Azure Linux 3.0 Security Update: edk2 / openssl (CVE-2022-0778)

The version of edk2 / openssl installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-0778 advisory. - The BNmodsqrt function, which computes a modular square root, contains a bug that can cause it to loo...

Azure Linux 3.0 Security Update: hdf5 (CVE-2024-29164)

The version of hdf5 installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-29164 advisory. - HDF5 through 1.14.3 contains a stack buffer overflow in H5Rdecodeheap, resulting in the corruption of the...

Azure Linux 3.0 Security Update: mysql (CVE-2024-21236)

The version of mysql installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-21236 advisory. - Vulnerability in the MySQL Server product of Oracle MySQL component: InnoDB. Supported versions that are...

Azure Linux 3.0 Security Update: kernel (CVE-2024-47739)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-47739 advisory. - In the Linux kernel, the following vulnerability has been resolved: padata: use integer wrap around to preve...

Azure Linux 3.0 Security Update: hdf5 (CVE-2024-33876)

The version of hdf5 installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-33876 advisory. - HDF5 Library through 1.14.3 has a heap buffer overflow in H5Spointdeserialize in H5Spoint.c. CVE-2024-33876 No...

Azure Linux 3.0 Security Update: edk2 / openssl (CVE-2021-3712)

The version of edk2 / openssl installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2021-3712 advisory. - ASN.1 strings are represented internally within OpenSSL as an ASN1STRING structure which contains a...

Azure Linux 3.0 Security Update: oath-toolkit (CVE-2024-47191)

The version of oath-toolkit installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-47191 advisory. - pamoath.so in oath-toolkit 2.6.7 through 2.6.11 before 2.6.12 allows root privilege escalation because...

Azure Linux 3.0 Security Update: vim (CVE-2024-41957)

The version of vim installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-41957 advisory. - Vim is an open source command line text editor. Vim v9.1.0647 has double free in src/alloc.c:616. When closing ...

Azure Linux 3.0 Security Update: hdf5 (CVE-2024-29160)

The version of hdf5 installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-29160 advisory. - HDF5 through 1.14.3 contains a heap buffer overflow in H5HGcacheheapdeserialize, resulting in the corruption o...

Azure Linux 3.0 Security Update: kernel (CVE-2024-46702)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-46702 advisory. - In the Linux kernel, the following vulnerability has been resolved: thunderbolt: Mark XDomain as unplugged...

Azure Linux 3.0 Security Update: hdf5 (CVE-2024-29163)

The version of hdf5 installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-29163 advisory. - HDF5 through 1.14.3 contains a heap buffer overflow in H5Tbitfind, resulting in the corruption of the...

Azure Linux 3.0 Security Update: kernel (CVE-2024-49966)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-49966 advisory. - In the Linux kernel, the following vulnerability has been resolved: ocfs2: cancel dqisyncwork before freeing...

Azure Linux 3.0 Security Update: jasper (CVE-2023-51257)

The version of jasper installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-51257 advisory. - An invalid memory write issue in Jasper-Software Jasper v.4.1.1 and before allows a local attacker to execut...

Azure Linux 3.0 Security Update: kernel (CVE-2024-27019)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-27019 advisory. - In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: Fix potential...

Azure Linux 3.0 Security Update: grpc / keras / mysql / protobuf / pytorch (CVE-2022-1941)

The version of grpc / keras / mysql / protobuf / pytorch installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-1941 advisory. - A parsing vulnerability for the MessageSet type in the ProtocolBuffers...

Azure Linux 3.0 Security Update: postgresql (CVE-2024-10978)

The version of postgresql installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-10978 advisory. - Incorrect privilege assignment in PostgreSQL allows a less-privileged application user to view or change...

Azure Linux 3.0 Security Update: clamav (CVE-2024-20505)

The version of clamav installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-20505 advisory. - A vulnerability in the PDF parsing module of Clam AntiVirus ClamAV versions 1.4.0, 1.3.2 and prior versions,...

Azure Linux 3.0 Security Update: edk2 / hvloader (CVE-2023-45235)

The version of edk2 / hvloader installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-45235 advisory. - EDK2's Network Package is susceptible to a buffer overflow vulnerability when handling Server ID...

Azure Linux 3.0 Security Update: kernel (CVE-2024-49856)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-49856 advisory. - In the Linux kernel, the following vulnerability has been resolved: x86/sgx: Fix deadlock in SGX NUMA node...

Azure Linux 3.0 Security Update: edk2 / hvloader (CVE-2022-36764)

The version of edk2 / hvloader installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-36764 advisory. - EDK2 is susceptible to a vulnerability in the Tcg2MeasurePeImage function, allowing a user to trigg...