Linuxsecurity Critical DoS Vulnerabilities in Azure-Storage-Azcopy Fixed
Article Content
- •Four critical CVEs fixed in azure-storage-azcopy, including CVE-2026-84303 with a CVSS of 9.1.
- •Vulnerabilities allow DoS attacks via oversized inputs and memory exhaustion.
- •Patches are available for multiple SUSE and openSUSE versions as of September 11, 2026.
SUSE and openSUSE released updates for azure-storage-azcopy to address critical DoS vulnerabilities. The updates fix four CVEs, including CVE-2026-84303, which has a CVSS score of 9.1, indicating a high severity. The vulnerabilities allow for denial-of-service attacks through various means, including oversized inputs and memory exhaustion. Affected systems include multiple Public Cloud Modules and openSUSE Leap versions. The patches are available as of September 11, 2026, and users are urged to apply them immediately. The vulnerabilities were published in June and September 2026, with significant implications for system stability and security. Administrators should follow recommended installation methods to ensure their systems are secured against these threats.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (2)
Following this threat?
Track CVE-2026-41178 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Continue Reading
SUSE Helm Vulnerabilities Lead to DoS and Credential Exfiltration Risks Recent updates for SUSE Linux Micro 6.0 and mcphost address multiple vulnerabilities, including CVE-2026-41178, which allows denial-of-service (DoS) attacks through oversized inputs in baggage parsing. Additionally, CVE-2026-48978 enables malicious registries to exfiltrate credentials via hijacked Bearer tokens. The… SUSE and openSUSE Address DoS Vulnerability CVE-2026-41178 SUSE and openSUSE have released updates to address a moderate denial-of-service (DoS) vulnerability identified as CVE-2026-41178. This vulnerability affects the google-cloud-sap-agent and apptainer, allowing attackers to exploit oversized inputs due to a lack of rejection of raw-length headers in baggage parsing. The…