CVE-2024-27099

Опубликовано: 27 фев. 2024

Источник: nvd

CVSS3: 9.8

EPSS Низкий

Описание

The uAMQP is a C library for AMQP 1.0 communication to Azure Cloud Services. When processing an incorrect AMQP_VALUE failed state, may cause a double free problem. This may cause a RCE. Update submodule with commit 2ca42b6e4e098af2d17e487814a91d05f6ae4987.

Ссылки

https://github.com/Azure/azure-uamqp-c/commit/2ca42b6e4e098af2d17e487814a91d05f6ae4987
Patch
https://github.com/Azure/azure-uamqp-c/security/advisories/GHSA-6rh4-fj44-v4jj
Patch
Vendor Advisory
https://github.com/Azure/azure-uamqp-c/commit/2ca42b6e4e098af2d17e487814a91d05f6ae4987
Patch
https://github.com/Azure/azure-uamqp-c/security/advisories/GHSA-6rh4-fj44-v4jj
Patch
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:microsoft:azure_uamqp:*:*:*:*:*:*:*:*

Версия до 2023-2-08 (исключая)

EPSS

Процентиль: 71%

0.01418

Низкий

9.8 Critical

CVSS3

Дефекты

CWE-415

Связанные уязвимости

CVE-2024-27099

CVSS3: 9.8

ubuntu

больше 2 лет назад

The uAMQP is a C library for AMQP 1.0 communication to Azure Cloud Services. When processing an incorrect `AMQP_VALUE` failed state, may cause a double free problem. This may cause a RCE. Update submodule with commit 2ca42b6e4e098af2d17e487814a91d05f6ae4987.

CVE-2024-27099

CVSS3: 6

redhat

больше 2 лет назад

CVE-2024-27099

CVSS3: 9.8

msrc

около 2 лет назад

Azure IoT Platform Device SDK Double Free Vulnerability

CVE-2024-27099

CVSS3: 9.8

debian

больше 2 лет назад

The uAMQP is a C library for AMQP 1.0 communication to Azure Cloud Ser ...

SUSE-SU-2024:0947-1

suse-cvrf

больше 2 лет назад

Security update for python-uamqp

EPSS

Процентиль: 71%

0.01418

Низкий

9.8 Critical

CVSS3

Дефекты

CWE-415