CVE-2024-35253 Microsoft Azure File Sync Elevation of Privilege Vulnerability

...

CVE-2024-35253

CVE-2024-35253 affects Microsoft Azure File Sync: elevation of privilege in the Azure File Sync Agent on Windows Server. Nessus/SCCM data show affected agent versions include 17.0 prior to 17.3 and 18.0 prior to 18.1; mitigation is to upgrade to 17.3 (KB5023054) or 18.1 (KB5023058) as part of Jun...

CVE-2024-35253 Microsoft Azure File Sync Elevation of Privilege Vulnerability

...

Azure File Sync Agent v18.1 Release – June 2024 (KB5023058)

Security Update for Azure File Sync agent version 18.1.0.0. For more details, see the associated Microsoft Knowledge Base article...

Azure File Sync Agent v18.1 Release – June 2024 (KB5023058)

Security Update for Azure File Sync agent version 18.1.0.0. For more details, see the associated Microsoft Knowledge Base article...

Azure File Sync Agent v17.3 Release – June 2024 (KB5039814)

Security Update for Azure File Sync agent version 17.3.0.0. For more details, see the associated Microsoft Knowledge Base article...

Azure File Sync Agent v18.1 Release – June 2024 (KB5023058)

Security Update for Azure File Sync agent version 18.1.0.0. For more details, see the associated Microsoft Knowledge Base article...

Azure File Sync Agent v17.3 Release – June 2024 (KB5039814)

Security Update for Azure File Sync agent version 17.3.0.0. For more details, see the associated Microsoft Knowledge Base article...

Azure File Sync Agent v17.3 Release – June 2024 (KB5039814)

Security Update for Azure File Sync agent version 17.3.0.0. For more details, see the associated Microsoft Knowledge Base article...

Azure File Sync Agent v17.3 Release – June 2024 (KB5039814)

Security Update for Azure File Sync agent version 17.3.0.0. For more details, see the associated Microsoft Knowledge Base article...

Azure File Sync Agent v18.1 Release - June 2024 (Security-only update)

None None...

Azure File Sync Agent v17.3 Release - June 2024 (Security-only update)

None None...

Microsoft Azure File Sync Elevation of Privilege Vulnerability

...

CVE-2024-35253: Improper Link Resolution Before File Access

Microsoft Azure File Sync Elevation of Privilege Vulnerability...

Microsoft Azure Backlink Vulnerability

Microsoft Azure is a suite of open, enterprise-grade cloud computing platforms from Microsoft Corporation USA. A backlink vulnerability exists in Microsoft Azure File Sync. An attacker could exploit the vulnerability to elevate privileges. The following products and versions are affected:Azure Fi...

PT-2024-4309

Name of the Vulnerable Software and Affected Versions Microsoft Azure File Sync affected versions not specified Description The issue is related to an elevation of privilege vulnerability in Microsoft Azure File Sync. It involves incorrect handling of symbolic links before accessing a file, which...

KLA68916 Multiple vulnerabilities in Microsoft Azure

Multiple vulnerabilities were found in Microsoft Azure. Malicious users can exploit these vulnerabilities to cause denial of service, gain privileges, execute arbitrary code. Below is a complete list of vulnerabilities: 1. A denial of service vulnerability in Azure Storage Movement Client Library...

RHEL 8 / 9 : Red Hat Ansible Automation Platform 2.4 Product Security and Bug Fix Update (Moderate) (RHSA-2024:3781)

The remote Redhat Enterprise Linux 8 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:3781 advisory. Red Hat Ansible Automation Platform provides an enterprise framework for building, deploying and managing IT automation at scale. IT...

SUSE CVE-2024-26758

In the Linux kernel, the following vulnerability has been resolved: md: Don't ignore suspended array in mdcheckrecovery mddevsuspend never stop syncthread, hence it doesn't make sense to ignore suspended array in mdcheckrecovery, which might cause syncthread can't be unregistered. After commit...

kernel: wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work

A vulnerability was found in the Linux kernel's net rtl8xxxucore.c driver, where a race condition can lead to a use-after-free situation in the rtl8xxxustop function. This occurs when the workqueue is still running but the driver has been stopped and can lead to c2hcmdwork attempting to access...