NA

CVE-2024-25110

Published: 12/02/2024 Updated: 12/02/2024

Vulnerability Summary

The UAMQP is a general purpose C library for AMQP 1.0. During a call to open_get_offered_capabilities, a memory allocation may fail causing a use-after-free issue and if a client called it during connection communication it may cause a remote code execution. Users are advised to update the submodule with commit `30865c9c`. There are no known workarounds for this vulnerability.

Vulnerability Trend

Vendor Advisories

Debian Bug report logs - #1064051 azure-uamqp-python: CVE-2024-25110 Package: src:azure-uamqp-python; Maintainer for src:azure-uamqp-python is Debian Python Team <team+python@trackerdebianorg>; Reported by: Moritz Mühlenhoff <jmm@inutilorg> Date: Fri, 16 Feb 2024 14:24:01 UTC Severity: grave Tags: security, upstr ...