Microsoft Azure Uamqp vulnerabilities

3 CVEs affecting Microsoft Azure Uamqp, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2024-27099, published 2024-02-27.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2024-25110, published 2024-02-12. High severity, CVSS 8.1. EPSS: 7.3% chance of exploitation in the next 30 days. The UAMQP is a general purpose C library for AMQP 1.0. During a call to open_get_offered_capabilities, a memory allocation may fail causing a use-after-free issue and if a client called it during…
CVE-2024-21646, published 2024-01-09. Critical severity, CVSS 9.8. EPSS: 5.1% chance of exploitation in the next 30 days. Azure uAMQP is a general purpose C library for AMQP 1.0. The UAMQP library is used by several clients to implement AMQP protocol communication. When clients using this library receive a crafted…
CVE-2024-27099, published 2024-02-27. Critical severity, CVSS 9.8. EPSS: 1.4% chance of exploitation in the next 30 days. The uAMQP is a C library for AMQP 1.0 communication to Azure Cloud Services. When processing an incorrect `AMQP_VALUE` failed state, may cause a double free problem. This may cause a RCE. Update…