{"id":"CVE-2024-29195","summary":"Azure C SDK Integer Wraparound Vulnerability","details":"The azure-c-shared-utility is a C library for AMQP/MQTT communication to Azure Cloud Services. This library may be used by the Azure IoT C SDK for communication between IoT Hub and IoT Hub devices. An attacker can cause an integer wraparound or under-allocation or heap buffer overflow due to vulnerabilities in parameter checking mechanism, by exploiting the buffer length parameter in Azure C SDK, which may lead to remote code execution. Requirements for RCE are 1. Compromised Azure account allowing malformed payloads to be sent to the device via IoT Hub service, 2. By passing IoT hub service max message payload limit of 128KB, and 3. Ability to overwrite code space with remote code. Fixed in commit https://github.com/Azure/azure-c-shared-utility/commit/1129147c38ac02ad974c4c701a1e01b2141b9fe2.","aliases":["GHSA-m8wp-hc7w-x4xg"],"modified":"2026-04-12T09:49:33.059416Z","published":"2024-03-26T02:57:20.769Z","database_specific":{"cwe_ids":["CWE-120"],"osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/29xxx/CVE-2024-29195.json","cna_assigner":"GitHub_M"},"references":[{"type":"ADVISORY","url":"https://github.com/Azure/azure-c-shared-utility/security/advisories/GHSA-m8wp-hc7w-x4xg"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/29xxx/CVE-2024-29195.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2024-29195"},{"type":"FIX","url":"https://github.com/Azure/azure-c-shared-utility/commit/1129147c38ac02ad974c4c701a1e01b2141b9fe2"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/azure/azure-c-shared-utility","events":[{"introduced":"0"},{"fixed":"1129147c38ac02ad974c4c701a1e01b2141b9fe2"}]},{"type":"GIT","repo":"https://github.com/azure/azure-c-shared-utility","events":[{"introduced":"0"},{"fixed":"1129147c38ac02ad974c4c701a1e01b2141b9fe2"}]}],"versions":["1.0.0-pre-release-1.0.8","1.1.10","1.1.11","1.1.3","1.1.4","1.1.5","1.1.6","1.1.7","1.1.9","2016-02-08","2016-08-26","2016-11-17","2017-01-27","2017-02-10","2017-02-24","2017-04-06","2017-04-07","2017-04-21","2017-05-05","2017-06-16","2017-08-11","2017-10-09","2017-11-17","2018-01-12","2018-01-29","2018-03-07-temp-pod","2018-04-04","2018-04-13","2018-06-08","2018-06-15","2018-06-26","2018-06-27","2018-09-11","2018-10-03","2018-11-20","2020-01-22","2020-07-19","2020-12-09","LTS_02_2020_Ref01","LTS_07_2022_Ref02"],"database_specific":{"vanir_signatures_modified":"2026-04-12T09:49:33Z","unresolved_ranges":[{"events":[{"introduced":"0"},{"last_affected":"2023-12-01"}]}],"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-29195.json","vanir_signatures":[{"signature_type":"Line","target":{"file":"adapters/tlsio_schannel.c"},"digest":{"line_hashes":["272631315714267385956880589707373542310","79980674835443449833527829940108689868","205156536526628828543442398892890564447","41088566315807060040726780838952394982","319846824678130277763252526128686658317","260748919349894530896974512818731275706","285053262510006778605184379376824729874","313880579979000741145375564998605517810","275408304467041562295443839449196330618","132952591454270751149813585305260864387","14563294529317087257605860425527909788","55902696462066838786485577642557693045","188631629897455268081814403340153606662","55610071590230018748171274340826117264","267319301785130640605735960611457176199","4675992190476462343691271644601815512","162277531256996091167464829134531053912","168547948585797602782899518418610684088","328507507192918839746123354828976145000","33044968122631164834696942429194267451","159063141471570643810457433005289705418","308000166120477857065747989717659786005"],"threshold":0.9},"id":"CVE-2024-29195-08907147","deprecated":false,"source":"https://github.com/azure/azure-c-shared-utility/commit/1129147c38ac02ad974c4c701a1e01b2141b9fe2","signature_version":"v1"},{"signature_type":"Line","target":{"file":"adapters/x509_schannel.c"},"digest":{"line_hashes":["38361949302591096127829116849032272142","142139381773087094317405199670939628427","316323429815000714485550943509481123991","47126386724714036722757705992863303299","325527435197467450836238671241798330553","194258795095873746946322589340715403176","181308107066934754103800106320650252190","289286402536791619245720172273923372160","280835752281391252627435780872213354960","216761110000586182374751799789173490469","151995902572471269818137623524946785010","222300571434000737649874235280451616443","24627879986292429673079201705761690724","225324088695588962435424675310656010987","65361646979493436586094437244270711405","309984244259547986701739660866289328819","240303473881667419728950544512021718753","176982256975101583852028204250859500740","131958362452995741018131294537405858456","71944236870879795128004202027478708577","3925861373180849742147980018825918844","262664904633062936551527010426796512892","299344759270705399223998423122665931866","48969372368737920402529919096390973165"],"threshold":0.9},"id":"CVE-2024-29195-128415d1","deprecated":false,"source":"https://github.com/azure/azure-c-shared-utility/commit/1129147c38ac02ad974c4c701a1e01b2141b9fe2","signature_version":"v1"},{"signature_type":"Function","target":{"file":"adapters/httpapi_tirtos.c","function":"HTTPAPI_ExecuteRequest"},"digest":{"length":3813,"function_hash":"298664250419840726252175937018329982819"},"id":"CVE-2024-29195-16d89ce5","deprecated":false,"source":"https://github.com/azure/azure-c-shared-utility/commit/1129147c38ac02ad974c4c701a1e01b2141b9fe2","signature_version":"v1"},{"signature_type":"Function","target":{"file":"adapters/httpapi_compact.c","function":"HTTPAPI_SetOption"},"digest":{"length":3850,"function_hash":"185265219340764976927955867995407760859"},"id":"CVE-2024-29195-19aa938f","deprecated":false,"source":"https://github.com/azure/azure-c-shared-utility/commit/1129147c38ac02ad974c4c701a1e01b2141b9fe2","signature_version":"v1"},{"signature_type":"Function","target":{"file":"src/buffer.c","function":"BUFFER_enlarge"},"digest":{"length":551,"function_hash":"85488024349645134898734031220282642372"},"id":"CVE-2024-29195-205dad9c","deprecated":false,"source":"https://github.com/azure/azure-c-shared-utility/commit/1129147c38ac02ad974c4c701a1e01b2141b9fe2","signature_version":"v1"},{"signature_type":"Function","target":{"file":"adapters/tlsio_mbedtls.c","function":"on_underlying_io_bytes_received"},"digest":{"length":608,"function_hash":"152858069055429129182710584398686789877"},"id":"CVE-2024-29195-221293fa","deprecated":false,"source":"https://github.com/azure/azure-c-shared-utility/commit/1129147c38ac02ad974c4c701a1e01b2141b9fe2","signature_version":"v1"},{"signature_type":"Function","target":{"file":"adapters/httpapi_winhttp.c","function":"ReceiveResponseHeaders"},"digest":{"length":1829,"function_hash":"292711140534998922266634265700724196177"},"id":"CVE-2024-29195-25dc2832","deprecated":false,"source":"https://github.com/azure/azure-c-shared-utility/commit/1129147c38ac02ad974c4c701a1e01b2141b9fe2","signature_version":"v1"},{"signature_type":"Function","target":{"file":"adapters/httpapi_curl.c","function":"HTTPAPI_SetOption"},"digest":{"length":5141,"function_hash":"104880859935134008862793813013033408020"},"id":"CVE-2024-29195-358b975e","deprecated":false,"source":"https://github.com/azure/azure-c-shared-utility/commit/1129147c38ac02ad974c4c701a1e01b2141b9fe2","signature_version":"v1"},{"signature_type":"Line","target":{"file":"adapters/httpapi_curl.c"},"digest":{"line_hashes":["93160976255180362714267580388291074541","166145107042405967023205634014076082323","323943799459323015609098700937518361972","129091929594704882120960637251677242985","175452145614619099849876977745695617540","184064863393450797227827278006155682169","241004305933388427409182723511765164936","216526464112341718376711479706036347007","31768154516658306967438467971944598544","263979508748724703662228941045821847816","41683700417019932301107813188022397135","3260936835322658479934943452651925060","250308185778519382705445682381518596679","286580403967315202158995092438260419885","221237381059912767498182601774312861818","290738570120511848621920647463231442","146737321621325326885146411978238647761","65778745749776647307855422774683091066","119885050013899097136819061173280058917","85056164746339326647394650527776775591","228441916688240028508165464784746984345","150073247383501245116185503171885412906","297537212804848495024229452858370488908","244776710408308170144253449742760038790","329906043651178157171639729905571718791","270860856465597775826715135855523749291","46340488010267427474526331776489029908"],"threshold":0.9},"id":"CVE-2024-29195-37c19b71","deprecated":false,"source":"https://github.com/azure/azure-c-shared-utility/commit/1129147c38ac02ad974c4c701a1e01b2141b9fe2","signature_version":"v1"},{"signature_type":"Function","target":{"file":"adapters/httpapi_winhttp.c","function":"HTTPAPI_CreateConnection"},"digest":{"length":1135,"function_hash":"297031374645476036771971703879020939403"},"id":"CVE-2024-29195-3ea744ce","deprecated":false,"source":"https://github.com/azure/azure-c-shared-utility/commit/1129147c38ac02ad974c4c701a1e01b2141b9fe2","signature_version":"v1"},{"signature_type":"Function","target":{"file":"adapters/httpapi_winhttp.c","function":"ConstructHeadersString"},"digest":{"length":1576,"function_hash":"239226817215707197179415940211284237560"},"id":"CVE-2024-29195-42334d37","deprecated":false,"source":"https://github.com/azure/azure-c-shared-utility/commit/1129147c38ac02ad974c4c701a1e01b2141b9fe2","signature_version":"v1"},{"signature_type":"Line","target":{"file":"src/buffer.c"},"digest":{"line_hashes":["99065592596935318735877177069066737981","280173355348086814239586995163826270922","75363922953745000295175743676795947078","224168817001065288411051891665796762319","72908028011586030343694720287559886838","184298819630850316265638445454965863371","205768530661404292091616931262293328626","319846824678130277763252526128686658317","97898834347505401843233512863400052757","2775251094566815923368530707495364667","131388486160579937934412916007739167499","87958304962023866052305321051930329049","88984408870007380168503756827970690186","291449981132197700462461584447079773186","217814924600538168678103236030752665177","134781579461805703426853028618297953760","7586796580055245966999780510616500529","11470775246503434587288042925563804322","167962174201103157258389984883452550639","262521252812591364541113056689061874116","291449981132197700462461584447079773186"],"threshold":0.9},"id":"CVE-2024-29195-48e1b8e7","deprecated":false,"source":"https://github.com/azure/azure-c-shared-utility/commit/1129147c38ac02ad974c4c701a1e01b2141b9fe2","signature_version":"v1"},{"signature_type":"Line","target":{"file":"adapters/tlsio_openssl.c"},"digest":{"line_hashes":["245437218063736947165748951342020113351","237157219567298671697793186151389423262","265520985438340032146020489617137430883","179217225213822874854539035652918701759","171379478732786133421666623090135633333","313441227680614430651475869043095747861","129294765133955573723199544174216842524","93879785345629210929637766948225919803","67015262305954912132123655252875799822","236077484965816791372874916870670424778","216757125209981989387757874742594133490","125838389675292690737546255561014371213","149839691512725850030273337856509975398","138270101866847302609231711849253653509","299698676231585110437270875675048850324","226697785322569285896390373663164412334","334713011058704398061110670750451140346"],"threshold":0.9},"id":"CVE-2024-29195-4d766494","deprecated":false,"source":"https://github.com/azure/azure-c-shared-utility/commit/1129147c38ac02ad974c4c701a1e01b2141b9fe2","signature_version":"v1"},{"signature_type":"Line","target":{"file":"adapters/tlsio_mbedtls.c"},"digest":{"line_hashes":["123517505945341247558512210555664248374","163286466028815340897752169291266488274","97212643769147674748946084825816265476","68618868544294678677306379927366136467","229235807702302293388525636450178146256","30004919893477521152515641615087449379","12936943944703359125248701365184929638","261757669585702386039859893142703658674","159705140403261876499787551964819554378","321760476132552817758824222579077811178","115355475797491197835175795613461184009","241765704926306169646801606269155491311"],"threshold":0.9},"id":"CVE-2024-29195-542b8135","deprecated":false,"source":"https://github.com/azure/azure-c-shared-utility/commit/1129147c38ac02ad974c4c701a1e01b2141b9fe2","signature_version":"v1"},{"signature_type":"Function","target":{"file":"adapters/socketio_win32.c","function":"socketio_create"},"digest":{"length":1688,"function_hash":"317829165113232904228384511628605909720"},"id":"CVE-2024-29195-5e5e29dc","deprecated":false,"source":"https://github.com/azure/azure-c-shared-utility/commit/1129147c38ac02ad974c4c701a1e01b2141b9fe2","signature_version":"v1"},{"signature_type":"Line","target":{"file":"adapters/socketio_berkeley.c"},"digest":{"line_hashes":["143670401607392682160280962861917924064","201350244012986935021818291363965414066","305062361972343519190844252096113540664","148023149546978533807050726196461783058","54695204956503994059241032044703473394","72518004815094543539017442744198091314","307753464060224266634470365030927318105","80205943612338801534456222028507970309","156214934293753762576296423358160635075","25934605955573191776527556884696861568","83194029380941019443163412519125181836","255109525723336862035393048127303253778","65426295368036059487071116654947138473","263007103300867696102317254284574578977","186225148784598816895594130478643503064","130257170687668534626707151273501412953","187820481074750717995716242082372066229","338485534765033881647146296140690070044","129616613678032570112419376049580599691","269408728029609891176975678282497504966","336097559955513207041744290560921016052","265414075994225965429594193523372966356","161627413387115127742581046906477626054","340131941890362903682791020590406314446","16331949952913203581519233903093100408","308469124880359398394099339326555569646","213718311212770803644991609698798170782","47941434164430637649857958397094154241","42541169765797425280937612622711956281","265216972984377826576604594232430518825","18849148354492363335336947152929865649","131232371999504289698648813150545507581","113414152480964213124815870164021213883","17551380278747165945342072761997448473","240053538012997950009919546686663540696","41564106221771854294985398435837008915","39020940156641365013869309044554505432","249183083491017870707831104829269166459","229061758120707101790118858724228434150","132162751592867269616641242048488110776","338663216322968759158301022072524211354","112408839644334071743318349318780951609","313391396061638853072869486863429256918","175088439045536746056413408776293474678","333573949379465421971605352573952885507"],"threshold":0.9},"id":"CVE-2024-29195-71a491f9","deprecated":false,"source":"https://github.com/azure/azure-c-shared-utility/commit/1129147c38ac02ad974c4c701a1e01b2141b9fe2","signature_version":"v1"},{"signature_type":"Line","target":{"file":"adapters/httpapi_tirtos.c"},"digest":{"line_hashes":["84860387274607152592296367629207891093","325482163523301803315048179519120366843","253515563333538513422891351526621800915","77686102228522331218001875631287066645","1127704664515044770665558519738397801","6619105894285235771133533123086171278","166308891693633637441160041245420725268","306370255160826979096274624830426057333"],"threshold":0.9},"id":"CVE-2024-29195-72ba6809","deprecated":false,"source":"https://github.com/azure/azure-c-shared-utility/commit/1129147c38ac02ad974c4c701a1e01b2141b9fe2","signature_version":"v1"},{"signature_type":"Function","target":{"file":"adapters/httpapi_winhttp.c","function":"InitiateWinhttpRequest"},"digest":{"length":1689,"function_hash":"90889710781550080867283325098094209380"},"id":"CVE-2024-29195-7c203b1a","deprecated":false,"source":"https://github.com/azure/azure-c-shared-utility/commit/1129147c38ac02ad974c4c701a1e01b2141b9fe2","signature_version":"v1"},{"signature_type":"Function","target":{"file":"adapters/httpapi_curl.c","function":"HTTPAPI_ExecuteRequest"},"digest":{"length":9381,"function_hash":"106986137855872278083463403424951482967"},"id":"CVE-2024-29195-7ced8b9e","deprecated":false,"source":"https://github.com/azure/azure-c-shared-utility/commit/1129147c38ac02ad974c4c701a1e01b2141b9fe2","signature_version":"v1"},{"signature_type":"Function","target":{"file":"adapters/socketio_berkeley.c","function":"socketio_CloneOption"},"digest":{"length":624,"function_hash":"29783356042386698780496208888290868255"},"id":"CVE-2024-29195-7cf6407a","deprecated":false,"source":"https://github.com/azure/azure-c-shared-utility/commit/1129147c38ac02ad974c4c701a1e01b2141b9fe2","signature_version":"v1"},{"signature_type":"Line","target":{"file":"adapters/httpapi_compact.c"},"digest":{"line_hashes":["189215919276014361857719910673733963105","51341225154071606300030360329366304979","81578666332805799124345586339007063142","248161140572565239781749392718645466543","162180656243536007407153579661438423300","175407457546154876325440019744745914699","48144790353486266671773139865241979539","157470963460622168164279783751740200348","232478499510951932573365117404610299955","245860121668886488639483329976388719339","304649543279556881084436318348703807859","52538573778066949126142910648124704340","162918552901986890019615280576077835079","91534613741835279284808665695707651716","135441145176945761417606710555097352108","297586811212460297091912573488472386279","184604822188701050741240911685029552456","287076049481790663856600408614879400386","184907101782307659142248080864883469969","76049915080508818353868512741808235027","97256701953763722111178137687999215110","116099050434987456428034090773380367016","201657409874507943649954539347495960745","42956383744988087362850909460643262302","64931690533504543962928657281382542578","17564611708975908887686158074597774433","203810180043077481604472017351253889913","229852341663330236314789444801511731890","13226400483749170530665773233793646255","42278171413493425489777977952850950966","114465875321853614266076010839455813862","222134877574661820809827222037582204231","201606317333727487537215887524745851731","289944492571003647157509751062256405483","164047719812923103966462946934000964764","308417938494502294362160179929208335912","215617074878610559903224099546501940438","116800866839160921949871918254338061011","285569703634415506203888965230495672059","106466719241637452823084124734586616360","120964015507585647484327168362262565331","334863249812390056819683276028920930246","282977438682554947899768315175804398623","44265655330442808535743803206074222063","120964015507585647484327168362262565331","334863249812390056819683276028920930246","313678138989823460446814709764268303397","44265655330442808535743803206074222063","120964015507585647484327168362262565331","334863249812390056819683276028920930246"],"threshold":0.9},"id":"CVE-2024-29195-7e529d2b","deprecated":false,"source":"https://github.com/azure/azure-c-shared-utility/commit/1129147c38ac02ad974c4c701a1e01b2141b9fe2","signature_version":"v1"},{"signature_type":"Function","target":{"file":"adapters/socketio_berkeley.c","function":"create_network_interface_description"},"digest":{"length":1573,"function_hash":"198286744628231578446450562459252731844"},"id":"CVE-2024-29195-7e8b0c9c","deprecated":false,"source":"https://github.com/azure/azure-c-shared-utility/commit/1129147c38ac02ad974c4c701a1e01b2141b9fe2","signature_version":"v1"},{"signature_type":"Function","target":{"file":"adapters/httpapi_compact.c","function":"HTTPAPI_CloneOption"},"digest":{"length":2305,"function_hash":"16146345451876409516792906629875319095"},"id":"CVE-2024-29195-8a736468","deprecated":false,"source":"https://github.com/azure/azure-c-shared-utility/commit/1129147c38ac02ad974c4c701a1e01b2141b9fe2","signature_version":"v1"},{"signature_type":"Function","target":{"file":"adapters/socketio_berkeley.c","function":"socketio_setoption"},"digest":{"length":1631,"function_hash":"329373769069433065155843187972717548151"},"id":"CVE-2024-29195-8d73428d","deprecated":false,"source":"https://github.com/azure/azure-c-shared-utility/commit/1129147c38ac02ad974c4c701a1e01b2141b9fe2","signature_version":"v1"},{"signature_type":"Function","target":{"file":"adapters/socketio_berkeley.c","function":"socketio_create"},"digest":{"length":1479,"function_hash":"306040545050297347970384931710141092859"},"id":"CVE-2024-29195-8d9644c6","deprecated":false,"source":"https://github.com/azure/azure-c-shared-utility/commit/1129147c38ac02ad974c4c701a1e01b2141b9fe2","signature_version":"v1"},{"signature_type":"Function","target":{"file":"adapters/httpapi_curl.c","function":"HTTPAPI_CreateConnection"},"digest":{"length":2665,"function_hash":"153722599144599010628227589840518332057"},"id":"CVE-2024-29195-9af47a8a","deprecated":false,"source":"https://github.com/azure/azure-c-shared-utility/commit/1129147c38ac02ad974c4c701a1e01b2141b9fe2","signature_version":"v1"},{"signature_type":"Line","target":{"file":"adapters/httpapi_winhttp.c"},"digest":{"line_hashes":["80481013920653149752368849164642140685","125644590908536079013384499943417040020","313072214480775061740695223801030482658","114028133930615105389389254257711781684","42056371202943437865542408963794057587","191399463165937650891027916620407344786","63125615057465135629007570895892644006","201389694613355581893384940150714986418","26983673942803595853839056882959029196","122269821494185985705012667639261054577","330123760979660846594475186993016495991","331287171959792133094199709791542617409","144440719485037938281012203609092314621","220613435726474277401120328363900535491","68572416473561245273334646833696574633","241781749665962910109186209150201443180","260651484621432908952871523819206803131","267209248197452748458419405238078266048","131265759098635207535177670578425651753","159861812536100409324462584442291699396","317519917510488140925229484116892904338","190240763103149975023534447514668949393","268506916465245478984883231432296969347","199261786774002092189950972587325465615","130490850456434159686360332708479700820","48776115605130628972490367952878583635","13685865192728551325450657571682877590","63843551484815503890114937795935261411","93913780327201305494670575650827909429","274849924448169778175467208062017381672","226913615215883688825324292099087446328","209059673655566155019212710150615156796","77205307311064444251370433916817587419","285563383772360184115527871930535149250","230329728786168827265488311198934902651","305755324952729511393093696769078887506"],"threshold":0.9},"id":"CVE-2024-29195-9bdbad6f","deprecated":false,"source":"https://github.com/azure/azure-c-shared-utility/commit/1129147c38ac02ad974c4c701a1e01b2141b9fe2","signature_version":"v1"},{"signature_type":"Function","target":{"file":"adapters/tlsio_wolfssl.c","function":"on_underlying_io_bytes_received"},"digest":{"length":683,"function_hash":"327327940246096712085547302567869212527"},"id":"CVE-2024-29195-a3bb16e7","deprecated":false,"source":"https://github.com/azure/azure-c-shared-utility/commit/1129147c38ac02ad974c4c701a1e01b2141b9fe2","signature_version":"v1"},{"signature_type":"Function","target":{"file":"src/buffer.c","function":"BUFFER_append"},"digest":{"length":756,"function_hash":"3869087539300862522679398523001322200"},"id":"CVE-2024-29195-ac4f8900","deprecated":false,"source":"https://github.com/azure/azure-c-shared-utility/commit/1129147c38ac02ad974c4c701a1e01b2141b9fe2","signature_version":"v1"},{"signature_type":"Line","target":{"file":"inc/azure_c_shared_utility/xlogging.h"},"digest":{"line_hashes":["21013669322843541568431234799122360159","22035516116187841691253797451929500826","230192519558079965674562606745696666703","327265040138817367936973500724754347499","334431207099580495676917047868757267176","314461881584684570122112953390736205369","60762401624617165840710896294157147840"],"threshold":0.9},"id":"CVE-2024-29195-b318d7e6","deprecated":false,"source":"https://github.com/azure/azure-c-shared-utility/commit/1129147c38ac02ad974c4c701a1e01b2141b9fe2","signature_version":"v1"},{"signature_type":"Function","target":{"file":"adapters/tlsio_openssl.c","function":"tlsio_openssl_setoption"},"digest":{"length":4408,"function_hash":"37810979121767722247944189243976554393"},"id":"CVE-2024-29195-b3a5fdd4","deprecated":false,"source":"https://github.com/azure/azure-c-shared-utility/commit/1129147c38ac02ad974c4c701a1e01b2141b9fe2","signature_version":"v1"},{"signature_type":"Function","target":{"file":"adapters/x509_schannel.c","function":"set_ecc_certificate_info"},"digest":{"length":2428,"function_hash":"215007555956113367724959469109133838709"},"id":"CVE-2024-29195-b6241422","deprecated":false,"source":"https://github.com/azure/azure-c-shared-utility/commit/1129147c38ac02ad974c4c701a1e01b2141b9fe2","signature_version":"v1"},{"signature_type":"Function","target":{"file":"adapters/httpapi_curl.c","function":"ContentWriteFunction"},"digest":{"length":665,"function_hash":"172276188035330987388219897296253775837"},"id":"CVE-2024-29195-b8afeee6","deprecated":false,"source":"https://github.com/azure/azure-c-shared-utility/commit/1129147c38ac02ad974c4c701a1e01b2141b9fe2","signature_version":"v1"},{"signature_type":"Line","target":{"file":"adapters/tlsio_wolfssl.c"},"digest":{"line_hashes":["24412235468291532313100927532028268735","189468681642835572718134254395259130598","154715193445082659896946872191646088031","200811021315229218219462517180152940281","30004919893477521152515641615087449379","12936943944703359125248701365184929638","261757669585702386039859893142703658674","159705140403261876499787551964819554378","33916183316727600188028380216567256876","243820254432742494733214796952918087557","105911088535517145330981966563106903385","280747579560884701296195471131049586720"],"threshold":0.9},"id":"CVE-2024-29195-c260fe6d","deprecated":false,"source":"https://github.com/azure/azure-c-shared-utility/commit/1129147c38ac02ad974c4c701a1e01b2141b9fe2","signature_version":"v1"},{"signature_type":"Line","target":{"file":"adapters/string_utils.c"},"digest":{"line_hashes":["110333716204327089275797188839938779740","260706570087338059477964825543496639095","87973120524053976749516430695963037261","41755205160361229888163304105564348212","239790760083006860017296485389612788923","97221564697107564432793540788636723099","8530412418821835811477148176039540935","23850780802613100920137988247424159945","20897244140902349955877910510551926362","200327955335136781979462627389905033684","304079811899009542647317817731128448367","110273033821036798205324146277250536976","234892189103928796113692908165722491862","20897244140902349955877910510551926362","48573258381845054356367372678491593687","36025667302743128525862241038608171041","82167093927347396257068010778040568859","42700676209202315500918129316631310297","20897244140902349955877910510551926362","78804309321214963021789012263143125928","290327451091459402059684806631691519801","282144355209855940805235769849596173621","23431036296825078421010370926394244647","20897244140902349955877910510551926362"],"threshold":0.9},"id":"CVE-2024-29195-c3436590","deprecated":false,"source":"https://github.com/azure/azure-c-shared-utility/commit/1129147c38ac02ad974c4c701a1e01b2141b9fe2","signature_version":"v1"},{"signature_type":"Function","target":{"file":"adapters/httpapi_winhttp.c","function":"ConcatHttpHeaders"},"digest":{"length":593,"function_hash":"264358579795219184884891706599397631862"},"id":"CVE-2024-29195-c932037b","deprecated":false,"source":"https://github.com/azure/azure-c-shared-utility/commit/1129147c38ac02ad974c4c701a1e01b2141b9fe2","signature_version":"v1"},{"signature_type":"Function","target":{"file":"adapters/httpapi_compact.c","function":"on_bytes_received"},"digest":{"length":749,"function_hash":"54988878141828761251696679569402283431"},"id":"CVE-2024-29195-cb42dd2d","deprecated":false,"source":"https://github.com/azure/azure-c-shared-utility/commit/1129147c38ac02ad974c4c701a1e01b2141b9fe2","signature_version":"v1"},{"signature_type":"Line","target":{"file":"src/constbuffer.c"},"digest":{"line_hashes":["336982188784481329822193500149202403685","235838198603931005170793420388661052109","240321882006795820593498556530576985339","228111828315164829371088434572384781099"],"threshold":0.9},"id":"CVE-2024-29195-d8e99fc5","deprecated":false,"source":"https://github.com/azure/azure-c-shared-utility/commit/1129147c38ac02ad974c4c701a1e01b2141b9fe2","signature_version":"v1"},{"signature_type":"Function","target":{"file":"adapters/tlsio_openssl.c","function":"openssl_static_locks_install"},"digest":{"length":746,"function_hash":"232392245805091505318983983422310459916"},"id":"CVE-2024-29195-dc54ea3c","deprecated":false,"source":"https://github.com/azure/azure-c-shared-utility/commit/1129147c38ac02ad974c4c701a1e01b2141b9fe2","signature_version":"v1"},{"signature_type":"Function","target":{"file":"adapters/tlsio_schannel.c","function":"send_chunk"},"digest":{"length":2171,"function_hash":"250069313076607427041613546174828385969"},"id":"CVE-2024-29195-dc63a55a","deprecated":false,"source":"https://github.com/azure/azure-c-shared-utility/commit/1129147c38ac02ad974c4c701a1e01b2141b9fe2","signature_version":"v1"},{"signature_type":"Function","target":{"file":"adapters/tlsio_schannel.c","function":"tlsio_schannel_create"},"digest":{"length":1744,"function_hash":"91175925887628093511952750911132594539"},"id":"CVE-2024-29195-e4d4e6f2","deprecated":false,"source":"https://github.com/azure/azure-c-shared-utility/commit/1129147c38ac02ad974c4c701a1e01b2141b9fe2","signature_version":"v1"},{"signature_type":"Line","target":{"file":"adapters/socketio_win32.c"},"digest":{"line_hashes":["8411703749418181514170242948755847462","193479665596212564478180613712330315790","44346082091079391387676938371173563059","205916169372384838450003446500050528751","42541169765797425280937612622711956281","265216972984377826576604594232430518825","18849148354492363335336947152929865649","131232371999504289698648813150545507581","113414152480964213124815870164021213883","17551380278747165945342072761997448473","240053538012997950009919546686663540696"],"threshold":0.9},"id":"CVE-2024-29195-f4e9fe74","deprecated":false,"source":"https://github.com/azure/azure-c-shared-utility/commit/1129147c38ac02ad974c4c701a1e01b2141b9fe2","signature_version":"v1"},{"signature_type":"Function","target":{"file":"src/buffer.c","function":"BUFFER_append_build"},"digest":{"length":928,"function_hash":"132372333593773626537693744640428558149"},"id":"CVE-2024-29195-f969204e","deprecated":false,"source":"https://github.com/azure/azure-c-shared-utility/commit/1129147c38ac02ad974c4c701a1e01b2141b9fe2","signature_version":"v1"},{"signature_type":"Function","target":{"file":"src/constbuffer.c","function":"CONSTBUFFER_Create_Internal"},"digest":{"length":546,"function_hash":"87756371392939778585655312896007404844"},"id":"CVE-2024-29195-fa1d00f4","deprecated":false,"source":"https://github.com/azure/azure-c-shared-utility/commit/1129147c38ac02ad974c4c701a1e01b2141b9fe2","signature_version":"v1"}]}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:L"}]}