.NET Denial of Service Vulnerability
CVE-2026-120796
Summary
Mariner
Products covered
azl3 containerd2 0.0.0-1 on Azure Linux 3.0
azl3 cert-manager 1.12.15-6 on Azure Linux 3.0
azl3 containerized-data-importer 1.62.0-3 on Azure Linux 3.0
azl3 cri-tools 1.32.0-4 on Azure Linux 3.0
azl3 docker-buildx 0.14.0-11 on Azure Linux 3.0
azl3 docker-compose 2.27.0-9 on Azure Linux 3.0
azl3 keda 2.14.1-11 on Azure Linux 3.0
azl3 kubernetes 1.30.10-23 on Azure Linux 3.0
Show 3 more products
azl3 kubevirt 1.7.1-2 on Azure Linux 3.0
azl3 kured 1.15.0-3 on Azure Linux 3.0
azl3 moby-containerd-cc 1.7.7-11 on Azure Linux 3.0
Remediation
CBL-Mariner Releases
Vendor-listed fixes
2.0.0-19
1.12.15-7
1.62.0-4
1.32.0-5
0.14.0-12
2.27.0-10
2.14.1-12
1.30.10-23
Show 3 more fixes
1.7.1-3
1.15.0-4
1.7.7-12
CVEs in this advisory 1
Update history
What changed in later vendor updates
SecurityAlert records field-level changes from the point we begin following a bulletin. Earlier vendor changes may not have a field-by-field record.
- Added affected products: azl3 cert-manager 1.12.15-6 on Azure Linux 3.0, azl3 containerized-data-importer 1.62.0-3 on Azure Linux 3.0, azl3 cri-tools 1.32.0-4 on Azure Linux 3.0, azl3 docker-buildx 0.14.0-11 on Azure Linux 3.0, azl3....
- Added fixed versions: 0.14.0-12, 1.7.1-3, 1.7.7-12, 1.12.15-7, 1.15.0-4.
Updates
- Published by Microsoft Security Response Center
The publication date reported by the vendor.
- Updated by Microsoft Security Response Center
The vendor changed the advisory after it was first published.
- Added to SecurityAlert
We collected the advisory from the official source.
- Confirmed at the source
Our collector saw this advisory during a later source check.