USN-6647-2: Linux kernel (Azure) vulnerabilities

It was discovered that a race condition existed in the ATM Asynchronous Transfer Mode subsystem of the Linux kernel, leading to a use-after-free vulnerability. A local attacker could use this to cause a denial of service system crash or possibly execute arbitrary code. CVE-2023-51780 It was...

CentOS 9 : grafana-9.2.10-4.el9

The remote CentOS Linux 9 host has a package installed that is affected by a vulnerability as referenced in the grafana-9.2.10-4.el9 build changelog. - account takeover possible when using Azure AD OAuth CVE-2023-3128 Note that Nessus has not tested for this issue but has instead relied only on t...

February 29, 2024—KB5034843 (OS Build 19045.4123) Preview

None None...

The vulnerability of the Azure Site Recovery disaster recovery tool, related to deficiencies in access control, allows attackers to bypass existing security restrictions and enhance their privileges.

The vulnerability of the Azure Site Recovery recovery mechanism is related to deficiencies in access control. Exploiting this vulnerability could allow attackers to bypass existing security restrictions and enhance their privileges...

The vulnerability of the Microsoft Azure File Sync data synchronization service is related to deficiencies in access control. This allows attackers to circumvent existing security restrictions and enhance their privileges.

The vulnerability of the Microsoft Azure File Sync data synchronization service is related to deficiencies in access control. Exploiting this vulnerability could allow attackers to circumvent existing security restrictions and enhance their privileges...

USN-6648-2: Linux kernel (Azure) vulnerabilities

It was discovered that a race condition existed in the AppleTalk networking subsystem of the Linux kernel, leading to a use-after-free vulnerability. A local attacker could use this to cause a denial of service system crash or possibly execute arbitrary code. CVE-2023-51781 Zhenghan Wang discover...

Azure File Sync Agent v17.2 Release – February 2024 (KB5023055)

Update for Azure File Sync agent version 17.2.0.0. For more details, see the associated Microsoft Knowledge Base article...

Azure File Sync Agent v17.2 Release – February 2024 (KB5023055)

Update for Azure File Sync agent version 17.2.0.0. For more details, see the associated Microsoft Knowledge Base article...

Azure File Sync Agent v17.2 Release – February 2024 (KB5023055)

Update for Azure File Sync agent version 17.2.0.0. For more details, see the associated Microsoft Knowledge Base article...

Azure File Sync Agent v17.2 Release – February 2024 (KB5023055)

Update for Azure File Sync agent version 17.2.0.0. For more details, see the associated Microsoft Knowledge Base article...

Iran-Linked UNC1549 Hackers Target Middle East Aerospace & Defense Sectors

An Iran-nexus threat actor known as UNC1549 has been attributed with medium confidence to a new set of attacks targeting aerospace, aviation, and defense industries in the Middle East, including Israel and the U.A.E. Other targets of the cyber espionage activity likely include Turkey, India, and...

Double Free

microsoft.azure.uamqp is vulnerable to Double Free. The vulnerability is due to an incorrect AMQPVALUE failed state resulting in a double free exception and possible remote code execution...

Ubuntu 18.04 LTS / 20.04 LTS : Linux kernel (Azure) vulnerabilities (USN-6648-2)

The remote Ubuntu 18.04 LTS / 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-6648-2 advisory. It was discovered that a race condition existed in the AppleTalk networking subsystem of the Linux kernel, leading to a use-after-free...

KLA64657 PE vulnerability in Microsoft Azure

An elevation of privilege vulnerability was found in Microsoft Azure. Malicious users can exploit this vulnerability to gain privileges. Original advisories CVE-2024-21626 Exploitation Public exploits exist for this vulnerability. Malware exists for this vulnerability. Usually such malware is...

The vulnerability of the Microsoft Azure AD and Atlassian JIRA Single-Sign-On Plugin relates to deficiencies in access control. This allows attackers to circumvent existing security restrictions and enhance their privileges.

The vulnerability of the Microsoft Azure AD and Atlassian JIRA Single-Sign-On Plugin is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to bypass existing security restrictions and increase their privileges...

The vulnerability of the Microsoft Azure Active Directory B2C access and identity management service, related to information representation errors in the user interface, allows attackers to perform spear-phishing attacks.

The vulnerability of the Microsoft Azure Active Directory B2C access and identity management service is related to information representation errors in the user interface. Exploiting this vulnerability could allow a malicious actor to perform spear-phishing attacks remotely...

CVE-2024-27099

The uAMQP is a C library for AMQP 1.0 communication to Azure Cloud Services. When processing an incorrect AMQPVALUE failed state, may cause a double free problem. This may cause a RCE. Update submodule with commit 2ca42b6e4e098af2d17e487814a91d05f6ae4987...

AZL-35447 CVE-2024-27099 affecting package azure-iot-sdk-c for versions less than 2022.01.21-3

The uAMQP is a C library for AMQP 1.0 communication to Azure Cloud Services. When processing an incorrect AMQPVALUE failed state, may cause a double free problem. This may cause a RCE. Update submodule with commit 2ca42b6e4e098af2d17e487814a91d05f6ae4987...

AZL-35471 CVE-2024-27099 affecting package azure-iot-sdk-c for versions less than 2024.03.04-1

The uAMQP is a C library for AMQP 1.0 communication to Azure Cloud Services. When processing an incorrect AMQPVALUE failed state, may cause a double free problem. This may cause a RCE. Update submodule with commit 2ca42b6e4e098af2d17e487814a91d05f6ae4987...

UBUNTU-CVE-2024-27099

The uAMQP is a C library for AMQP 1.0 communication to Azure Cloud Services. When processing an incorrect AMQPVALUE failed state, may cause a double free problem. This may cause a RCE. Update submodule with commit 2ca42b6e4e098af2d17e487814a91d05f6ae4987...