CVE-2024-21646

CRITICO 9.8CVE-2024-21646 · Published 09/01/2024 · updated 17/06/2026

In breve

CVE-2024-21646 è una vulnerabilità CRITICO (CVSS 9.8) che riguarda azure uamqp (microsoft).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 5.1%, superiore al 92.4% delle vulnerabilità.
Correzione: aggiornare a 2024-01-01 o successiva.

Package	Affected versions	Patched versions
azure uamqp microsoft	`< 2024-01-01`	`2024-01-01`

Description

Azure uAMQP is a general purpose C library for AMQP 1.0. The UAMQP library is used by several clients to implement AMQP protocol communication. When clients using this library receive a crafted binary type data, an integer overflow or wraparound or memory safety issue can occur and may cause remote code execution. This vulnerability has been patched in release 2024-01-01.

References

Azure/azure-uamqp-c commit 12ddb3a · Patch
Azure/azure-uamqp-c security advisory · Vendor Advisory

Altre vulnerabilità di azure uamqp

Vedi tutto →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free