Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2019-13445

Опубликовано: 30 дек. 2019
Источник: nvd
CVSS3: 9.8
CVSS2: 7.5
EPSS Низкий

Описание

An issue was discovered in the ROS communications-related packages (aka ros_comm or ros-melodic-ros-comm) through 1.14.3. parseOptions() in tools/rosbag/src/record.cpp has an integer overflow when a crafted split option can be entered on the command line.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:ros:ros-comm:*:*:*:*:*:*:*:*
Версия до 1.14.3 (включая)

EPSS

Процентиль: 66%
0.0051
Низкий

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-190

Связанные уязвимости

CVSS3: 9.8
ubuntu
около 6 лет назад

An issue was discovered in the ROS communications-related packages (aka ros_comm or ros-melodic-ros-comm) through 1.14.3. parseOptions() in tools/rosbag/src/record.cpp has an integer overflow when a crafted split option can be entered on the command line.

CVSS3: 9.8
debian
около 6 лет назад

An issue was discovered in the ROS communications-related packages (ak ...

github
больше 3 лет назад

An issue was discovered in the ROS communications-related packages (aka ros_comm or ros-melodic-ros-comm) through 1.14.3. parseOptions() in tools/rosbag/src/record.cpp has an integer overflow when a crafted split option can be entered on the command line.

EPSS

Процентиль: 66%
0.0051
Низкий

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-190