VDB

CVE-2024-21646

CVE-2024-21646 PUBLISHED CVSS 9.800000190734863 CRITICAL

Azure uAMQP is a general purpose C library for AMQP 1.0. The UAMQP library is used by several clients to implement AMQP protocol communication. When clients using this library receive a crafted binary type data, an integer overflow or wraparound or memory safety issue can occur and may cause remote code execution. This vulnerability has been patched in release 2024-01-01.

EPSS 5.11% · 91.7th percentile

Risk Scores

CVSS 3.1
9.800000190734863
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS Score
5.11%
91.7th percentile

Affected Products

VendorProductVersions
microsoftazure_uamqp0, 0, 0
Azureazure-uamqp-c< 2024-01-01, < 2024-01-01

Timeline

  • Jan 21, 1970 Security Advisory
  • Jan 9, 2024 CVE Published
  • Jan 9, 2024 PoC Published
  • Jan 18, 2024 EPSS Score
  • Feb 15, 2024 EPSS Score
  • Apr 11, 2024 EPSS Score
  • May 9, 2024 EPSS Score
  • Jun 6, 2024 EPSS Score
  • Aug 1, 2024 EPSS Score
  • Aug 30, 2024 EPSS Score
  • Sep 27, 2024 EPSS Score
  • Oct 4, 2024 Coalition ESS Score

References

Open in Interactive Console →
$ Console Community · 100/wk Open console ›