Azure IoT Platform Device SDK Remote Code Execution Vulnerability
Résumé
Azure IoT Platform Device SDK Remote Code Execution Vulnerability
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Azure uAMQP is a general purpose C library for AMQP 1.0. The UAMQP library is used by several clients to implement AMQP protocol communication. When clients using this library receive a crafted binary type data, an integer overflow or wraparound or memory safety issue can occur and may cause remote code execution. This vulnerability has been patched in release 2024-01-01.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
État des correctifs par distribution
Paquets corrigés publiés par chaque distribution pour cette CVE
- Debian DEBIAN-CVE-2024-21646 azure-uamqp-python
Références
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- patch github.com