AZL-113570

See a problem?
Import Source
https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-113570.json
JSON Data
https://api.osv.dev/v1/vulns/AZL-113570
Upstream
  • CVE-2026-122056
Published
2026-11-09T22:18:34Z
Modified
2026-11-14T05:30:17Z
Summary
CVE-2026-122056 affecting package openscap 1.3.9-1
Details

A flaw was found in OpenSCAP. A heap-based buffer overflow can occur when processing a specially crafted Extensible Configuration Checklist Description Format (XCCDF) document using the sds-compose option. An attacker could exploit this vulnerability to corrupt memory, resulting in an application crash and a Denial of Service (DoS).

References

Affected packages

Azure Linux:3 / openscap

Package

Name
openscap
Purl
pkg:rpm/azure-linux/openscap

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Last Affected
1.3.9-1

Database specific

source
"https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-113570.json"