Microsoft Releases Security Update for Azure Linux Open Management Infrastructure

This article is contributed. See the original author and article here.

(Updated, September 17)

On September 16, 2021, Microsoft released additional guidance on Open Management Infrastructure (OMI) vulnerabilities—CVE-2021-38645, CVE-2021-38649, CVE-2021-38648, and CVE-2021-38647—which impact Azure VM Management Extensions. According to Microsoft, “[c]ustomers must update vulnerable extensions for their Cloud and On-Premises deployments as the updates become available…”

CISA encourages organizations to review Additional Guidance Regarding OMI Vulnerabilities within Azure VM Management Extensions for more information and to:

• ensure automatic updates are applied 
• ensure manual updates are applied, as patches are made available
• restrict external access to Linux systems that expose OMI ports (TCP 5985, 5986, and 1270)

(Original, September 16)

Microsoft has released an update to address a remote code execution vulnerability—CVE-2021-38647—in Azure Linux Open Management Infrastructure (OMI). An attacker could use this vulnerability to take control of an affected system.

CISA encourages users and administrators to review the Microsoft Security Advisory to apply the necessary update.

Brought to you by Dr. Ware, Microsoft Office 365 Silver Partner, Charleston SC.