Msrc Cbl2 Virtiofsd 1.8.0-3 On Cbl Mariner 2.0 vulnerabilities

3 known vulnerabilities affecting msrc/cbl2_virtiofsd_1.8.0-3_on_cbl_mariner_2.0.

Total CVEs
3
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
MEDIUM3

Vulnerabilities

Page 1 of 1
CVE-2024-43806MEDIUMCVSS 6.52024-08-13
CVE-2024-43806 [MEDIUM] CWE-400 `rustix::fs::Dir` iterator with the `linux_raw` backend can cause memory explosion `rustix::fs::Dir` iterator with the `linux_raw` backend can cause memory explosion FAQ: Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most s
msrc
CVE-2023-50711MEDIUMCVSS 5.72024-01-09
CVE-2023-50711 [MEDIUM] CWE-787 `serde` deserialization for `FamStructWrapper` lacks bound checks that could potentially lead to out-of-bounds memory access `serde` deserialization for `FamStructWrapper` lacks bound checks that could potentially lead to out-of-bounds memory access FAQ: Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure
msrc
CVE-2023-41051MEDIUMCVSS 4.72023-09-12
CVE-2023-41051 [LOW] CWE-125 Default functions in VolatileMemory trait lack bounds checks in vm-memory Default functions in VolatileMemory trait lack bounds checks in vm-memory FAQ: Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the
msrc
Msrc Cbl2 Virtiofsd 1.8.0-3 On Cbl Mariner 2.0 vulnerabilities | cvebase