CVE-2019-1372 Memory corruption in Azure App Service on Azure Stack
Remote attackers can execute arbitrary code with system privileges by exploiting a buffer overflow in Azure App Service on Azure Stack.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2019-1372?
CVE-2019-1372 is a critical memory corruption vulnerability in Microsoft Azure App Service on Azure Stack, published on 10 Oct 2019. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
An remote code execution vulnerability exists when Azure App Service/ Antares on Azure Stack fails to check the length of a buffer prior to copying memory to it.An attacker who successfully exploited this vulnerability could allow an unprivileged function run by the user to execute code in the context of NT AUTHORITY\system thereby escaping the Sandbox.The security update addresses the vulnerability by ensuring that Azure App Service sanitizes user inputs., aka 'Azure App Service Remote Code Execution Vulnerability'.
Which versions are affected by CVE-2019-1372?
It affects 1 product.
Products include Microsoft Azure App Service on Azure Stack.
How do I fix CVE-2019-1372?
No fix has been published for CVE-2019-1372 yet. Limit exposure of the affected software until one is available.
Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.
Is CVE-2019-1372 being exploited?
There is no known exploitation of CVE-2019-1372 in the wild and no public exploit code.
Other vulnerabilities in Microsoft Azure App Service on Azure Stack
Sources
Also known as GHSA-649f-8c3w-9g8g.