Azure Linux 3.0 Security Update: qemu / qemu-kvm (CVE-2022-26354)

The version of qemu / qemu-kvm installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-26354 advisory. - A flaw was found in the vhost-vsock device of QEMU. In case of error, an invalid element was not...

Azure Linux 3.0 Security Update: php (CVE-2024-8929)

The version of php installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-8929 advisory. - In PHP versions 8.1. before 8.1.31, 8.2. before 8.2.26, 8.3. before 8.3.14, a hostile MySQL server can cause the...

Azure Linux 3.0 Security Update: kernel (CVE-2024-46689)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-46689 advisory. - In the Linux kernel, the following vulnerability has been resolved: soc: qcom: cmd-db: Map shared memory as...

Azure Linux 3.0 Security Update: nodejs / nodejs18 / python-jinja2 (CVE-2024-34064)

The version of nodejs / nodejs18 / python-jinja2 installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-34064 advisory. - Jinja is an extensible templating engine. The xmlattr filter in affected versions...

Azure Linux 3.0 Security Update: kernel (CVE-2024-50013)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-50013 advisory. - In the Linux kernel, the following vulnerability has been resolved: exfat: fix memory leak in exfatloadbitma...

Azure Linux 3.0 Security Update: hdf5 (CVE-2024-32619)

The version of hdf5 installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-32619 advisory. - HDF5 Library through 1.14.3 contains a heap-based buffer overflow in H5Tcopyreopen in H5T.c, resulting in the...

Azure Linux 3.0 Security Update: kernel (CVE-2024-44946)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-44946 advisory. - In the Linux kernel, the following vulnerability has been resolved: kcm: Serialise kcmsendmsg for the same...

Azure Linux 3.0 Security Update: sox (CVE-2017-15371)

The version of sox installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2017-15371 advisory. - There is a reachable assertion abort in the function soxappendcomment in formats.c in Sound eXchange SoX 14.4.2...

Azure Linux 3.0 Security Update: hyperv-daemons / kernel (CVE-2021-45480)

The version of hyperv-daemons / kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2021-45480 advisory. - An issue was discovered in the Linux kernel before 5.15.11. There is a memory leak in the...

Azure Linux 3.0 Security Update: libpcap / nmap (CVE-2024-8006)

The version of libpcap / nmap installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-8006 advisory. - Remote packet capture support is disabled by default in libpcap. When a user builds libpcap with remo...

Azure Linux 3.0 Security Update: application-gateway-kubernetes-ingress / cert-manager / cf-cli / cni / cni-plugins (CVE-2024-45338)

The version of application-gateway-kubernetes-ingress / cert-manager / cf-cli / cni / cni-plugins installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-45338 advisory. - An attacker can craft an input t...

Azure Linux 3.0 Security Update: kernel (CVE-2024-43853)

"The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-43853 advisory. - In the Linux kernel, the following vulnerability has been resolved: cgroup/cpuset: Prevent UAF in...

Azure Linux 3.0 Security Update: kernel (CVE-2024-47742)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-47742 advisory. - In the Linux kernel, the following vulnerability has been resolved: firmwareloader: Block path traversal Mos...

Azure Linux 3.0 Security Update: git-lfs (CVE-2024-53263)

The version of git-lfs installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-53263 advisory. - Git LFS is a Git extension for versioning large files. When Git LFS requests credentials from Git for a...

Azure Linux 3.0 Security Update: libtiff (CVE-2023-6277)

The version of libtiff installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-6277 advisory. - An out-of-memory flaw was found in libtiff. Passing a crafted tiff file to TIFFOpen API May allow a remote...

Azure Linux 3.0 Security Update: vim (CVE-2024-43802)

The version of vim installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-43802 advisory. - Vim is an improved version of the unix vi text editor. When flushing the typeahead buffer, Vim moves the curren...

Azure Linux 3.0 Security Update: redis / valkey (CVE-2024-31228)

The version of redis / valkey installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-31228 advisory. - Redis is an open source, in-memory database that persists on disk. Authenticated users can trigger a...

Azure Linux 3.0 Security Update: hyperv-daemons (CVE-2024-36009)

The version of hyperv-daemons installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-36009 advisory. - In the Linux kernel, the following vulnerability has been resolved: ax25: Fix netdev refcount issue...

Azure Linux 3.0 Security Update: cloud-hypervisor-cvm / edk2 / hvloader / kata-containers / kata-containers-cc / nodejs (CVE-2023-5678)

The version of cloud-hypervisor-cvm / edk2 / hvloader / kata-containers / kata-containers-cc / nodejs installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-5678 advisory. - Issue summary: Generating...

Azure Linux 3.0 Security Update: mysql (CVE-2024-21219)

The version of mysql installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-21219 advisory. - Vulnerability in the MySQL Server product of Oracle MySQL component: Server: DML. Supported versions that are...