CVE-2024-27099
Azure IoT Platform Device SDK Double Free Vulnerability
Summary
Azure IoT Platform Device SDK Double Free Vulnerability
Original description
The description as published by the source.
The uAMQP is a C library for AMQP 1.0 communication to Azure Cloud Services. When processing an incorrect AMQP_VALUE failed state, may cause a double free problem. This may cause a RCE. Update submodule with commit 2ca42b6e4e098af2d17e487814a91d05f6ae4987.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Fix status by distribution
Fixed packages published by each distribution for this CVE
- Debian DEBIAN-CVE-2024-27099 azure-uamqp-python
- Ubuntu UBUNTU-CVE-2024-27099 azure-uamqp-python
References
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- patch github.com