Microsoft is warning customers that some Azure installations are vulnerable to a critical critical Linux Exim mail server flaw that is under active attack. Microsoft is urging users to patch every Exim installation in their organization and make sure that they are updated to the most recent version, Exim version 4.92. Microsoft for its part said that while it offers partial mitigation, vulnerable systems are still impacted if an attacker s IP address is permitted through Network Security Groups. Researchers said that currently more than 3.5 million servers are at risk from the attacks, which are using a wormable exploit.
Source: https://threatpost.com/microsoft-pushes-azure-users-to-patch-linux-systems/145749/