CVE-2025-29972 Azure Storage Resource Provider Spoofing Vulnerability

...

CVE-2025-29972

CVE-2025-29972 describes a Server-Side Request Forgery (SSRF) in Microsoft Azure’s Storage Resource Provider (SRP) that could allow an authorized attacker to spoof network interactions. Public sources list the affected component as SRP and note the vulnerability enables spoofing of user interface...

Azure Storage Resource Provider Spoofing Vulnerability

Server-side request forgery ssrf in Azure Storage Resource Provider allows an authorized attacker to perform spoofing over a network...

BlobTierInadequateForContentLength during Machine Catalog Update

The following error is seen while updating a MCS Machine Catalog after resizing the size of the Master VM disk. Exception: StudioErrorId : ProvisioningTaskError ErrorCategory : NotSpecified TaskState : FailedToCreateImagePreparationVm TaskStateInformation : Terminated ErrorId :...

python311-azure-storage-blob-12.24.1-1.1 on GA media (moderate)

python311-azure-storage-blob-12.24.1-1.1 on GA media Announcement ID: openSUSE-SU-2025:14690-1 Rating: moderate Cross-References: CVE-2022-30187 CVSS scores: CVE-2022-30187 SUSE : 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N Affected Products: openSUSE Tumbleweed An update that solves one...

Security Bulletin: vulnerability in Microsoft Azure Storage affects IBM Workload Scheduler.

Summary IBM Workload Scheduler is affected by a vulnerability in Microsoft Azure Storage that can cause Authorization Bypass CVE-2022-30187 Vulnerability Details CVEID:CVE-2022-30187 DESCRIPTION: Microsoft Azure Storage Library could allow a local authenticated attacker to bypass security...

Unwrapping the emerging Interlock ransomware attack

Cisco Talos Incident Response Talos IR recently observed an attacker conducting big-game hunting and double extortion attacks using the relatively new Interlock ransomware. Our analysis uncovered that the attacker used multiple components in the delivery chain including a Remote Access Tool RAT...

Microsoft Warns of New INC Ransomware Targeting U.S. Healthcare Sector

Microsoft has revealed that a financially motivated threat actor has been observed using a ransomware strain called INC for the first time to target the healthcare sector in the U.S. The tech giant's threat intelligence team is tracking the activity under the name Vanilla Tempest formerly DEV-083...

Release Information for Veeam Backup for Microsoft Azure 7 Cumulative Patches

Requirements Please confirm that you are running version Veeam Backup for Microsoft Azure v7 build 7.0.0.467 or later before upgrading. You can find the currently installed build number Product version in the About section under Configuration | Support Information | Updates. After installing Veea...

Malicious code in DistributedLocks.AzureStorage.Net (NuGet)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-4471 Malicious code in DistributedLocks.AzureStorage.Net (NuGet)

--- -= Per source details. Do not edit below this line.=-...

OPENSUSE-SU-2024:12283-1 python310-azure-storage-blob-12.13.1-2.1 on GA media

These are all security issues fixed in the python310-azure-storage-blob-12.13.1-2.1 package on the GA media of openSUSE Tumbleweed...

Uncontrolled Resource Consumption ('Resource Exhaustion')

Overview Affected versions of this package are vulnerable to Uncontrolled Resource Consumption 'Resource Exhaustion' through the data transfer process. An attacker can disrupt service by sending specially crafted network requests. Remediation Upgrade Microsoft.Azure.Storage.DataMovement to versio...

GHSA-32F8-HMR3-7VXG Azure Storage Movement Client Library Denial of Service Vulnerability

Azure Storage Movement Client Library Denial of Service Vulnerability...

Azure Storage Movement Client Library Denial of Service Vulnerability

Azure Storage Movement Client Library Denial of Service Vulnerability...

Microsoft and Adobe Patch Tuesday, June 2024 Security Update Review

Microsofts June Patch Tuesday is here, bringing fixes for vulnerabilities impacting its multiple products. This months release highlights the ongoing battle against cybersecurity threats, from critical updates to important fixes. Lets dive into the crucial insights from Microsofts Patch Tuesday...

CVE-2024-35252

Azure Storage Movement Client Library Denial of Service Vulnerability...

CVE-2024-35252

Azure Storage Movement Client Library Denial of Service Vulnerability...

CVE-2024-35252 Azure Storage Movement Client Library Denial of Service Vulnerability

...

Azure Storage Movement Client Library Denial of Service Vulnerability

...