Msrc Azl3 Php 8.3.12-1 On Azure Linux 3.0 vulnerabilities

CVE-2024-11236 [CRITICAL] CWE-787 Integer overflow in the firebird and dblib quoters causing OOB writes Integer overflow in the firebird and dblib quoters causing OOB writes FAQ: Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the op

CVE-2024-8932 [CRITICAL] CWE-787 OOB access in ldap_escape OOB access in ldap_escape FAQ: Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transpar

CVE-2024-11233 [MEDIUM] CWE-122 Single byte overread with convert.quoted-printable-decode filter Single byte overread with convert.quoted-printable-decode filter FAQ: Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source li

CVE-2024-11234 [MEDIUM] CWE-20 Configuring a proxy in a stream context might allow for CRLF injection in URIs Configuring a proxy in a stream context might allow for CRLF injection in URIs FAQ: Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure ver

CVE-2024-8929 [MEDIUM] CWE-200 Leak partial content of the heap through heap buffer over-read in mysqlnd Leak partial content of the heap through heap buffer over-read in mysqlnd FAQ: Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of t

CVE-2024-8927 [HIGH] cgi.force_redirect configuration is bypassable due to the environment variable collision cgi.force_redirect configuration is bypassable due to the environment variable collision FAQ: Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most

CVE-2024-8925 [LOW] Erroneous parsing of multipart form data Erroneous parsing of multipart form data FAQ: Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is comm

CVE-2024-9026 [LOW] CWE-158 PHP-FPM logs from children may be altered PHP-FPM logs from children may be altered FAQ: Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microso

CVE-2024-2756 [MEDIUM] CWE-20 __Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix __Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix FAQ: Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source li