Lucene search

GitHub_MCVE-2024-29195

HistoryMar 26, 2024 - 3:15 a.m.

CVE-2024-29195

2024-03-2603:15:13

CWE-120

GitHub_M

web.nvd.nist.gov

azure-c-shared-utility

vulnerability

parameter checking

remote code execution

iot hub service

c library

iot hub devices

azure cloud services

integer wraparound

heap buffer overflow

rce

github fix

nvd

iot hub payloads

max message payload limit.

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

HIGH

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

LOW

CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:L

AI Score

6.8

Confidence

High

EPSS

Percentile

9.0%

JSON

The azure-c-shared-utility is a C library for AMQP/MQTT communication to Azure Cloud Services. This library may be used by the Azure IoT C SDK for communication between IoT Hub and IoT Hub devices. An attacker can cause an integer wraparound or under-allocation or heap buffer overflow due to vulnerabilities in parameter checking mechanism, by exploiting the buffer length parameter in Azure C SDK, which may lead to remote code execution. Requirements for RCE are 1. Compromised Azure account allowing malformed payloads to be sent to the device via IoT Hub service, 2. By passing IoT hub service max message payload limit of 128KB, and 3. Ability to overwrite code space with remote code. Fixed in commit https://github.com/Azure/azure-c-shared-utility/commit/1129147c38ac02ad974c4c701a1e01b2141b9fe2.

Affected configurations

Vulners

Vulnrichment

Node

azureazure_c_shared_utilityRange<2024-02-08

VendorProductVersionCPE
azureazure_c_shared_utility*cpe:2.3:a:azure:azure_c_shared_utility:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
azure	azure_c_shared_utility	*	cpe:2.3:a:azure:azure_c_shared_utility::::::::

CNA Affected

[
  {
    "vendor": "Azure",
    "product": "azure-c-shared-utility",
    "versions": [
      {
        "version": "< 2024-02-08",
        "status": "affected"
      }
    ]
  }
]