Msrc Azl3 Php 8.3.14-1 On Azure Linux 3.0 vulnerabilities

CVE-2025-1861 [MEDIUM] CWE-131 Stream HTTP wrapper truncates redirect location to 1024 bytes Stream HTTP wrapper truncates redirect location to 1024 bytes FAQ: Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries

CVE-2025-1736 [MEDIUM] CWE-20 Stream HTTP wrapper header check might omit basic auth header Stream HTTP wrapper header check might omit basic auth header FAQ: Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries

CVE-2025-1219 [MEDIUM] CWE-1116 libxml streams use wrong content-type header when requesting a redirected resource libxml streams use wrong content-type header when requesting a redirected resource FAQ: Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most s

CVE-2025-1734 [MEDIUM] CWE-20 Streams HTTP wrapper does not fail for headers with invalid name and no colon Streams HTTP wrapper does not fail for headers with invalid name and no colon FAQ: Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versio

CVE-2025-1217 [MEDIUM] CWE-20 Header parser of http stream wrapper does not handle folded headers Header parser of http stream wrapper does not handle folded headers FAQ: Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open sourc

CVE-2024-11236 [CRITICAL] CWE-787 Integer overflow in the firebird and dblib quoters causing OOB writes Integer overflow in the firebird and dblib quoters causing OOB writes FAQ: Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the op

CVE-2024-8932 [CRITICAL] CWE-787 OOB access in ldap_escape OOB access in ldap_escape FAQ: Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transpar

CVE-2024-11233 [MEDIUM] CWE-122 Single byte overread with convert.quoted-printable-decode filter Single byte overread with convert.quoted-printable-decode filter FAQ: Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source li

CVE-2024-11234 [MEDIUM] CWE-20 Configuring a proxy in a stream context might allow for CRLF injection in URIs Configuring a proxy in a stream context might allow for CRLF injection in URIs FAQ: Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure ver

CVE-2024-8929 [MEDIUM] CWE-200 Leak partial content of the heap through heap buffer over-read in mysqlnd Leak partial content of the heap through heap buffer over-read in mysqlnd FAQ: Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of t