13695 matches found
USN-7123-1: Linux kernel (Azure) vulnerabilities
It was discovered that the CIFS network file system implementation in the Linux kernel did not properly validate certain SMB messages, leading to an out-of-bounds read vulnerability. An attacker could use this to cause a denial of service system crash or possibly expose sensitive information...
CVE-2024-49060
Azure Stack HCI Elevation of Privilege Vulnerability...
CVE-2024-49060
Azure Stack HCI Elevation of Privilege Vulnerability...
CVE-2024-49060 Azure Stack HCI Elevation of Privilege Vulnerability
...
CVE-2024-49060
CVE-2024-49060 is an Azure Stack HCI Elevation of Privilege vulnerability with high impact (CVSS v3.1: AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H; base score 8.8). Affected product: Azure Stack HCI 23H2. The root issue concerns trust management in the Stack HCI stack that can enable privilege escalation...
CVE-2024-49060 Azure Stack HCI Elevation of Privilege Vulnerability
...
Azure Stack HCI Elevation of Privilege Vulnerability
...
The vulnerability of the Azure CycleCloud tool for organizing and managing high-performance computing environments, related to deficiencies in the authentication process, allows a perpetrator to execute arbitrary code.
The vulnerability of the Azure CycleCloud tool for organizing and managing high-performance computing environments is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...
Microsoft Azure Stack HCI 信任管理问题漏洞
Microsoft Azure Stack HCI is a hybrid product from Microsoft Corporation USA that hosts Windows and Linux VMs or containerized workloads and their storage. A trust management issue vulnerability exists in Microsoft Azure Stack HCI, which stems from a vulnerability that can be exploited by an...
KLA77198 PE vulnerability in Microsoft Azure
An elevation of privilege vulnerability was found in Microsoft Azure. Malicious users can exploit this vulnerability to gain privileges. Original advisories CVE-2024-49060 CVE list CVE-2024-49060 high Solution Install necessary updates from the KB section, that are listed in your Windows Update...
Fedora 38 : azure-cli (2022-ea9c1a9b20)
The remote Fedora 38 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2022-ea9c1a9b20 advisory. Automatic update for azure-cli-2.41.0-2.fc38. Changelog Thu Oct 27 2022 Major Hayden 2.41.0-2 - Fix az local dir import bug rhbz2053193 Tenable has extracted...
Security Updates for Azure CycleCloud (November 2024)
The Azure CycleCloud product is missing security updates. It is, therefore, affected by the following vulnerability: - A remote code execution vulnerability exists due to a disclosure of the storage credentials. An authenticated, remote attacker can exploit this to bypass authentication and execu...
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP6 Azure kernel was updated to receive various security bugfixes. The following security bugs were fixed: CVE-2024-36244: net/sched: taprio: extend minimum interval restriction to entire cycle too bsc1226797. CVE-2024-41031: mm/filemap: skip to create PMD-sized page...
Security Bulletin: vulnerability in Microsoft Azure Identity affects IBM Workload Scheduler.
Summary IBM Workload Scheduler is affected by a vulnerability in Microsoft Azure Identity that can cause Privilege escalation CVE-2024-35255 Vulnerability Details CVEID:CVE-2024-35255 DESCRIPTION: Microsoft Azure Identity Libraries and Microsoft Authentication Library could allow a local...
Security Bulletin: vulnerability in Microsoft Azure Storage affects IBM Workload Scheduler.
Summary IBM Workload Scheduler is affected by a vulnerability in Microsoft Azure Storage that can cause Authorization Bypass CVE-2022-30187 Vulnerability Details CVEID:CVE-2022-30187 DESCRIPTION: Microsoft Azure Storage Library could allow a local authenticated attacker to bypass security...
November Patch Tuesday release contains three critical remote code execution vulnerabilities
The Patch Tuesday for November of 2024 includes 89 vulnerabilities, including four that Microsoft marked as "critical." The remaining vulnerabilities listed are classified as "important." Microsoft assessed that exploitation of the four "critical" vulnerabilities is "less likely." CVE-2024-43639 ...
November Microsoft Patch Tuesday
November Microsoft Patch Tuesday. 125 CVEs, 35 of which were added since October MSPT. 2 vulnerabilities with signs of exploitation in the wild: Elevation of Privilege - Windows Task Scheduler CVE-2024-49039 Disclosure/Spoofing - NTLM Hash CVE-2024-43451 No signs of exploitation, but with a priva...
Microsoft and Adobe Patch Tuesday, November 2024 Security Update Review
Microsoft has released its November 2024 Patch Tuesday updates, targeting various vulnerabilities that could impact users and organizations worldwide. From zero-day threats to key product patches, here’s what’s crucial to apply this month. Here’s a breakdown of the updates and how they impact you...