Description
Azure Storage Library Information Disclosure Vulnerability
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Microsoft | Azure Storage Blobs client library for .NET | 12.0.0 – < 12.13.0 | 12.13.0 |
| Microsoft | Azure Storage Queues client library for .NET | 12.0.0 – < 12.13.0 | 12.13.0 |
| Microsoft | Azure Storage Blobs client library for Java | 12.0.0 – < 12.18.0 | 12.18.0 |
| Microsoft | Azure Storage Queues client library for Python | 12.0.0 – < 12.4.0 | 12.4.0 |
| Microsoft | Azure Storage Blobs client library for Python | 12.0.0 – < 12.13.0 | 12.13.0 |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 22.04 LTS | python-azure | No fix yet | — |
| Ubuntu 20.04 LTS | python-azure-storage | No fix yet | — |
| Ubuntu 18.04 LTS | python-azure-storage | No fix yet | — |
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 15 SP5 | python-azure-core | 1.23.1-150100.3.13.1 | SUSE-SU-2023:2897-1 |
| SLES 15 SP5 | python-azure-storage-blob | 12.13.1-150100.3.10.1 | SUSE-SU-2023:2897-1 |
| SLES 15 SP4 | python-azure-core | 1.23.1-150100.3.13.1 | SUSE-SU-2023:2897-1 |
| SLES 15 SP4 | python-azure-storage-blob | 12.13.1-150100.3.10.1 | SUSE-SU-2023:2897-1 |
| SLES 15 SP3 | python-azure-core | 1.23.1-150100.3.13.1 | SUSE-SU-2023:2897-1 |
| SLES 15 SP3 | python-azure-storage-blob | 12.13.1-150100.3.10.1 | SUSE-SU-2023:2897-1 |
| SLES 15 SP3 | python-typing_extensions | 3.10.0.0-150100.3.5.1 | SUSE-SU-2023:2897-1 |
| SLES 15 SP2 | python-azure-core | 1.23.1-150100.3.13.1 | SUSE-SU-2023:2897-1 |
| SLES 15 SP2 | python-azure-storage-blob | 12.13.1-150100.3.10.1 | SUSE-SU-2023:2897-1 |
| SLES 15 SP2 | python-azure-storage-queue | 12.4.0-150100.3.7.1 | SUSE-SU-2023:4609-1 |
| SLES 15 SP2 | python-typing_extensions | 3.10.0.0-150100.3.5.1 | SUSE-SU-2023:2897-1 |
| SLES 15 SP1 | python-azure-core | 1.23.1-150100.3.13.1 | SUSE-SU-2023:2897-1 |
| SLES 15 SP1 | python-azure-storage-blob | 12.13.1-150100.3.10.1 | SUSE-SU-2023:2897-1 |
| SLES 15 SP1 | python-azure-storage-queue | 12.4.0-150100.3.7.1 | SUSE-SU-2023:4609-1 |
| SLES 15 SP1 | python-typing_extensions | 3.10.0.0-150100.3.5.1 | SUSE-SU-2023:2897-1 |
Show 1 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 12 | python-azure-core | 1.23.1-2.12.8 | SUSE-SU-2024:1670-1 |
| SLES 12 | python-azure-storage-blob | 12.13.1-2.10.8 | SUSE-SU-2024:1670-1 |
| SLES 12 | python-azure-storage-queue | 12.4.0-2.10.8 | SUSE-SU-2024:1670-1 |
| SLES 12 | python-typing_extensions | 3.10.0.0-2.6.1 | SUSE-SU-2024:1670-1 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | python-azure-storage-blob | 12.24.1-1.1 | openSUSE-SU-2025:14690-1 |
| openSUSE Tumbleweed | python-azure-storage-queue | 12.18.0-1.1 | openSUSE-SU-2026:11944-1 |
| openSUSE Leap 15.5 | python-azure-core | 1.23.1-150100.3.13.1 | SUSE-SU-2023:2897-1 |
| openSUSE Leap 15.5 | python-azure-storage-blob | 12.13.1-150100.3.10.1 | SUSE-SU-2023:2897-1 |
| openSUSE Leap 15.4 | python-azure-core | 1.23.1-150100.3.13.1 | SUSE-SU-2023:2897-1 |
| openSUSE Leap 15.4 | python-azure-storage-blob | 12.13.1-150100.3.10.1 | SUSE-SU-2023:2897-1 |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Maven | com.azure:azure-storage-blob | < 12.18.0 | 12.18.0 | GHSA-64x4-9hc6-r2h6 |
| NuGet | Azure.Storage.Blobs | < 12.13.0 | 12.13.0 | GHSA-64x4-9hc6-r2h6 |
| NuGet | Azure.Storage.Queues | < 12.11.0 | 12.11.0 | GHSA-64x4-9hc6-r2h6 |
| PyPI | azure-storage-blob | < 12.13.0 | 12.13.0 | PYSEC-2026-784 |
| PyPI | azure-storage-queue | < 12.4.0 | 12.4.0 | PYSEC-2026-2388 |
Advisories 8
- openSUSE-SU-2026:11944-1 python313-azure-storage-queue-12.18.0-1.1 on GA media SUSE / openSUSE Security Updates · Oct 2, 2026
- openSUSE-SU-2025:14690-1 python311-azure-storage-blob-12.24.1-1.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2024:1670-1 Security update for python-azure-core, python-azure-storage-blob, python-azure-storage-queue, python-typing, python-typing_extensions SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2023:4609-1 Security update for python-azure-storage-queue SUSE / openSUSE Security Updates · Feb 4, 2026
- WID-SEC-2022-2133 JFrog Artifactory: Mehrere Schwachstellen in Drittanbieter-Komponenten BSI CERT-Bund (WID) · Nov 18, 2025
- SUSE-SU-2023:2897-1 Security update for python-azure-core, python-azure-storage-blob SUSE / openSUSE Security Updates · May 2, 2025
- WID-SEC-2022-0654 Microsoft Azure Site Recovery und Azure Storage: Mehrere Schwachstellen BSI CERT-Bund (WID) · Feb 27, 2024
- MSRC-CVE-2022-30187 Azure Storage Library Information Disclosure Vulnerability Microsoft Security Response Center · Jul 12, 2022
References
- Azure Storage Library Information Disclosure Vulnerability vendor-advisory