Azure Linux 3.0 Security Update: kernel (CVE-2024-47748)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-47748 advisory. - In the Linux kernel, the following vulnerability has been resolved: vhostvdpa: assign irq bypass producer...

Azure Linux 3.0 Security Update: libsndfile (CVE-2022-33065)

The version of libsndfile installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-33065 advisory. - Multiple signed integers overflow in function aureadheader in src/au.c and in functions mat4open and...

Azure Linux 3.0 Security Update: kernel (CVE-2024-46743)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-46743 advisory. - In the Linux kernel, the following vulnerability has been resolved: of/irq: Prevent device address out-of-...

Azure Linux 3.0 Security Update: cmake / curl / mysql (CVE-2023-46219)

The version of cmake / curl / mysql installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-46219 advisory. - When saving HSTS data to an excessively long file name, curl could end up removing all content...

Azure Linux 3.0 Security Update: kernel (CVE-2024-49858)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-49858 advisory. - In the Linux kernel, the following vulnerability has been resolved: efistub/tpm: Use ACPI reclaim memory for...

Azure Linux 3.0 Security Update: cloud-hypervisor-cvm / openssl (CVE-2024-5535)

The version of cloud-hypervisor-cvm / openssl installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-5535 advisory. - Issue summary: Calling the OpenSSL API function SSLselectnextproto with an empty...

Azure Linux 3.0 Security Update: gcc (CVE-2023-4039)

The version of gcc installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-4039 advisory. - DISPUTEDA failure in the -fstack-protector feature in GCC-based toolchains that target AArch64 allows an attacke...

Azure Linux 3.0 Security Update: golang / msft-golang (CVE-2023-29404)

The version of golang / msft-golang installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-29404 advisory. - The go command May execute arbitrary code at build time when using cgo. This May occur when...

Azure Linux 3.0 Security Update: hyperv-daemons (CVE-2024-35912)

The version of hyperv-daemons installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-35912 advisory. - In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: rfi: fix...

Azure Linux 3.0 Security Update: kernel (CVE-2007-4998)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2007-4998 advisory. - cp, when running with an option to preserve symlinks on multiple OSes, allows local, user-assisted attackers ...

Azure Linux 3.0 Security Update: kernel (CVE-2024-39475)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-39475 advisory. - In the Linux kernel, the following vulnerability has been resolved: fbdev: savage: Handle err return when...

Azure Linux 3.0 Security Update: packer (CVE-2025-21613)

The version of packer installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-21613 advisory. - go-git is a highly extensible git implementation library written in pure Go. An argument injection...

Azure Linux 3.0 Security Update: kernel (CVE-2024-42310)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-42310 advisory. - In the Linux kernel, the following vulnerability has been resolved: drm/gma500: fix null pointer dereference...

Azure Linux 3.0 Security Update: heimdal / samba (CVE-2022-3116)

The version of heimdal / samba installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-3116 advisory. - The Heimdal Software Kerberos 5 implementation is vulnerable to a null pointer dereferance. An...

Azure Linux 3.0 Security Update: edk2 / hvloader / openssl / rust (CVE-2023-2650)

The version of edk2 / hvloader / openssl / rust installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-2650 advisory. - Issue summary: Processing some specially crafted ASN.1 object identifiers or data...

Azure Linux 3.0 Security Update: kernel (CVE-2024-26978)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-26978 advisory. - In the Linux kernel, the following vulnerability has been resolved: serial: max310x: fix NULL pointer...

Azure Linux 3.0 Security Update: libsoup (CVE-2024-52532)

The version of libsoup installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-52532 advisory. - GNOME libsoup before 3.6.1 has an infinite loop, and memory consumption. during the reading of certain...

Azure Linux 3.0 Security Update: kernel (CVE-2024-42070)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-42070 advisory. - In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: fully validate...

Azure Linux 3.0 Security Update: kernel (CVE-2024-38583)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-38583 advisory. - In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix use-after-free of timer for...

Azure Linux 3.0 Security Update: kernel (CVE-2024-43853)

"The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-43853 advisory. - In the Linux kernel, the following vulnerability has been resolved: cgroup/cpuset: Prevent UAF in...