CVE-2024-27099

azure-uamqp-python: The uAMQP is a C library for AMQP 1.0 communication to Azure Cloud Services

CVE-2024-27099 is fixed in azure-uamqp-python on 1 platform, first by DEBIAN-CVE-2024-27099, released February 27, 2024. It is not reported as exploited. Patch Radar priority: Urgent.

Urgent
CVSS
9.8
critical
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0142
72nd percentile

The uAMQP is a C library for AMQP 1.0 communication to Azure Cloud Services. When processing an incorrect `AMQP_VALUE` failed state, may cause a double free problem. This may cause a RCE. Update submodule with commit 2ca42b6e4e098af2d17e487814a91d05f6ae4987.

Where it's fixed

ProductFixed inFixReleased
Linux
azure-uamqp-python · Debian 13.5 (trixie) 1.6.8-2 DEBIAN-CVE-2024-27099 Feb 27, 2024
azure-uamqp-python · Debian 14 1.6.8-2 DEBIAN-CVE-2024-27099 Feb 27, 2024

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.