Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

debian логотип

CVE-2024-27099

Опубликовано: 27 фев. 2024
Источник: debian
EPSS Низкий

Описание

The uAMQP is a C library for AMQP 1.0 communication to Azure Cloud Services. When processing an incorrect `AMQP_VALUE` failed state, may cause a double free problem. This may cause a RCE. Update submodule with commit 2ca42b6e4e098af2d17e487814a91d05f6ae4987.

Пакеты

ПакетСтатусВерсия исправленияРелизТип
azure-uamqp-pythonfixed1.6.8-2package
azure-uamqp-pythonno-dsabookwormpackage
azure-uamqp-pythonno-dsabullseyepackage

Примечания

  • https://github.com/Azure/azure-uamqp-c/security/advisories/GHSA-6rh4-fj44-v4jj

  • https://github.com/Azure/azure-uamqp-c/commit/2ca42b6e4e098af2d17e487814a91d05f6ae4987

EPSS

Процентиль: 81%
0.01498
Низкий

Связанные уязвимости

CVSS3: 9.8
ubuntu
почти 2 года назад

The uAMQP is a C library for AMQP 1.0 communication to Azure Cloud Services. When processing an incorrect `AMQP_VALUE` failed state, may cause a double free problem. This may cause a RCE. Update submodule with commit 2ca42b6e4e098af2d17e487814a91d05f6ae4987.

CVSS3: 6
redhat
почти 2 года назад

The uAMQP is a C library for AMQP 1.0 communication to Azure Cloud Services. When processing an incorrect `AMQP_VALUE` failed state, may cause a double free problem. This may cause a RCE. Update submodule with commit 2ca42b6e4e098af2d17e487814a91d05f6ae4987.

CVSS3: 9.8
nvd
почти 2 года назад

The uAMQP is a C library for AMQP 1.0 communication to Azure Cloud Services. When processing an incorrect `AMQP_VALUE` failed state, may cause a double free problem. This may cause a RCE. Update submodule with commit 2ca42b6e4e098af2d17e487814a91d05f6ae4987.

CVSS3: 9.8
msrc
больше 1 года назад

Описание отсутствует

suse-cvrf
почти 2 года назад

Security update for python-uamqp

EPSS

Процентиль: 81%
0.01498
Низкий