The vulnerability of the data collection tool for Azure Monitor Agents from virtual machines and physical servers arises from incorrect handling of the link before accessing the file. This allows attackers to escalate their privileges.

The vulnerability of the data collection tool for Azure Monitor Agents, which are used for monitoring virtual machines and physical servers, is related to an incorrect definition of the link before accessing the file. Exploiting this vulnerability could allow attackers to increase their privilege...

Vulnerabilities fixed in Oracle MySQL

Oracle has fixed vulnerabilities in several MySQL products. A malicious party can exploit the vulnerabilities to launch attacks execute attacks that can result in the following categories of damage: Denial-of-Service DoS. Manipulation of data Access to sensitive data Oracle has fixed the...

Oracle MySQL Enterprise Monitor (Apr 2024 CPU)

The versions of MySQL Enterprise Monitor installed on the remote host are affected by a vulnerability as referenced in the April 2024 CPU advisory. Vulnerability in the MySQL Enterprise Monitor product of Oracle MySQL component: Monitoring: General OpenSSL. Supported versions that are affected ar...

DEBIAN-CVE-2024-26888

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: msft: Fix memory leak Fix leaking buffer allocated to send MSFTOPLEMONITORADVERTISEMENT...

DEBIAN-CVE-2024-26893

In the Linux kernel, the following vulnerability has been resolved: firmware: armscmi: Fix double free in SMC transport cleanup path When the generic SCMI code tears down a channel, it calls the chanfree callback function, defined by each transport. Since multiple protocols might share the same...

UBUNTU-CVE-2024-26888

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: msft: Fix memory leak Fix leaking buffer allocated to send MSFTOPLEMONITORADVERTISEMENT...

PT-2024-3939 · Microsoft · Azure Monitor Agent

Name of the Vulnerable Software and Affected Versions: Azure Monitor Agent affected versions not specified Description: The issue is related to an incorrect reference count before accessing a file, which can be exploited to elevate privileges using a specially crafted link. Recommendations: At th...

Security Bulletin: Node.js IP is vulnerable to CVE-2023-42282 used in IBM Maximo Application Suite - Monitor Component

Summary IBM Maximo Application Suite - Monitor Component uses Node.js IP which is vulnerable to CVE-2023-42282. This bulletin identifies the steps to take to address the vulnerability. Vulnerability Details CVEID:CVE-2023-42282 DESCRIPTION: Node.js IP package could allow a remote attacker to...

Vulnerabilities fixed in Microsoft Azure products

Microsoft has fixed vulnerabilities in Azure and various applications within Azure. A malicious party could exploit them to carry out attacks that can result in the following categories of damage: Denial-of-Service DoS. Remote code execution User rights Access to sensitive data Access to system...

CVE-2024-29989

Azure Monitor Agent Elevation of Privilege Vulnerability...

CVE-2024-29989

Azure Monitor Agent Elevation of Privilege Vulnerability...

CVE-2024-29989 Azure Monitor Agent Elevation of Privilege Vulnerability

...

CVE-2024-29989

CVE-2024-29989 is an Azure Monitor Agent elevation-of-privilege vulnerability. Connected sources confirm affected product (Azure Monitor Agent), vulnerability class (elevation of privilege), and CVSSv3.1 base score 8.4 with LOCAL/LOW-complexity access, LOW privileges required, user interaction No...

CVE-2024-29989 Azure Monitor Agent Elevation of Privilege Vulnerability

...

Azure Monitor Agent Elevation of Privilege Vulnerability

...

PT-2024-2889 · Microsoft · Azure Monitor Agent

Name of the Vulnerable Software and Affected Versions: Azure Monitor Agent affected versions not specified Description: The issue is related to an incorrect reference count before accessing a file, which can be exploited to elevate privileges. Recommendations: At the moment, there is no informati...

PT-2024-7548 · Microsoft · Azure Monitor Agent

Name of the Vulnerable Software and Affected Versions: Azure Monitor Agent affected versions not specified Description: The issue is related to an elevation of privilege vulnerability in the Azure Monitor Agent, which is used for data collection from virtual machines VM and physical servers. The...

Microsoft Azure Monitor 安全漏洞

Microsoft Azure is a suite of open, enterprise-grade cloud computing platforms from Microsoft Corporation USA. A security vulnerability exists in Microsoft Azure Monitor. An attacker can elevate privileges by exploiting the vulnerability...

CVE-2024-26796

The CVE-2024-26796 vulnerability affects the Linux kernel perf subsystem on RISCV with the PMU legacy path. The root cause is that the ctr_get_width function was not defined for the legacy configuration (CONFIG_RISCV_PMU_LEGACY=y, CONFIG_RISCV_PMU_SBI=n), causing a NULL pointer dereference in per...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel. No information about this vulnerability is available at this time, so stay tuned to CNNVD or vendor announcements...