Microsoft Azure Connected Machine Agent Stack-Based Buffer Overflow Vulnerability Allowing Privilege Escalation

A stack-based buffer overflow vulnerability has been identified in the Azure Connected Machine Agent. This vulnerability allows an authorized attacker to locally elevate privileges. The issue arises from the agent's handling of data, which can be exploited to overwrite memory and execute arbitrary code with elevated rights.

Impact

Exploitation of this vulnerability could lead to unauthorized privilege escalation, allowing an attacker to gain SYSTEM privileges.

Remediation

Users can download the latest version of the Azure Connected Machine Agent for Windows via the Windows Update service or directly from the Microsoft Update Catalog. For Linux, instructions are available on the Microsoft Learn website.