVE-2019-11068 |
|
|
Curl |
CVE-2019-5436 |
|
|
CVE-2019-3822 |
||
|
CVE-2018-16890 |
||
|
CVE-2019-3823 |
||
|
File |
CVE-2019-8907 |
|
|
CVE-2019-8905 |
||
|
Intel microcode |
CVE-2018-12205 |
|
|
CVE-2018-12203 |
||
|
CVE-2018-12204 |
||
|
CVE-2018-12201 |
||
|
CVE-2018-12202 |
||
|
CVE-2018-12126 |
||
|
CVE-2018-12127 |
||
|
CVE-2018-12130 |
||
|
CVE-2019-11091 |
||
|
ntfs-3g |
CVE-2019-9755 |
|
|
Libgnutls |
CVE-2018-10844 |
|
|
CVE-2018-10845 |
||
|
CVE-2018-10846 |
||
|
Patch |
CVE-2019-13638 |
|
|
CVE-2019-13636 |
||
|
Sudo |
CVE-2017-1000368, |
|
|
CVE-2016-7076 |
||
|
libseccomp2 |
CVE-2019-9893 |
|
|
libexpat1 |
CVE-2018-20843 |
|
|
libnss3 |
CVE-2019-11729 |
|
|
CVE-2019-11719 |
||
|
CVE-2018-18508 |
||
|
Apache2 |
CVE-2018-17199 |
|
|
CVE-2019-0211 |
||
|
CVE-2019-0217 |
||
|
CVE-2019-0220 |
||
|
libelf1 |
CVE-2018-16402 |
|
|
CVE-2019-7149 |
||
|
CVE-2018-16062 |
||
|
CVE-2018-16403 |
||
|
CVE-2018-18310 |
||
|
CVE-2019-7150 |
||
|
CVE-2019-7665 |
||
|
CVE-2018-18521 |
||
|
CVE-2018-18520 |
||
|
libglib2.0 |
CVE-2019-12450 |
|
|
CVE-2019-13012 |
||
|
bzip2 |
CVE-2016-3189 |
|
|
CVE-2019-12900 |
||
|
Python |
CVE-2019-6975 |
|
|
CVE-2019-12781 |
||
|
CVE-2019-11236 |
||
|
CVE-2018-20060 |
||
|
Vim |
CVE-2019-12735 |
|
|
CVE-2017-5953 |
||
|
Linux |
CVE-2019-2054 |
|
|
CVE-2019-11815 |
||
|
CVE-2019-6974 |
||
|
CVE-2019-11477 |
||
|
CVE-2019-7221 |
||
|
CVE-2019-10142 |
||
|
CVE-2018-20836 |
||
|
CVE-2019-11884 |
||
|
CVE-2018-19824 |
||
|
CVE-2018-16884 |
||
|
CVE-2018-20169 |
||
|
CVE-2019-11810 |
||
|
CVE-2019-9503 |
||
|
CVE-2019-9213 |
||
|
CVE-2019-11833 |
||
|
CVE-2018-14614 |
||
|
CVE-2017-18249 |
||
|
Busybox |
CVE-2016-2148 |
|
|
CVE-2016-2147 |
||
|
CVE-2018-1000517 |
||
|
CVE-2015-9261 |
||
|
CVE-2017-16544 |
||
|
CVE-2018-20679 |
||
|
CVE-2019-5747 |
||
|
CVE-2017-15873 |
||
|
CVE-2011-5325 |
||
|
Bash |
CVE-2012-6711 |
|
|
CVE-2019-9924 |
||
|
Ruby |
CVE-2019-8320 |
|
|
CVE-2019-8324 |
||
|
CVE-2019-8325 |
||
|
CVE-2019-8322 |
||
|
CVE-2019-8321 |
||
|
CVE-2019-8323 |
||
|
CVE-2018-16471 |
|
Third-party Component |
CVE(s) |
More information |
|
sqlite3 |
CVE-2017-2520 |
See NVD (http://nvd.nist.gov/) for individual scores for each CVE. |
|
CVE-2017-2519 |
||
|
CVE-2017-2518 |
||
|
CVE-2018-20506 |
||
|
CVE-2018-20346 |
||
|
CVE-2017-10989 |
||
|
CVE-2019-9937 |
||
|
CVE-2017-13685 |
||
|
CVE-2019-9936 |
||
|
CVE-2016-6153 |
||
|
libtiff5 |
CVE-2019-7663 |
|
|
CVE-2018-10779 |
||
|
CVE-2018-12900 |
||
|
CVE-2018-17000 |
||
|
CVE-2018-19210 |
||
|
CVE-2019-6128 |
||
|
ruby rails |
CVE-2016-10173 |
|
|
CVE-2013-4389 |
||
|
CVE-2013-1855 |
||
|
CVE-2013-1857 |
||
|
CVE-2014-0082 |
||
|
CVE-2013-0277 |
||
|
CVE-2013-0276 |
||
|
CVE-2014-3482 |
||
|
CVE-2013-1856 |
||
|
CVE-2013-0269 |
||
|
CVE-2012-2139 |
||
|
CVE-2012-2140 |
||
|
CVE-2013-0183 |
||
|
CVE-2013-0262 |
||
|
CVE-2013-0263 |
||
|
CVE-2013-0256 |
||
|
CVE-2013-1854 |
||
|
CVE-2014-2538 |
||
|
Wget |
CVE-2019-5953 |
|
|
libxslt1 |
CVE-2019-11068 |
|
|
Curl |
CVE-2019-5436 |
|
|
CVE-2019-3822 |
||
|
CVE-2018-16890 |
||
|
CVE-2019-3823 |
||
|
File |
CVE-2019-8907 |
|
|
CVE-2019-8905 |
||
|
Intel microcode |
CVE-2018-12205 |
|
|
CVE-2018-12203 |
||
|
CVE-2018-12204 |
||
|
CVE-2018-12201 |
||
|
CVE-2018-12202 |
||
|
CVE-2018-12126 |
||
|
CVE-2018-12127 |
||
|
CVE-2018-12130 |
||
|
CVE-2019-11091 |
||
|
ntfs-3g |
CVE-2019-9755 |
|
|
Libgnutls |
CVE-2018-10844 |
|
|
CVE-2018-10845 |
||
|
CVE-2018-10846 |
||
|
Patch |
CVE-2019-13638 |
|
|
CVE-2019-13636 |
||
|
Sudo |
CVE-2017-1000368, |
|
|
CVE-2016-7076 |
||
|
libseccomp2 |
CVE-2019-9893 |
|
|
libexpat1 |
CVE-2018-20843 |
|
|
libnss3 |
CVE-2019-11729 |
|
|
CVE-2019-11719 |
||
|
CVE-2018-18508 |
||
|
Apache2 |
CVE-2018-17199 |
|
|
CVE-2019-0211 |
||
|
CVE-2019-0217 |
||
|
CVE-2019-0220 |
||
|
libelf1 |
CVE-2018-16402 |
|
|
CVE-2019-7149 |
||
|
CVE-2018-16062 |
||
|
CVE-2018-16403 |
||
|
CVE-2018-18310 |
||
|
CVE-2019-7150 |
||
|
CVE-2019-7665 |
||
|
CVE-2018-18521 |
||
|
CVE-2018-18520 |
||
|
libglib2.0 |
CVE-2019-12450 |
|
|
CVE-2019-13012 |
||
|
bzip2 |
CVE-2016-3189 |
|
|
CVE-2019-12900 |
||
|
Python |
CVE-2019-6975 |
|
|
CVE-2019-12781 |
||
|
CVE-2019-11236 |
||
|
CVE-2018-20060 |
||
|
Vim |
CVE-2019-12735 |
|
|
CVE-2017-5953 |
||
|
Linux |
CVE-2019-2054 |
|
|
CVE-2019-11815 |
||
|
CVE-2019-6974 |
||
|
CVE-2019-11477 |
||
|
CVE-2019-7221 |
||
|
CVE-2019-10142 |
||
|
CVE-2018-20836 |
||
|
CVE-2019-11884 |
||
|
CVE-2018-19824 |
||
|
CVE-2018-16884 |
||
|
CVE-2018-20169 |
||
|
CVE-2019-11810 |
||
|
CVE-2019-9503 |
||
|
CVE-2019-9213 |
||
|
CVE-2019-11833 |
||
|
CVE-2018-14614 |
||
|
CVE-2017-18249 |
||
|
Busybox |
CVE-2016-2148 |
|
|
CVE-2016-2147 |
||
|
CVE-2018-1000517 |
||
|
CVE-2015-9261 |
||
|
CVE-2017-16544 |
||
|
CVE-2018-20679 |
||
|
CVE-2019-5747 |
||
|
CVE-2017-15873 |
||
|
CVE-2011-5325 |
||
|
Bash |
CVE-2012-6711 |
|
|
CVE-2019-9924 |
||
|
Ruby |
CVE-2019-8320 |
|
|
CVE-2019-8324 |
||
|
CVE-2019-8325 |
||
|
CVE-2019-8322 |
||
|
CVE-2019-8321 |
||
|
CVE-2019-8323 |
||
|
CVE-2018-16471 |
受影响的产品和补救措施
Affected products:
Dell EMC Networker with CloudBoost Virtual Appliance 19.1
Dell EMC Networker with CloudBoost Virtual Appliance 19.2
Remediation:
The following Dell EMC CloudBoost Virtual Appliance release addresses these vulnerabilities:
-
Dell EMC CloudBoost Virtual Appliance 19.3
Upgrade is facilitated via upgrade appliance CLI command on the appliance, as detailed in the Networker CloudBoost Integration guide. The upgrade must be done based on the current version of the CloudBoost Virtual Appliance. Refer to the Networker/CloudBoost compatibility guide before upgrading.
Dell EMC recommends all customers to upgrade at the earliest opportunity.
Affected products:
Dell EMC Networker with CloudBoost Virtual Appliance 19.1
Dell EMC Networker with CloudBoost Virtual Appliance 19.2
Remediation:
The following Dell EMC CloudBoost Virtual Appliance release addresses these vulnerabilities:
-
Dell EMC CloudBoost Virtual Appliance 19.3
Upgrade is facilitated via upgrade appliance CLI command on the appliance, as detailed in the Networker CloudBoost Integration guide. The upgrade must be done based on the current version of the CloudBoost Virtual Appliance. Refer to the Networker/CloudBoost compatibility guide before upgrading.
Dell EMC recommends all customers to upgrade at the earliest opportunity.
确认
Dell would like to thank the Orca Security research team for reporting these vulnerabilities.
相关信息
法律免责声明
受影响的产品
CloudBoost产品
Avamar with CloudBoost, CloudBoost, CloudBoost Physical Appliance, CloudBoost Virtual Appliance, NetWorker, Product Security Information文章属性
文章编号: 000153849
文章类型: Dell Security Advisory
上次修改时间: 19 9月 2025
从其他戴尔用户那里查找问题的答案
支持服务
检查您的设备是否在支持服务涵盖的范围内。