Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-wr54-9gc5-3m4h

Опубликовано: 07 дек. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 9.1

Описание

Open Robotics Robotic Operating System 2 (ROS2) and Nav2 humble versions were discovered to contain a use-after-free via the nav2_amcl process. This vulnerability is triggered via remotely sending a request to change the value of dynamic-parameter/amcl odom_frame_id .

Open Robotics Robotic Operating System 2 (ROS2) and Nav2 humble versions were discovered to contain a use-after-free via the nav2_amcl process. This vulnerability is triggered via remotely sending a request to change the value of dynamic-parameter/amcl odom_frame_id .

EPSS

Процентиль: 34%
0.00135
Низкий

9.1 Critical

CVSS3

Дефекты

CWE-416

Связанные уязвимости

CVSS3: 9.8
nvd
около 1 года назад

Open Robotics Robotic Operating System 2 (ROS2) and Nav2 humble versions were discovered to contain a use-after-free via the nav2_amcl process. This vulnerability is triggered via remotely sending a request to change the value of dynamic-parameter`/amcl odom_frame_id` .

EPSS

Процентиль: 34%
0.00135
Низкий

9.1 Critical

CVSS3

Дефекты

CWE-416