Lucene search
K

8 matches found

SUSE CVE
SUSE CVE
added 2024/02/14 3:56 a.m.1 views

SUSE CVE-2024-25110

The UAMQP is a general purpose C library for AMQP 1.0. During a call to opengetofferedcapabilities, a memory allocation may fail causing a use-after-free issue and if a client called it during connection communication it may cause a remote code execution. Users are advised to update the submodule...

7.5CVSS8.2AI score0.00739EPSS
Exploits0References4
OSV
OSV
added 2024/02/12 8:15 p.m.1 views

AZL-34349 CVE-2024-25110 affecting package azure-iot-sdk-c for versions less than 2022.01.21-3

The UAMQP is a general purpose C library for AMQP 1.0. During a call to opengetofferedcapabilities, a memory allocation may fail causing a use-after-free issue and if a client called it during connection communication it may cause a remote code execution. Users are advised to update the submodule...

8.1CVSS7.2AI score0.00739EPSS
Exploits0References1
OSV
OSV
added 2024/02/12 8:15 p.m.1 views

AZL-34556 CVE-2024-25110 affecting package azure-iot-sdk-c for versions less than 2024.03.04-1

The UAMQP is a general purpose C library for AMQP 1.0. During a call to opengetofferedcapabilities, a memory allocation may fail causing a use-after-free issue and if a client called it during connection communication it may cause a remote code execution. Users are advised to update the submodule...

8.1CVSS6.1AI score0.00739EPSS
Exploits0References1
OSV
OSV
added 2024/02/12 8:15 p.m.1 views

DEBIAN-CVE-2024-25110

The UAMQP is a general purpose C library for AMQP 1.0. During a call to opengetofferedcapabilities, a memory allocation may fail causing a use-after-free issue and if a client called it during connection communication it may cause a remote code execution. Users are advised to update the submodule...

8.1CVSS8.1AI score0.00739EPSS
Exploits0References1
OSV
OSV
added 2024/02/12 8:15 p.m.0 views

UBUNTU-CVE-2024-25110

The UAMQP is a general purpose C library for AMQP 1.0. During a call to opengetofferedcapabilities, a memory allocation may fail causing a use-after-free issue and if a client called it during connection communication it may cause a remote code execution. Users are advised to update the submodule...

9.8CVSS6.1AI score0.00739EPSS
Exploits0References5
Prion
Prion
added 2024/02/12 8:15 p.m.10 views

Design/Logic Flaw

The UAMQP is a general purpose C library for AMQP 1.0. During a call to opengetofferedcapabilities, a memory allocation may fail causing a use-after-free issue and if a client called it during connection communication it may cause a remote code execution. Users are advised to update the submodule...

7.5CVSS8.1AI score0.00739EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2024/02/12 7:58 p.m.27 views

CVE-2024-25110 Azure IoT Platform Device SDK Remote Code Execution Vulnerability

The UAMQP is a general purpose C library for AMQP 1.0. During a call to opengetofferedcapabilities, a memory allocation may fail causing a use-after-free issue and if a client called it during connection communication it may cause a remote code execution. Users are advised to update the submodule...

9.8CVSS7.6AI score0.00739EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2024/02/05 12:0 a.m.1 views

PT-2024-3069 · Uamqp +2 · Uamqp +2

Name of the Vulnerable Software and Affected Versions: uAMQP affected versions not specified Description: The issue is related to the open get offered capabilities function in the uAMQP library, which is a general-purpose C library for AMQP 1.0. A memory allocation failure during this function ca...

10CVSS7.8AI score0.00739EPSS
Exploits0References30
Rows per page
Query Builder