CVE-2024-35255 affecting package azcopy for versions less than 10.25.1-1

CVE-2024-35255 affecting package azcopy for versions less than 10.25.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2024-35255 affecting package telegraf for versions less than 1.29.4-6

CVE-2024-35255 affecting package telegraf for versions less than 1.29.4-6. A patched version of the package is available...

CVE-2024-35255

A flaw was found in Microsoft's Azure Identity Libraries and the Microsoft Authentication Library MSAL. The flaw arises from a race condition—a scenario where the timing of events leads to unexpected behavior—during concurrent operations on shared resources. This can result in privilege escalatio...

GHSA-RVJ4-Q8Q5-8GRF ACME DNS: Azure Identity Libraries Elevation of Privilege Vulnerability

Impact There is a vulnerability in Azure Identity Libraries and Microsoft Authentication Library Elevation of Privilege Vulnerability. References - CVE-2024-35255 Patches - https://github.com/traefik/traefik/releases/tag/v2.11.5 - https://github.com/traefik/traefik/releases/tag/v3.0.3 Workarounds...

SUSE CVE-2024-35255

unknown...

365center-mcp (>=1.0.0 <=1.4.0), @0cfg/rpc-common (>=0.0.1 <=0.1.3) +5096 more potentially affected by CVE-2024-35255 via @azure/identity (>=1.0.0-preview.2 <=4.2.0)

@azure/identity NPM version =1.0.0-preview.2, =1.0.0, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.11, =1.0.0, =0.0.1-alpha.3, =0.0.1, =1.0.0, =1.0.1, =16.0.5, =0.3.1, =0.0.1, =0.0.5 and more Source cves: CVE-2024-35255 Source advisory: OSV:GHSA-M5VV-6R4H-3VJ9...

ai.onehouse:lakeview (>=0.26.0 <=0.30.0), ai.onehouse:lakeview-sync-tool (>=0.26.0 <=0.30.0) +340 more potentially affected by CVE-2024-35255 via com.azure:azure-identity (>=1.0.0-preview.4 <=1.12.1)

com.azure:azure-identity MAVEN version =1.0.0-preview.4, =0.26.0, =0.26.0, =1.0.0, =1.0.0, =1.2.3, =1.0.0, =1.0.0, =1.0.0-beta.4, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.6.4.6, =0.6.4.6, =0.6.4.11 and more Source cves: CVE-2024-35255 Source advisory: OSV:GHSA-M5VV-6R4H-3VJ9...

aad-fastapi-dl37 (>=1.0.0 <=1.0.2), affinda (>=0.1.12 <=1.2.0) +104 more potentially affected by CVE-2024-35255 via azure-identity (>=1.0.1 <=1.16.0)

azure-identity PYPI version =1.0.1, =1.0.0, =0.1.12, =0.0.2, =1.1.89, =0.1.0b1, =0.21.2111.177147b1, =0.1.5, =1.0.0, =1.37.0, =1.0.0.125849, =0.0.7, =0.7.16, =0.6.23, =0.16.0, =0.0.8, =0.0.34 and more Source cves: CVE-2024-35255 Source advisory: OSV:GHSA-M5VV-6R4H-3VJ9...

@pnp/nodejs (>=4.0.0 <=4.1.1-v4nightly.20240617), insomnia-plugin-azure-ad-authentication (=1.1.2) potentially affected by CVE-2024-35255 via @azure/msal-node (>=2.7.0 <=2.9.1)

@azure/msal-node NPM version =2.7.0, =4.0.0, =4.1.1-v4nightly.20240617 - insomnia-plugin-azure-ad-authentication =1.1.2 Source cves: CVE-2024-35255 Source advisory: OSV:GHSA-M5VV-6R4H-3VJ9...

CVE-2024-35255

Azure Identity Libraries and Microsoft Authentication Library Elevation of Privilege Vulnerability...

CVE-2024-35255 vulnerabilities

Vulnerabilities for packages: flyte, fluent-bit-plugin-loki, tkn, step, policy-controller, argo-events, cortex, grafana-agent-operator, guac, tempo, sops, trino, wal-g, restic, velero, opentelemetry-collector, buildkitd, falcoctl, up, flux-source-controller, rook, flux, rekor, k8sgpt, cosign, hug...

AZL-42649 CVE-2024-35255 affecting package telegraf for versions less than 1.31.0-9

Azure Identity Libraries and Microsoft Authentication Library Elevation of Privilege Vulnerability...

CVE-2024-35255 vulnerabilities

Vulnerabilities for packages: tkn-fips, hugo-extended, flux-image-reflector-controller, pulumi, secrets-store-csi-driver-provider-azure, rclone, opentelemetry-collector-contrib, sops, restic, boring-registry-fips, vault, thanos, zarf, tempo-fips, velero, opentelemetry-collector-contrib-fips,...

AZL-42646 CVE-2024-35255 affecting package prometheus for versions less than 2.45.4-12

Azure Identity Libraries and Microsoft Authentication Library Elevation of Privilege Vulnerability...

AZL-42664 CVE-2024-35255 affecting package telegraf for versions less than 1.29.4-6

Azure Identity Libraries and Microsoft Authentication Library Elevation of Privilege Vulnerability...

AZL-43323 CVE-2024-35255 affecting package blobfuse2 for versions less than 2.3.2-1

Azure Identity Libraries and Microsoft Authentication Library Elevation of Privilege Vulnerability...

CVE-2024-35255 Azure Identity Libraries and Microsoft Authentication Library Elevation of Privilege Vulnerability

...

openSUSE: Security Advisory for nodejs18 (SUSE-SU-2023:0419-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

nodejs security update

1:16.19.1-2 - Update bundled c-ares to 1.19.1 Resolves: CVE-2023-31124 CVE-2023-31130 CVE-2023-31147 CVE-2023-32067 1:16.19.1-1 - Rebase to 16.19.1 - Resolves: rhbz2153714 - Resolves: CVE-2023-23918 CVE-2023-23919 CVE-2023-23936 CVE-2023-24807 CVE-2023-23920 - Resolves: CVE-2022-25881 CVE-2022-49...

SUSE: Security Advisory (SUSE-SU-2023:0419-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...