13727 matches found
Citrix Virtual Apps Essentials and Citrix Virtual Desktops Essentials: EoS and EoR Azure Marketplace
Cloud Software Group has decided to end of sale EOS on October 31st, 2023, and end of renewal EOR, end of life EOL on May 31st, 2024, Citrix Virtual Apps and Desktops Essentials in the Azure Marketplace. This move is designed to improve our product line and deliver superior value and user...
USN-6440-2: Linux kernel (Azure) vulnerabilities
Seth Jenkins discovered that the Linux kernel did not properly perform address randomization for a per-cpu memory management structure. A local attacker could use this to expose sensitive information kernel memory or in conjunction with another kernel vulnerability. CVE-2023-0597 It was discovere...
Ubuntu 22.04 LTS : Linux kernel (Azure CVM) vulnerabilities (USN-6223-1)
The remote Ubuntu 22.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-6223-1 advisory. It was discovered that the TUN/TAP driver in the Linux kernel did not properly initialize socket data. A local attacker could use this to cause a denial ...
USN-6444-1: Linux kernel vulnerabilities
Ross Lagerwall discovered that the Xen netback backend driver in the Linux kernel did not properly handle certain unusual packets from a paravirtualized network frontend, leading to a buffer overflow. An attacker in a guest VM could use this to cause a denial of service host system crash or...
USN-6441-1: Linux kernel vulnerabilities
Ross Lagerwall discovered that the Xen netback backend driver in the Linux kernel did not properly handle certain unusual packets from a paravirtualized network frontend, leading to a buffer overflow. An attacker in a guest VM could use this to cause a denial of service host system crash or...
Ubuntu: Security Advisory (USN-6396-3)
The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
USN-6396-3: Linux kernel (Azure) vulnerabilities
It was discovered that some AMD x86-64 processors with SMT enabled could speculatively execute instructions using a return address from a sibling thread. A local attacker could possibly use this to expose sensitive information. CVE-2022-27672 Daniel Moghimi discovered that some IntelR Processors...
The vulnerability of the Apache Oozie data processing automation system, Azure HDInsight, allows attackers to escalate their privileges.
The vulnerability of the Apache Oozie data processing automation system, used in Azure HDInsight analytics services, is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to enhance their privileges remotely...
VDA machines stuck at initializing for Hybrid Azure AD join and taking long time to register
Azure AD based machines stuck in the initializing state or taking 45 minutes to register...
The vulnerability of the Azure RTOS GUIX Studio development environment, related to insufficient validation of input data, allows a perpetrator to execute arbitrary code.
The vulnerability of the Azure RTOS GUIX Studio development environment is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to execute arbitrary code using a specially created file...
SUSE-SU-2023:4058-1 Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP5 Azure kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2023-39192: Fixed an out of bounds read in the netfilter bsc1215858. - CVE-2023-39193: Fixed an out of bounds read in the xtables subsystem bsc1215860. -...
GHSA-4374-P667-P6C8 vulnerabilities
Vulnerabilities for packages: prometheus-elasticsearch-exporter-fips, kubevela, falcoctl, prometheus-statsd-exporter, spark-operator, nri-prometheus, terraform-provider-sendgrid-fips, dex-k8s-authenticator, kots, crossplane-provider-azure, hey, kube-state-metrics-fips, prometheus-postgres-exporte...
Azure Identity SDK Remote Code Execution Vulnerability
Azure Identity SDK is vulnerable to remote code execution...
GHSA-5MFX-4WCX-RV27 Azure Identity SDK Remote Code Execution Vulnerability
Azure Identity SDK is vulnerable to remote code execution...
Remote Code Execution (RCE)
Overview Affected versions of this package are vulnerable to Remote Code Execution RCE by passing a specially crafted OS-level command to a specific SDK property which is passed to the underlying CLI. By exploiting this vulnerability an attacker could gain high privileges, which include read,...
CVE-2023-36737
Azure Network Watcher VM Agent Elevation of Privilege Vulnerability...
CVE-2023-36737
Azure Network Watcher VM Agent Elevation of Privilege Vulnerability...
CVE-2023-36414
Azure Identity SDK Remote Code Execution Vulnerability...