CVE-2019-0804 An information disclosure vulnerability exists in the way Azure WaLinuxAgent creates swap files on resource disks, aka 'Azure Linux Agent Information Disclosure Vulnerability'.
MediumCVSS 6.5
EPSS 5.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
An information disclosure vulnerability exists in the way Azure WaLinuxAgent creates swap files on resource disks, aka 'Azure Linux Agent Information Disclosure Vulnerability'.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/waagent(Debian:12) | < 2.2.34-3 | 2.2.34-3 |
| debian/waagent(Debian:13) | < 2.2.34-3 | 2.2.34-3 |
| debian/waagent(Debian:14) | < 2.2.34-3 | 2.2.34-3 |
| Microsoft walinuxagent | < 2.2.38 | 2.2.38 |
| Microsoft Azure | = multiple | No fix listed |
References
- Debian Security Tracker CVE-2019-0804 vendor-advisory
- openSUSE-SU-2020:0261 vendor-advisory
- RHSA-2019:1527 vendor-advisory
- portal.msrc.microsoft.com mitigation patch vendor-advisory