AZL-105705

See a problem?

Import Source

https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-105705.json

JSON Data

https://api.osv.dev/v1/vulns/AZL-105705

Upstream

CVE-2026-73064

Published

2026-09-24T15:17:34Z

Modified

2026-10-05T05:34:30Z

Summary

CVE-2026-73064 affecting package qemu 10.1.0-1

Details

In Mbed TLS 3.2.0 though 3.6.6 and 4.0.0 through 4.1.0, an attacker who can cause an entropy source to fail can remove or inject bytes into the start of the TLS stream. This only affects TLS 1.3 servers.

References

https://nvd.nist.gov/vuln/detail/CVE-2026-73064

Affected packages

Azure Linux:3 / qemu

Package

Name: qemu
Purl: pkg:rpm/azure-linux/qemu

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Last Affected

10.1.0-1

Database specific

source

"https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-105705.json"