Azure Linux 3.0 Security Update: kernel (CVE-2024-26900)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-26900 advisory. - In the Linux kernel, the following vulnerability has been resolved: md: fix kmemleak of rdev-serial If...

Azure Linux 3.0 Security Update: qemu (CVE-2023-3354)

The version of qemu installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-3354 advisory. - A flaw was found in the QEMU built-in VNC server. When a client connects to the VNC server, QEMU checks whether...

Azure Linux 3.0 Security Update: unzip (CVE-2022-0529)

The version of unzip installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-0529 advisory. - A flaw was found in Unzip. The vulnerability occurs during the conversion of a wide string to a local string...

Azure Linux 3.0 Security Update: kernel (CVE-2024-47742)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-47742 advisory. - In the Linux kernel, the following vulnerability has been resolved: firmwareloader: Block path traversal Mos...

Azure Linux 3.0 Security Update: libmemcached-awesome (CVE-2023-27478)

The version of libmemcached-awesome installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-27478 advisory. - libmemcached-awesome is an open source C/C++ client library and tools for the memcached server...

Azure Linux 3.0 Security Update: golang / python-tensorboard (CVE-2020-28362)

The version of golang / python-tensorboard installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2020-28362 advisory. - Go before 1.14.12 and 1.15.x before 1.15.4 allows Denial of Service. CVE-2020-28362 Not...

Azure Linux 3.0 Security Update: hyperv-daemons (CVE-2024-26977)

The version of hyperv-daemons installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-26977 advisory. - In the Linux kernel, the following vulnerability has been resolved: pciiounmap: Fix MMIO mapping lea...

Azure Linux 3.0 Security Update: kernel (CVE-2024-50062)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-50062 advisory. - In the Linux kernel, the following vulnerability has been resolved: RDMA/rtrs-srv: Avoid null pointer deref...

Azure Linux 3.0 Security Update: kernel (CVE-2024-49868)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-49868 advisory. - In the Linux kernel, the following vulnerability has been resolved: btrfs: fix a NULL pointer dereference wh...

Azure Linux 3.0 Security Update: httpd (CVE-2024-38472)

The version of httpd installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-38472 advisory. - SSRF in Apache HTTP Server on Windows allows to potentially leak NTLM hashes to a malicious server via SSRF a...

Azure Linux 3.0 Security Update: nodejs / nodejs18 (CVE-2024-30260)

The version of nodejs / nodejs18 installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-30260 advisory. - Undici is an HTTP/1.1 client, written from scratch for Node.js. Undici cleared Authorization and...

Azure Linux 3.0 Security Update: python-pip / python-urllib3 / python3 (CVE-2023-45803)

The version of python-pip / python-urllib3 / python3 installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-45803 advisory. - urllib3 is a user-friendly HTTP client library for Python. urllib3 previously...

Azure Linux 3.0 Security Update: kernel (CVE-2024-46822)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-46822 advisory. - In the Linux kernel, the following vulnerability has been resolved: arm64: acpi: Harden getcpuforacpiid...

Azure Linux 3.0 Security Update: kernel (CVE-2024-41055)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-41055 advisory. - In the Linux kernel, the following vulnerability has been resolved: mm: prevent derefencing NULL ptr in...

Azure Linux 3.0 Security Update: kernel (CVE-2024-42237)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-42237 advisory. - In the Linux kernel, the following vulnerability has been resolved: firmware: csdsp: Validate payload length...

Azure Linux 3.0 Security Update: edk2 / hvloader (CVE-2022-36765)

The version of edk2 / hvloader installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-36765 advisory. - EDK2 is susceptible to a vulnerability in the CreateHob function, allowing a user to trigger a...

Azure Linux 3.0 Security Update: postgresql (CVE-2024-10978)

The version of postgresql installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-10978 advisory. - Incorrect privilege assignment in PostgreSQL allows a less-privileged application user to view or change...

Azure Linux 3.0 Security Update: hdf5 (CVE-2024-32610)

The version of hdf5 installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-32610 advisory. - HDF5 Library through 1.14.3 has a SEGV in H5Tclosereal in H5T.c, resulting in a corrupted instruction pointer...

Azure Linux 3.0 Security Update: gtk2 / gtk3 (CVE-2024-6655)

The version of gtk2 / gtk3 installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-6655 advisory. - A flaw was found in the GTK library. Under certain conditions, it is possible for a library to be inject...

Azure Linux 3.0 Security Update: kernel (CVE-2024-49856)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-49856 advisory. - In the Linux kernel, the following vulnerability has been resolved: x86/sgx: Fix deadlock in SGX NUMA node...