Search threats, CVEs… ⌘K
Vendor advisories

Security advisories from the vendors you use.

Search new and updated bulletins from Microsoft, Citrix, Cisco, Palo Alto Networks, Fortinet, Ivanti, Delinea, Ubuntu, and AWS. We keep each vendor's advisory ID, affected products, CVEs, severity, dates, and available fix guidance together.

Set up product alerts Follow the RSS feed
11Vendor sources
18,531Advisories collected
6,564Published or updated in 30 days
8,312Marked critical or high
Coverage

Connected directly to official vendor sources

The original vendor bulletin remains the authority. SecurityAlert gives you one place to find it and compare the details vendors publish in different formats.

18,531 advisories

Each date says whether the vendor published or updated the bulletin. A vendor bulletin describes products that may be affected. It does not prove that the vulnerable product or version is installed in your environment.

RSS for these results
Microsoft Security Response CenterCVE-2024-42069
MediumCVSS 5.5

net: mana: Fix possible double free in error handling path

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.43.1-7 on Azure Linux 3.0, azl3 kernel 6.6.35.1-5 on Azure Linux 3.0
Fixed versions6.6.43.1-7
Vendor guidance

CBL-Mariner Releases

CVE-2024-42069
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-50062
MediumCVSS 5.5

RDMA/rtrs-srv: Avoid null pointer deref during path establishment

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.173.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.57.1-1 on Azure Linux 3.0, cbl2 kernel 5.15.167.1-2 on CBL Mariner 2.0, cbl2 kernel 5.15.167.1-2 on CBL-Mariner 2.0
Fixed versions5.15.173.1-1, 6.6.57.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-50062
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-27982
MediumCVSS 6.5

The team has identified a critical vulnerability in the http server of the most recent version of Node where malformed headers can lead to HTTP request smuggling. Specifically if a space is placed before a content-length header it is not interpreted correctly enabling attackers to smuggle in a second request within the body of the first.

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 nodejs18 18.20.2-1 on CBL Mariner 2.0, azl3 nodejs 20.14.0-1 on Azure Linux 3.0, cbl2 nodejs18 18.18.2-7 on CBL-Mariner 2.0, azl3 nodejs 20.10.0-2 on Azure Linux 3.0
Fixed versions18.20.2-1, 20.14.0-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-27982
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-31449
HighCVSS 7.0

Lua library commands may lead to stack overflow and RCE in Redis

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 redis 6.2.14-3 on CBL Mariner 2.0, azl3 valkey 8.0.1-1 on Azure Linux 3.0, cbl2 redis 6.2.14-2 on CBL Mariner 2.0, cbl2 redis 6.2.14-2 on CBL-Mariner 2.0
Fixed versions6.2.14-3, 8.0.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-31449
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2022-29654
MediumCVSS 5.5

Buffer overflow vulnerability in quote_for_pmake in asm/nasm.c in nasm before 2.15.05 allows attackers to cause a denial of service via crafted file.

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 tensorflow 2.11.1-2 on CBL-Mariner 2.0, azl3 tensorflow 2.16.1-9 on Azure Linux 3.0, cbl2 tensorflow 2.11.1-2 on CBL Mariner 2.0
CVE-2022-29654
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-43889
MediumCVSS 5.5

padata: Fix possible divide-by-0 panic in padata_mt_helper()

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.167.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.164.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.164.1-1 on CBL-Mariner 2.0
Fixed versions5.15.167.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-43889
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-24576
CriticalCVSS 10.0

Rusts's `std::process::Command` did not properly escape arguments of batch files on Windows

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 rust 1.75.0-14 on Azure Linux 3.0, cbl2 rust 1.72.0-10 on CBL Mariner 2.0, azl3 rust 1.86.0-1 on Azure Linux 3.0, cbl2 rust 1.72.0-10 on CBL-Mariner 2.0
CVE-2024-24576
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-42064
MediumCVSS 5.5

drm/amd/display: Skip pipe if the pipe idx not set properly

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.96.2-1 on Azure Linux 3.0, azl3 kernel 6.6.96.2-2 on Azure Linux 3.0, azl3 kernel 6.6.112.1-2 on Azure Linux 3.0, azl3 kernel 6.6.117.1-1 on Azure Linux 3.0
CVE-2024-42064
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-47678
MediumCVSS 9.4

icmp: change the order of rate limits

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.56.1-5 on Azure Linux 3.0, azl3 kernel 6.6.51.1-5 on Azure Linux 3.0
Fixed versions6.6.56.1-5
Vendor guidance

CBL-Mariner Releases

CVE-2024-47678
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-44934
HighCVSS 7.8

net: bridge: mcast: wait for previous gc cycles when removing port

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.167.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.164.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.164.1-1 on CBL-Mariner 2.0
Fixed versions5.15.167.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-44934
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-47191
HighCVSS 7.1

pam_oath.so in oath-toolkit 2.6.7 through 2.6.11 before 2.6.12 allows root privilege escalation because in the context of PAM code running as root it mishandles usersfile access such as by calling fchown in the presence of a symlink.

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 oath-toolkit 2.6.9-2 on Azure Linux 3.0, cbl2 oath-toolkit 2.6.7-3 on CBL Mariner 2.0, cbl2 oath-toolkit 2.6.7-3 on CBL-Mariner 2.0
Fixed versions2.6.9-2, 2.6.7-3
Vendor guidance

CBL-Mariner Releases

CVE-2024-47191
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-42070
MediumCVSS 5.5

netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.162.2-1 on CBL Mariner 2.0, azl3 kernel 6.6.43.1-7 on Azure Linux 3.0, azl3 kernel 6.6.35.1-5 on Azure Linux 3.0, cbl2 kernel 5.15.160.1-1 on CBL Mariner 2.0
Fixed versions5.15.162.2-1, 6.6.43.1-7
Vendor guidance

CBL-Mariner Releases

CVE-2024-42070
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-43906
MediumCVSS 5.5

drm/admgpu: fix dereferencing null pointer context

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.186.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.200.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.202.1-1 on CBL-Mariner 2.0
CVE-2024-43906
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2023-29941
MediumCVSS 5.5

llvm-project commit a0138390 was discovered to contain a segmentation fault via the component matchAndRewriteSortOp(mlir::sparse_tensor::SortOp.

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 llvm16 16.0.0-4 on CBL Mariner 2.0, cbl2 clang16 16.0.0-2 on CBL Mariner 2.0, azl3 tensorflow 2.16.1-1 on Azure Linux 3.0, azl3 tensorflow 2.11.1-1 on Azure Linux 3.0
Fixed versions16.0.0-4, 16.0.0-2, 2.16.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2023-29941
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-43908
MediumCVSS 5.5

drm/amdgpu: Fix the null pointer dereference to ras_manager

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.167.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.164.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.164.1-1 on CBL-Mariner 2.0
Fixed versions5.15.167.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-43908
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-42228
HighCVSS 7.0

drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.167.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.43.1-7 on Azure Linux 3.0, cbl2 kernel 5.15.180.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.35.1-5 on Azure Linux 3.0
Fixed versions5.15.167.1-1, 6.6.43.1-7
Vendor guidance

CBL-Mariner Releases

CVE-2024-42228
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-49856
Medium

x86/sgx: Fix deadlock in SGX NUMA node search

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.173.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.56.1-5 on Azure Linux 3.0, cbl2 kernel 5.15.167.1-2 on CBL-Mariner 2.0, cbl2 kernel 5.15.167.1-2 on CBL Mariner 2.0
Fixed versions5.15.173.1-1, 6.6.56.1-5
Vendor guidance

CBL-Mariner Releases

CVE-2024-49856
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-42114
MediumCVSS 4.4

wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.167.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.164.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.164.1-1 on CBL-Mariner 2.0
Fixed versions5.15.167.1-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-42114
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-42077
MediumCVSS 5.5

ocfs2: fix DIO failure due to insufficient transaction credits

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.162.2-1 on CBL Mariner 2.0, azl3 kernel 6.6.43.1-7 on Azure Linux 3.0, cbl2 kernel 5.15.160.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.35.1-5 on Azure Linux 3.0
Fixed versions5.15.162.2-1, 6.6.43.1-7
Vendor guidance

CBL-Mariner Releases

CVE-2024-42077
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-9355
MediumCVSS 6.5

Golang-fips: golang fips zeroed buffer

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 golang 1.22.9-1 on Azure Linux 3.0, azl3 golang 1.22.7-3 on Azure Linux 3.0
Fixed versions1.22.9-1
Vendor guidance

CBL-Mariner Releases

CVE-2024-9355
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-47685
CriticalCVSS 9.1

netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.173.1-1 on CBL Mariner 2.0, azl3 kernel 6.6.56.1-5 on Azure Linux 3.0, cbl2 kernel 5.15.167.1-2 on CBL Mariner 2.0, cbl2 kernel 5.15.167.1-2 on CBL-Mariner 2.0
Fixed versions5.15.173.1-1, 6.6.56.1-5
Vendor guidance

CBL-Mariner Releases

CVE-2024-47685
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-44942
HighCVSS 7.8

f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.182.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.182.1-1 on CBL-Mariner 2.0
CVE-2024-44942
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-42080
MediumCVSS 5.5

RDMA/restrack: Fix potential invalid address access

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productscbl2 kernel 5.15.162.2-1 on CBL Mariner 2.0, azl3 kernel 6.6.43.1-7 on Azure Linux 3.0, cbl2 kernel 5.15.160.1-1 on CBL Mariner 2.0, cbl2 kernel 5.15.160.1-1 on CBL-Mariner 2.0
Fixed versions5.15.162.2-1, 6.6.43.1-7
Vendor guidance

CBL-Mariner Releases

CVE-2024-42080
Read the vendor advisory Watch this product
Microsoft Security Response CenterCVE-2024-47728
MediumCVSS 5.5

bpf: Zero former ARG_PTR_TO_{LONGINT} args in case of error

Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the mos...

Affected productsazl3 kernel 6.6.56.1-5 on Azure Linux 3.0, azl3 kernel 6.6.51.1-5 on Azure Linux 3.0
Fixed versions6.6.56.1-5
Vendor guidance

CBL-Mariner Releases

CVE-2024-47728
Read the vendor advisory Watch this product
Before you act

Start with the vendor's bulletin.

We normalize the fields that vendors publish so you can search and compare advisories in one place. We do not replace the original bulletin or turn a product-name match into proof that a system is vulnerable.

Confirm the installed product and version, read the linked vendor guidance, and test the recommended update or mitigation through your normal change process.

How we check our sources