{"action":"Upgrade azure-uamqp-python to 1.6.8-2 or later.","affected":[{"fixed":"1.6.8-2","introduced":"0"}],"component":"azure-uamqp-python","cve_ids":[],"ecosystem":"Debian","ecosystem_qualifier":"Debian:13","exploited":false,"fixed_versions":["1.6.8-2"],"id":"tcs_01M5NK5T9GPRX2PZHEA7XFZNBV","modified_at":"2026-11-02T12:01:33.327318357Z","published_at":"2024-02-12T20:15:08.803Z","references":["https://osv.dev/vulnerability/DEBIAN-CVE-2024-25110","https://security-tracker.debian.org/tracker/CVE-2024-25110"],"severity":{"label":"high","score":8.1},"sources":[{"source":"osv","source_id":"DEBIAN-CVE-2024-25110#Debian:13/azure-uamqp-python","url":"https://osv.dev/vulnerability/DEBIAN-CVE-2024-25110"}],"summary":"The UAMQP is a general purpose C library for AMQP 1.0. During a call to open_get_offered_capabilities, a memory allocation may fail causing a use-after-free issue and if a client called it during conn"}