{"id":"CVE-2024-27099","aliases":["AZL-35447","AZL-35471","DEBIAN-CVE-2024-27099","EUVD-2024-24351","GHSA-6rh4-fj44-v4jj","SUSE-SU-2024:0947-1","UBUNTU-CVE-2024-27099","openSUSE-SU-2024:13729-1"],"status":"published","title":"Azure IoT Platform Device SDK Double Free Vulnerability","description":"The uAMQP is a C library for AMQP 1.0 communication to Azure Cloud Services. When processing an incorrect `AMQP_VALUE` failed state, may cause a double free problem. This may cause a RCE. Update submodule with commit 2ca42b6e4e098af2d17e487814a91d05f6ae4987.","severity":{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-11","score":0.01418,"percentile":0.73145,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-415"],"published":"2024-02-27T18:58:26Z","modified":"2026-11-02T12:01:28Z","fixes":[{"ecosystem":"Azure Linux:2","package":"azure-iot-sdk-c","fixed_in":["2022.01.21-3"],"sources":["osv"]},{"ecosystem":"Azure Linux:3","package":"azure-iot-sdk-c","fixed_in":["2024.03.04-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"azure-uamqp-python","fixed_in":["1.6.8-2"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"azure-uamqp-python","fixed_in":["1.6.8-2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP2","package":"python-uamqp","fixed_in":["1.5.3-150100.4.18.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP3","package":"python-uamqp","fixed_in":["1.5.3-150100.4.18.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP4","package":"python-uamqp","fixed_in":["1.5.3-150100.4.18.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP5","package":"python-uamqp","fixed_in":["1.5.3-150100.4.18.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.5","package":"python-uamqp","fixed_in":["1.5.3-150100.4.18.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Azure Linux:2","package":"azure-iot-sdk-c","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2022.01.21-3"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"azure-iot-sdk-c","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2024.03.04-1"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"azure-uamqp-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.5.3-1","1.6.10-1","1.6.11-1","1.6.11-2","1.6.4-1","1.6.5-1","1.6.5-2","1.6.8-1","1.6.8-2","1.6.9-1","1.6.9-2","1.6.9-3"]},{"source":"osv","ecosystem":"Debian:13","package":"azure-uamqp-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.8-2"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"azure-uamqp-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.8-2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP2","package":"python-uamqp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.3-150100.4.18.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP3","package":"python-uamqp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.3-150100.4.18.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP4","package":"python-uamqp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.3-150100.4.18.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP5","package":"python-uamqp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.3-150100.4.18.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"python-uamqp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.3-150100.4.18.1"}]}]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"azure-uamqp-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.2.6-1","1.2.6-2","1.2.6-4"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"azure-uamqp-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.2.13-1","1.4.3-1","1.4.3-1ubuntu1","1.5.0-1","1.5.1-1","1.5.1-1build1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"azure-uamqp-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.6.5-1","1.6.5-1build1","1.6.5-2","1.6.8-1","1.6.8-2","1.6.8-2build1"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"azure-uamqp-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.6.11-1build2"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"azure-uamqp-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.6.11-2build1","1.6.11-2build2"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"azure-uamqp-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.6.11-1build2","1.6.11-2","1.6.11-2build1"]}],"products":[{"vendor":"azure","product":"azure-uamqp-c"},{"vendor":"microsoft","product":"azure_uamqp"}],"references":[{"url":"https://github.com/Azure/azure-uamqp-c/security/advisories/GHSA-6rh4-fj44-v4jj","tags":["x_refsource_CONFIRM","x_transferred","Patch","Vendor Advisory","advisory","report"]},{"url":"https://github.com/Azure/azure-uamqp-c/commit/2ca42b6e4e098af2d17e487814a91d05f6ae4987","tags":["x_refsource_MISC","x_transferred","Patch","fix","report"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-27099","tags":["web","advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/27xxx/CVE-2024-27099.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2024-27099","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20240947-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1217782","tags":["report"]},{"url":"https://bugzilla.suse.com/1220535","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2024-27099","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2024-27099","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-27099","tags":["report"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2024-27099","title":"Azure IoT Platform Device SDK Double Free Vulnerability","description":"The uAMQP is a C library for AMQP 1.0 communication to Azure Cloud Services. When processing an incorrect `AMQP_VALUE` failed state, may cause a double free problem. This may cause a RCE. Update submodule with commit 2ca42b6e4e098af2d17e487814a91d05f6ae4987.","status":"published","published":"2024-02-27T18:58:26.274Z","modified":"2024-08-02T00:27:59.513Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"cna"}],"cwes":["CWE-415"],"updated_at":"2026-11-02T14:34:12.982241Z"}],"euvd":[{"id":"EUVD-2024-24351","description":"The uAMQP is a C library for AMQP 1.0 communication to Azure Cloud Services. When processing an incorrect `AMQP_VALUE` failed state, may cause a double free problem. This may cause a RCE. Update submodule with commit 2ca42b6e4e098af2d17e487814a91d05f6ae4987.","status":"published","published":"2024-02-27T18:58:26Z","modified":"2024-08-02T00:27:59Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-03T03:50:27.194572Z"}],"nvd":[{"id":"CVE-2024-27099","description":"The uAMQP is a C library for AMQP 1.0 communication to Azure Cloud Services. When processing an incorrect `AMQP_VALUE` failed state, may cause a double free problem. This may cause a RCE. Update submodule with commit 2ca42b6e4e098af2d17e487814a91d05f6ae4987.","status":"published","published":"2024-02-27T19:04:07.603Z","modified":"2026-06-17T07:19:09.95Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"secondary"},{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary"}],"cwes":["CWE-415"],"updated_at":"2026-11-02T14:09:38.473056Z"}],"osv":[{"id":"AZL-35447","title":"CVE-2024-27099 affecting package azure-iot-sdk-c for versions less than 2022.01.21-3","description":"The uAMQP is a C library for AMQP 1.0 communication to Azure Cloud Services. When processing an incorrect `AMQP_VALUE` failed state, may cause a double free problem. This may cause a RCE. Update submodule with commit 2ca42b6e4e098af2d17e487814a91d05f6ae4987.","status":"published","published":"2024-02-27T19:04:07Z","modified":"2026-04-21T04:24:47.10949Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:28:04.173658Z"},{"id":"AZL-35471","title":"CVE-2024-27099 affecting package azure-iot-sdk-c for versions less than 2024.03.04-1","description":"The uAMQP is a C library for AMQP 1.0 communication to Azure Cloud Services. When processing an incorrect `AMQP_VALUE` failed state, may cause a double free problem. This may cause a RCE. Update submodule with commit 2ca42b6e4e098af2d17e487814a91d05f6ae4987.","status":"published","published":"2024-02-27T19:04:07Z","modified":"2026-04-21T04:33:44.850327Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:28:04.173658Z"},{"id":"CVE-2024-27099","title":"Azure IoT Platform Device SDK Double Free Vulnerability","description":"The uAMQP is a C library for AMQP 1.0 communication to Azure Cloud Services. When processing an incorrect `AMQP_VALUE` failed state, may cause a double free problem. This may cause a RCE. Update submodule with commit 2ca42b6e4e098af2d17e487814a91d05f6ae4987.","status":"published","published":"2024-02-27T18:58:26.274Z","modified":"2026-10-28T10:40:35.85498566Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-415"],"updated_at":"2026-11-02T15:44:39.569658Z"},{"id":"DEBIAN-CVE-2024-27099","description":"The uAMQP is a C library for AMQP 1.0 communication to Azure Cloud Services. When processing an incorrect `AMQP_VALUE` failed state, may cause a double free problem. This may cause a RCE. Update submodule with commit 2ca42b6e4e098af2d17e487814a91d05f6ae4987.","status":"published","published":"2024-02-27T19:04:07.603Z","modified":"2026-11-02T12:01:28.11296157Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:45:42.204259Z"},{"id":"UBUNTU-CVE-2024-27099","description":"The uAMQP is a C library for AMQP 1.0 communication to Azure Cloud Services. When processing an incorrect `AMQP_VALUE` failed state, may cause a double free problem. This may cause a RCE. Update submodule with commit 2ca42b6e4e098af2d17e487814a91d05f6ae4987.","status":"published","published":"2024-02-27T19:04:00Z","modified":"2026-10-17T12:56:43.787548578Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"},{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T16:54:48.333535Z"},{"id":"openSUSE-SU-2024:13729-1","title":"python310-uamqp-1.6.8-3.1 on GA media","description":"These are all security issues fixed in the python310-uamqp-1.6.8-3.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T02:36:39.775237Z","updated_at":"2026-11-02T16:58:36.327643Z"},{"id":"SUSE-SU-2024:0947-1","title":"Security update for python-uamqp","description":"This update for python-uamqp fixes the following issues:\n\n- CVE-2024-27099: Fixed potential double-free in link_frame_received() (bsc#1220535).\n\nBug fixes:\n\n- Fixed compatibility with OpenSSL 3.x (bsc#1217782)\n","status":"published","published":"2024-03-20T12:06:38Z","modified":"2026-02-04T03:33:56.453359Z","updated_at":"2026-11-02T15:53:54.239786Z"}]}}