CVE-2024-21646
Azure uAMQP is a general purpose C library for AMQP 1.0. The UAMQP lib ...
Kaynağa göre önem derecesi
Trivy'nin kendi etiketi CRITICAL. Kritik diyenler: NVD, Azure Linux, CBL-Mariner.
Açıklama
Azure uAMQP is a general purpose C library for AMQP 1.0. The UAMQP library is used by several clients to implement AMQP protocol communication. When clients using this library receive a crafted binary type data, an integer overflow or wraparound or memory safety issue can occur and may cause remote code execution. This vulnerability has been patched in release 2024-01-01.
Etkilenen paketler ve düzeltilmiş sürümler
| Kaynak | Paket | Düzeltildiği sürüm |
|---|---|---|
| Azure Linux 3.0 | azure-iot-sdk-c | 0:2024.03.04-1.azl3 |
| CBL-Mariner 2.0 | azure-iot-sdk-c | 0:2022.01.21-2.cm2 |
| debian 11 | azure-uamqp-python | düzeltme belirtilmemiş |
| debian 12 | azure-uamqp-python | düzeltme belirtilmemiş |
| debian 13 | azure-uamqp-python | 1.6.8-1 |
| debian 14 | azure-uamqp-python | 1.6.8-1 |
| echo | azure-uamqp-python | 1.6.8-1 |
| rapidfort debian 12 | azure-uamqp-python | 0:1.6.8-1 |
| rapidfort debian 13 | azure-uamqp-python | 0:1.6.8-1 |