CVE-2024-35253 Microsoft Azure File Sync Elevation of Privilege Vulnerability

...

CVE-2024-35253 Microsoft Azure File Sync Elevation of Privilege Vulnerability

...

CVE-2024-35253

CVE-2024-35253 affects Microsoft Azure File Sync: elevation of privilege in the Azure File Sync Agent on Windows Server. Nessus/SCCM data show affected agent versions include 17.0 prior to 17.3 and 18.0 prior to 18.1; mitigation is to upgrade to 17.3 (KB5023054) or 18.1 (KB5023058) as part of Jun...

Azure File Sync Agent v17.3 Release – June 2024 (KB5039814)

Security Update for Azure File Sync agent version 17.3.0.0. For more details, see the associated Microsoft Knowledge Base article...

Azure File Sync Agent v17.3 Release – June 2024 (KB5039814)

Security Update for Azure File Sync agent version 17.3.0.0. For more details, see the associated Microsoft Knowledge Base article...

Azure File Sync Agent v17.3 Release – June 2024 (KB5039814)

Security Update for Azure File Sync agent version 17.3.0.0. For more details, see the associated Microsoft Knowledge Base article...

Azure File Sync Agent v18.1 Release – June 2024 (KB5023058)

Security Update for Azure File Sync agent version 18.1.0.0. For more details, see the associated Microsoft Knowledge Base article...

Azure File Sync Agent v18.1 Release – June 2024 (KB5023058)

Security Update for Azure File Sync agent version 18.1.0.0. For more details, see the associated Microsoft Knowledge Base article...

Azure File Sync Agent v17.3 Release – June 2024 (KB5039814)

Security Update for Azure File Sync agent version 17.3.0.0. For more details, see the associated Microsoft Knowledge Base article...

Azure File Sync Agent v18.1 Release – June 2024 (KB5023058)

Security Update for Azure File Sync agent version 18.1.0.0. For more details, see the associated Microsoft Knowledge Base article...

Azure File Sync Agent v18.1 Release - June 2024 (Security-only update)

None None...

Microsoft Azure File Sync Elevation of Privilege Vulnerability

...

Azure File Sync Agent v17.3 Release - June 2024 (Security-only update)

None None...

Microsoft Azure Backlink Vulnerability

Microsoft Azure is a suite of open, enterprise-grade cloud computing platforms from Microsoft Corporation USA. A backlink vulnerability exists in Microsoft Azure File Sync. An attacker could exploit the vulnerability to elevate privileges. The following products and versions are affected:Azure Fi...

KLA68916 Multiple vulnerabilities in Microsoft Azure

Multiple vulnerabilities were found in Microsoft Azure. Malicious users can exploit these vulnerabilities to cause denial of service, gain privileges, execute arbitrary code. Below is a complete list of vulnerabilities: 1. A denial of service vulnerability in Azure Storage Movement Client Library...

RHEL 8 / 9 : Red Hat Ansible Automation Platform 2.4 Product Security and Bug Fix Update (Moderate) (RHSA-2024:3781)

The remote Redhat Enterprise Linux 8 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:3781 advisory. Red Hat Ansible Automation Platform provides an enterprise framework for building, deploying and managing IT automation at scale. IT...

SUSE CVE-2024-26758

In the Linux kernel, the following vulnerability has been resolved: md: Don't ignore suspended array in mdcheckrecovery mddevsuspend never stop syncthread, hence it doesn't make sense to ignore suspended array in mdcheckrecovery, which might cause syncthread can't be unregistered. After commit...

kernel: wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work

A vulnerability was found in the Linux kernel's net rtl8xxxucore.c driver, where a race condition can lead to a use-after-free situation in the rtl8xxxustop function. This occurs when the workqueue is still running but the driver has been stopped and can lead to c2hcmdwork attempting to access...

PT-2024-27437 · Jan · Jan

Name of the Vulnerable Software and Affected Versions: Jan version 0.4.12 Description: The issue allows attackers to execute arbitrary code via uploading a crafted file to the "/v1/app/appendFileSync" interface. Recommendations: For Jan version 0.4.12, as a temporary workaround, consider disablin...

[SECURITY] Fedora 39 Update: rust-asahi-btsync-0.2.0-3.fc39

A tool to sync Bluetooth pairing keys with macos on ARM Macs...