CVSS3
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
HIGH
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
LOW
CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:L
AI Score
Confidence
Low
EPSS
Percentile
9.0%
The azure-c-shared-utility is a C library for AMQP/MQTT communication to
Azure Cloud Services. This library may be used by the Azure IoT C SDK for
communication between IoT Hub and IoT Hub devices. An attacker can cause an
integer wraparound or under-allocation or heap buffer overflow due to
vulnerabilities in parameter checking mechanism, by exploiting the buffer
length parameter in Azure C SDK, which may lead to remote code execution.
Requirements for RCE are 1. Compromised Azure account allowing malformed
payloads to be sent to the device via IoT Hub service, 2. By passing IoT
hub service max message payload limit of 128KB, and 3. Ability to overwrite
code space with remote code. Fixed in commit
https://github.com/Azure/azure-c-shared-utility/commit/1129147c38ac02ad974c4c701a1e01b2141b9fe2.
Author | Note |
---|---|
rodrigo-zaiden | azure-c-shared-utility in vendored in azure-uamqp-python. |
OS | Version | Architecture | Package | Version | Filename |
---|---|---|---|---|---|
ubuntu | 20.04 | noarch | azure-uamqp-python | < any | UNKNOWN |
ubuntu | 22.04 | noarch | azure-uamqp-python | < any | UNKNOWN |
ubuntu | 24.04 | noarch | azure-uamqp-python | < any | UNKNOWN |
github.com/Azure/azure-c-shared-utility/commit/1129147c38ac02ad974c4c701a1e01b2141b9fe2
github.com/Azure/azure-c-shared-utility/security/advisories/GHSA-m8wp-hc7w-x4xg
launchpad.net/bugs/cve/CVE-2024-29195
nvd.nist.gov/vuln/detail/CVE-2024-29195
security-tracker.debian.org/tracker/CVE-2024-29195
www.cve.org/CVERecord?id=CVE-2024-29195