Azure Linux 3.0 Security Update: cloud-hypervisor-cvm / hvloader / nodejs18 (CVE-2023-5363)

The version of cloud-hypervisor-cvm / hvloader / nodejs18 installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-5363 advisory. - Issue summary: A bug has been identified in the processing of key and...

Azure Linux 3.0 Security Update: mariadb (CVE-2024-1543)

The version of mariadb installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-1543 advisory. - The side-channel protected T-Table implementation in wolfSSL up to version 5.6.5 protects against a side-...

Azure Linux 3.0 Security Update: kernel (CVE-2024-42309)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-42309 advisory. - In the Linux kernel, the following vulnerability has been resolved: drm/gma500: fix null pointer dereference...

Azure Linux 3.0 Security Update: kernel (CVE-2024-44986)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-44986 advisory. - In the Linux kernel, the following vulnerability has been resolved: ipv6: fix possible UAF in ip6finishoutpu...

Azure Linux 3.0 Security Update: kernel (CVE-2024-46732)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-46732 advisory. - In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Assign...

Azure Linux 3.0 Security Update: kernel (CVE-2024-47690)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-47690 advisory. - In the Linux kernel, the following vulnerability has been resolved: f2fs: get rid of online repaire on...

Azure Linux 3.0 Security Update: kernel (CVE-2024-42074)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-42074 advisory. - In the Linux kernel, the following vulnerability has been resolved: ASoC: amd: acp: add a null check for...

Azure Linux 3.0 Security Update: python-tensorboard / reaper (CVE-2024-45590)

The version of python-tensorboard / reaper installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-45590 advisory. - body-parser is Node.js body parsing middleware. body-parser 1.20.3 is vulnerable to...

Azure Linux 3.0 Security Update: kernel (CVE-2024-26952)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-26952 advisory. - In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix potencial out-of-bounds when...

Azure Linux 3.0 Security Update: coredns (CVE-2024-0874)

The version of coredns installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-0874 advisory. - A flaw was found in coredns. This issue could lead to invalid cache entries returning due to incorrectly...

Azure Linux 3.0 Security Update: frr (CVE-2024-44070)

The version of frr installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-44070 advisory. - An issue was discovered in FRRouting FRR through 10.1. bgpattrencap in bgpd/bgpattr.c does not check the actual...

Azure Linux 3.0 Security Update: httpd (CVE-2024-39884)

The version of httpd installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-39884 advisory. - A regression in the core of Apache HTTP Server 2.4.60 ignores some use of the legacy content-type based...

Azure Linux 3.0 Security Update: busybox (CVE-2023-42365)

The version of busybox installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-42365 advisory. - A use-after-free vulnerability was discovered in BusyBox v.1.36.1 via a crafted awk pattern in the awk.c...

Azure Linux 3.0 Security Update: kernel (CVE-2024-46740)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-46740 advisory. - In the Linux kernel, the following vulnerability has been resolved: binder: fix UAF caused by offsets...

Azure Linux 3.0 Security Update: libcxx / llvm / rust (CVE-2024-31852)

The version of libcxx / llvm / rust installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-31852 advisory. - LLVM before 18.1.3 generates code in which the LR register can be overwritten without data bei...

Azure Linux 3.0 Security Update: kernel (CVE-2024-46673)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-46673 advisory. - In the Linux kernel, the following vulnerability has been resolved: scsi: aacraid: Fix double-free on probe...

Azure Linux 3.0 Security Update: php (CVE-2024-8925)

The version of php installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-8925 advisory. - In PHP versions 8.1. before 8.1.30, 8.2. before 8.2.24, 8.3. before 8.3.12, erroneous parsing of multipart form...

Azure Linux 3.0 Security Update: python-idna / python-pip / python3 / tensorflow (CVE-2024-3651)

The version of python-idna / python-pip / python3 / tensorflow installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-3651 advisory. - A vulnerability was identified in the kjd/idna library, specifically...

Azure Linux 3.0 Security Update: hdf5 (CVE-2024-29162)

The version of hdf5 installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-29162 advisory. - HDF5 through 1.13.3 and/or 1.14.2 contains a stack buffer overflow in H5HGread, resulting in denial of service...

Azure Linux 3.0 Security Update: cert-manager / helm (CVE-2024-26147)

The version of cert-manager / helm installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-26147 advisory. - Helm is a package manager for Charts for Kubernetes. Versions prior to 3.14.2 contain an...