Azure Users Running Linux VMs Told To Update Instantly

Share post:

Azure users who currently run Linux virtual machines may not be aware that they have a very vulnerable Microsoft management software installed on their machine that can be easily exploited remotely.

As described by, which has identified four vulnerabilities in Microsoft’s Open Management Infrastructure (OMI) project, an attacker is able to have root access to a remote machine when sending a single packet with the deleted authentication header.

“This is a textbook RCE vulnerability that you would expect to see in the ’90s — it’s highly unusual to have one crop up in 2021 that can expose millions of endpoints,” wrote Wiz security expert Nir Ohfeld.

As Ohfeld describes, the problem for users is that OMI is quietly installed when users install log collection, has no public documentation and runs with root privileges. Wiz found that over 65% of Azure users running Linux were vulnerable.

In its advisory published today on the four CVEs – CVE-2021-38647 rated at 9.8, CVE-2021-38648 rated at 7.8, CVE-2021-38645 rated at 7.8 and CVE-2021-38649 rated at 7.0 – Microsoft explained that fixing the vulnerabilities was set out in its OMI code on August 11 to give partners time to update before specifying the issues.

Users should use OMI version, where Microsoft instructs users to download OMI updates from their repositories if the machines are not yet updated.

Microsoft’s latest Patch released on Tuesday addresses these vulnerabilities, known as OMIGOD.

For more information, read the original story in ZDNet.

Featured Tech Jobs


Related articles

Google Play introduces new biometric verification with a user warning

Google has recently announced updates to the biometric verification process for Google Play purchases, aiming to bolster security...

Cyber Security Today, Week in Review for week ending Friday April 19, 2024

On this episode Jen Ellis, co-chair of the Ransomware Task Force, talks about ways of fighting one of the biggest cyber threats to IT d

Cyber Security Today, April 19, 2024 – Police bust phishing rental platform, a nine-year old virus found on Ukrainian computers, and more

This episode reports on a threat actor targeting governments in the Middle East with a novel way of hiding malware is going international

Controversial expansion of US surveillance powers nears Senate vote

The US Senate is poised to vote on a significant expansion of Section 702 of the Foreign Intelligence...

Become a member

New, Relevant Tech Stories. Our article selection is done by industry professionals. Our writers summarize them to give you the key takeaways