Msrc Cbl2 Php On Cbl Mariner 2.0 vulnerabilities

CVE-2022-31629 [MEDIUM] CWE-20 $_COOKIE names string replacement (. -> _): cookie integrity vulnerabilities $_COOKIE names string replacement (. -> _): cookie integrity vulnerabilities FAQ: Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure version

CVE-2022-31628 [LOW] CWE-674 phar wrapper can occur dos when using quine gzip file phar wrapper can occur dos when using quine gzip file FAQ: Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the di

CVE-2022-31625 [HIGH] CWE-590 Freeing unallocated memory in php_pgsql_free_params() Freeing unallocated memory in php_pgsql_free_params() FAQ: Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the d

CVE-2022-31626 [HIGH] CWE-120 mysqlnd/pdo password buffer overflow mysqlnd/pdo password buffer overflow FAQ: Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is co

CVE-2021-21708 [HIGH] CWE-416 UAF due to php_filter_float() failing UAF due to php_filter_float() failing FAQ: Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is

CVE-2021-21707 [MEDIUM] CWE-159 Special characters break path parsing in XML functions Special characters break path parsing in XML functions FAQ: Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which t

CVE-2021-21703 [HIGH] CWE-787 PHP-FPM memory access in root process leading to privilege escalation PHP-FPM memory access in root process leading to privilege escalation FAQ: Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open s

CVE-2021-21705 [MEDIUM] CWE-20 Incorrect URL validation in FILTER_VALIDATE_URL Incorrect URL validation in FILTER_VALIDATE_URL FAQ: Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is co

CVE-2021-21704 [MEDIUM] CWE-125 Multiple vulnerabilities in Firebird client extension Multiple vulnerabilities in Firebird client extension FAQ: Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the

CVE-2021-21702 [MEDIUM] CWE-476 Null Dereference in SoapClient Null Dereference in SoapClient FAQ: Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to