SUSE SLES15: kernel-azure / kernel-azure-devel / kernel-devel-azure / etc (SUSE-SU-2024:2896-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:2896-1 advisory. The SUSE Linux Enterprise 15 SP6 Azure kernel was updated to receive various security bugfixes. The following security bugs were...

Six 0-Days Lead Microsoft’s August 2024 Patch Push

Microsoft today released updates to fix at least 90 security vulnerabilities in Windows and related software, including a whopping six zero-day flaws that are already being actively exploited by attackers. Image: Shutterstock. This months bundle of update joy from Redmond includes patches for...

Vulnerabilities fixed in Microsoft Developer Tools

Microsoft has fixed vulnerabilities in two Developer tools. Successful exploitation requires the malicious party to trick the victim into opening and processing a rogue file. Azure IoT SDK: |----------------|------|-------------------------------------| | CVE ID | CVSS | Impact |...

Vulnerabilities fixed in Microsoft Azure components

Microsoft has fixed vulnerabilities in several Azure components. A malicious party can exploit the vulnerabilities to grant themselves elevated privileges or impersonate another user. For successful abuse, the malicious party needs prior access to the vulnerable environment, or the malicious part...

CVE-2024-38201

Azure Stack Hub Elevation of Privilege Vulnerability...

CVE-2024-38201

Azure Stack Hub Elevation of Privilege Vulnerability...

CVE-2024-38195

Azure CycleCloud Remote Code Execution Vulnerability...

CVE-2024-38195

Azure CycleCloud Remote Code Execution Vulnerability...

CVE-2024-38162

Azure Connected Machine Agent Elevation of Privilege Vulnerability...

CVE-2024-38162

Azure Connected Machine Agent Elevation of Privilege Vulnerability...

CVE-2024-38158

Azure IoT SDK Remote Code Execution Vulnerability...

CVE-2024-38157

Azure IoT SDK Remote Code Execution Vulnerability...

CVE-2024-38157

Azure IoT SDK Remote Code Execution Vulnerability...

CVE-2024-38158

Azure IoT SDK Remote Code Execution Vulnerability...

CVE-2024-38108

Azure Stack Hub Spoofing Vulnerability...

CVE-2024-38108

Azure Stack Hub Spoofing Vulnerability...

CVE-2024-38109

An authenticated attacker can exploit an Server-Side Request Forgery SSRF vulnerability in Microsoft Azure Health Bot to elevate privileges over a network...

CVE-2024-38098

Azure Connected Machine Agent Elevation of Privilege Vulnerability...

CVE-2024-38098

Azure Connected Machine Agent Elevation of Privilege Vulnerability...

USN-6952-2 linux-azure vulnerabilities

Benedict Schlüter, Supraja Sridhara, Andrin Bertschi, and Shweta Shinde discovered that an untrusted hypervisor could inject malicious VC interrupts and compromise the security guarantees of AMD SEV-SNP. This flaw is known as WeSee. A local attacker in control of the hypervisor could use this to...