CVE-2024-6150

A non-admin user can cause short-term disruption in Target VM availability in Citrix Provisioning...

CVE-2024-6150

CVE-2024-6150 affects Citrix Provisioning. A non-admin user can cause short-term disruption of Target VM availability via Citrix Provisioning. Root cause per Citrix bulletin is improper access control. Mitigation: upgrade Citrix Provisioning to CR 2402+ or LTSR CU5 (2203 LTSR) / CU9 (1912 LTSR). ...

Microsoft Azure Network Watcher VM Extension Installed (Windows)

Binary data microsoftazurenetworkwatcherwininstalled.nbin...

Citrix Systems Provisioning Security Vulnerability

Citrix Systems Provisioning is a software streaming technology push technology from Citrix Systems, Inc. It is used to deliver patches, updates, and other configuration information to multiple virtual desktop endpoints via a shared desktop image. A security vulnerability exists in versions prior ...

Microsoft Azure Network Watcher VM Extension < 1.4.3320.1 Elevation of Privilege (CVE-2024-35261)

The version of Microsoft Azure Network Watcher VM Extension installed on the remote Windows host is prior to 1.4.3320.1. It is, therefore, affected by an unspecified elevation of privilege vulnerability. Note that Nessus has not tested for these issues but has instead relied only on the...

CVE-2024-6222

Docker Desktop prior to v4.29.0 is affected: a container breakout can escape to the host via extension- and dashboard-related IPC messages. Vulnerability details show the issue exists in Docker Desktop with Hyper-V backend on MacOS, Linux, and Windows. Remediation per the sources includes fixing ...

CVE-2024-6222 In Docker Desktop before v4.29.0 an attacker who has gained access to the Docker Desktop VM through a container breakout can further escape to the host by passing extensions and dashboard related IPC messages

In Docker Desktop before v4.29.0, an attacker who has gained access to the Docker Desktop VM through a container breakout can further escape to the host by passing extensions and dashboard related IPC messages. Docker Desktop v4.29.0 https://docs.docker.com/desktop/release-notes/4290 fixes the...

CVE-2024-35261

Azure Network Watcher VM Extension Elevation of Privilege Vulnerability...

CVE-2024-35261

Azure Network Watcher VM Extension Elevation of Privilege Vulnerability...

CVE-2024-35261 Azure Network Watcher VM Extension Elevation of Privilege Vulnerability

...

CVE-2024-35261

CVE-2024-35261 affects Microsoft Azure Network Watcher VM Extension. Public sources indicate the Windows VM Extension is vulnerable when installed below version 1.4.3422.1, with a local elevation-of-privilege flaw that could grant high-impact access (confidentiality, integrity, and availability) ...

CVE-2024-35261 Azure Network Watcher VM Extension Elevation of Privilege Vulnerability

...

PT-2024-4982 · Microsoft · Azure Network Watcher Vm Extension

Name of the Vulnerable Software and Affected Versions: Azure Network Watcher VM Extension versions affected versions not specified Description: The issue is related to an elevation of privilege vulnerability in the Azure Network Watcher VM Extension for Windows, caused by incorrect linking before...

Static IP loss when updating to VM Tools for Windows 9.3.3 or earlier

Sometimes, when the drivers for XenServer VM Tools for Windows are updated through Windows Update, the static IP settings are lost and the network settings change to use DHCP. Important: This issue persists when updating from versions earlier than 9.3.3. This issue is fixed for updates from 9.3.3...

Mageia: Security Advisory (MGASA-2024-0232)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Updated virtualbox & kmod-virtualbox packages fix security vulnerabilities

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. Supported versions that are affected are Prior to 7.0.16. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise...

MGASA-2024-0232 Updated virtualbox & kmod-virtualbox packages fix security vulnerabilities

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. Supported versions that are affected are Prior to 7.0.16. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise...

SUSE CVE-2023-52883

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix possible null pointer dereference abo-tbo.resource may be NULL in amdgpuvmboupdate...

KLA70468 DoS vulnerabilities in Oracle VirtualBox

An unspecified vulnerabilities were found in Oracle VirtualBox. None of these vulnerabilities may be remotely exploitable without authentication, i.e., none may be exploited over a network without requiring user credentials. Original advisories Oracle Critical Patch Update Advisory – July 2024...

cockpit-machines bug fix update

An update is available for cockpit-machines. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Cockpit component for managing virtual machines. If "virt-install" i...