Msrc Cbl2 Libarchive 3.6.1-1 On Cbl Mariner 2.0 vulnerabilities

1 known vulnerability affecting msrc/cbl2_libarchive_3.6.1-1_on_cbl_mariner_2.0.

Total CVEs

1

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

MEDIUM1

Vulnerabilities

Page 1 of 1

CVE-2022-26280MEDIUMCVSS 6.52022-03-08

CVE-2022-26280 [MEDIUM] CWE-125 Libarchive v3.6.0 was discovered to contain an out-of-bounds read via the component zipx_lzma_alone_init. Libarchive v3.6.0 was discovered to contain an out-of-bounds read via the component zipx_lzma_alone_init. FAQ: Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep