Azure Linux 3.0 Security Update: application-gateway-kubernetes-ingress / azcopy / blobfuse2 / cert-manager / coredns (CVE-2023-45288)

The version of application-gateway-kubernetes-ingress / azcopy / blobfuse2 / cert-manager / coredns installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-45288 advisory. - An attacker May cause an HTTP/...

Azure Linux 3.0 Security Update: azcopy / containerized-data-importer / cri-o / golang / moby-engine / prometheus / sriov-network-device-plugin (CVE-2022-41717)

The version of azcopy / containerized-data-importer / cri-o / golang / moby-engine / prometheus / sriov-network-device- plugin installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-41717 advisory. - An...

Azure Linux 3.0 Security Update: azcopy / blobfuse2 / cert-manager / cf-cli (CVE-2024-24786)

The version of azcopy / blobfuse2 / cert-manager / cf-cli installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-24786 advisory. - The protojson.Unmarshal function can enter an infinite loop when...

Unwrapping the emerging Interlock ransomware attack

Cisco Talos Incident Response Talos IR recently observed an attacker conducting big-game hunting and double extortion attacks using the relatively new Interlock ransomware. Our analysis uncovered that the attacker used multiple components in the delivery chain including a Remote Access Tool RAT...

AZL-52174 CVE-2024-51744 affecting package azcopy for versions less than 10.25.1-4

golang-jwt is a Go implementation of JSON Web Tokens. Unclear documentation of the error behavior in ParseWithClaims can lead to situation where users are potentially not checking errors in the way they should be. Especially, if a token is both expired and invalid, the errors returned by...

AZL-52260 CVE-2024-51744 affecting package azcopy for versions less than 10.25.1-5

golang-jwt is a Go implementation of JSON Web Tokens. Unclear documentation of the error behavior in ParseWithClaims can lead to situation where users are potentially not checking errors in the way they should be. Especially, if a token is both expired and invalid, the errors returned by...

Microsoft Warns of New INC Ransomware Targeting U.S. Healthcare Sector

Microsoft has revealed that a financially motivated threat actor has been observed using a ransomware strain called INC for the first time to target the healthcare sector in the U.S. The tech giant's threat intelligence team is tracking the activity under the name Vanilla Tempest formerly DEV-083...

CVE-2024-35255 affecting package azcopy for versions less than 10.25.1-1

CVE-2024-35255 affecting package azcopy for versions less than 10.25.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2023-45288 affecting package azcopy for versions less than 10.25.1-1

CVE-2023-45288 affecting package azcopy for versions less than 10.25.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2024-35255 affecting package azcopy for versions less than 10.25.1-1

CVE-2024-35255 affecting package azcopy for versions less than 10.25.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2024-24786 affecting package azcopy for versions less than 10.24.0-1

CVE-2024-24786 affecting package azcopy for versions less than 10.24.0-1. An upgraded version of the package is available that resolves this issue...

CVE-2023-45288 affecting package azcopy for versions less than 10.24.0-1

CVE-2023-45288 affecting package azcopy for versions less than 10.24.0-1. A patched version of the package is available...

CVE-2022-41717 affecting package azcopy for versions less than 10.24.0-1

CVE-2022-41717 affecting package azcopy for versions less than 10.24.0-1. An upgraded version of the package is available that resolves this issue...

CVE-2024-24786 affecting package azcopy for versions less than 10.24.0-1

CVE-2024-24786 affecting package azcopy for versions less than 10.24.0-1. An upgraded version of the package is available that resolves this issue...

AZL-42799 CVE-2024-35255 affecting package azcopy for versions less than 10.25.1-1

Azure Identity Libraries and Microsoft Authentication Library Elevation of Privilege Vulnerability...

AZL-42789 CVE-2024-35255 affecting package azcopy for versions less than 10.25.1-1

Azure Identity Libraries and Microsoft Authentication Library Elevation of Privilege Vulnerability...

AZL-42706 CVE-2023-45288 affecting package azcopy for versions less than 10.24.0-1

An attacker may cause an HTTP/2 endpoint to read arbitrary amounts of header data by sending an excessive number of CONTINUATION frames. Maintaining HPACK state requires parsing and processing all HEADERS and CONTINUATION frames on a connection. When a request's headers exceed MaxHeaderBytes, no...

AZL-35551 CVE-2024-24786 affecting package azcopy for versions less than 10.24.0-1

The protojson.Unmarshal function can enter an infinite loop when unmarshaling certain forms of invalid JSON. This condition can occur when unmarshaling into a message which contains a google.protobuf.Any value, or when the UnmarshalOptions.DiscardUnknown option is set...

CVE-2023-44487 affecting package azcopy for versions less than 10.15.0-13

CVE-2023-44487 affecting package azcopy for versions less than 10.15.0-13. A patched version of the package is available...

AZL-31292 CVE-2023-44487 affecting package azcopy for versions less than 10.15.0-13

The HTTP/2 protocol allows a denial of service server resource consumption because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023...