CVE-2024-27099

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-27099
The uAMQP is a C library for AMQP 1.0 communication to Azure Cloud Services. When processing an incorrect `AMQP_VALUE` failed state, may cause a double free problem. This may cause a RCE. Update submodule with commit 2ca42b6e4e098af2d17e487814a91d05f6ae4987.

9.8 /10

CVSS v3.0 : CRITICAL

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://github.com/Azure/azure-uamqp-c/commit/2ca42b6e4e098af2d17e487814a91d05f6ae4987 Patch
https://github.com/Azure/azure-uamqp-c/commit/2ca42b6e4e098af2d17e487814a91d05f6ae4987 Patch
https://github.com/Azure/azure-uamqp-c/security/advisories/GHSA-6rh4-fj44-v4jj Patch Vendor Advisory
https://github.com/Azure/azure-uamqp-c/security/advisories/GHSA-6rh4-fj44-v4jj Patch Vendor Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:microsoft:azure_uamqp:*:*:*:*:*:*:*:*
History

14 Feb 2025, 15:27

Type Values Removed Values Added
CPE cpe:2.3:a:microsoft:azure_uamqp:*:*:*:*:*:*:*:*
References () https://github.com/Azure/azure-uamqp-c/commit/2ca42b6e4e098af2d17e487814a91d05f6ae4987 - () https://github.com/Azure/azure-uamqp-c/commit/2ca42b6e4e098af2d17e487814a91d05f6ae4987 - Patch
References () https://github.com/Azure/azure-uamqp-c/security/advisories/GHSA-6rh4-fj44-v4jj - () https://github.com/Azure/azure-uamqp-c/security/advisories/GHSA-6rh4-fj44-v4jj - Patch, Vendor Advisory
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 9.8
CWE CWE-415
First Time Microsoft
Microsoft azure Uamqp

27 Feb 2024, 19:04

Type Values Removed Values Added
New CVE
Information

Published : 2024-02-27 19:04

Updated : 2025-02-14 15:27

NVD link : CVE-2024-27099

Mitre link : CVE-2024-27099

JSON object : View

Products Affected

microsoft

  • azure_uamqp
CWE
CWE-415

Double Free