CVE-2024-25197

Опубликовано: 20 фев. 2024

Источник: nvd

CVSS3: 6.5

EPSS Низкий

Описание

Open Robotics Robotic Operating Sytstem 2 (ROS2) and Nav2 humble versions were discovered to contain a NULL pointer dereference via the isCurrent() function at /src/layered_costmap.cpp.

Ссылки

https://github.com/ros-planning/navigation2/issues/3940
Exploit
Issue Tracking
https://github.com/ros-planning/navigation2/issues/3958
Exploit
Issue Tracking
Patch
https://github.com/ros-planning/navigation2/issues/3971
Exploit
Issue Tracking
Patch
https://github.com/ros-planning/navigation2/issues/3972
Exploit
Issue Tracking
Patch
https://github.com/ros-planning/navigation2/issues/3940
Exploit
Issue Tracking
https://github.com/ros-planning/navigation2/issues/3958
Exploit
Issue Tracking
Patch
https://github.com/ros-planning/navigation2/issues/3971
Exploit
Issue Tracking
Patch
https://github.com/ros-planning/navigation2/issues/3972
Exploit
Issue Tracking
Patch

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:opennav:nav2:*:*:*:*:*:*:*:*

Версия от 1.1.0 (включая) до 1.1.17 (включая)

Конфигурация 2

cpe:2.3:o:openrobotics:robot_operating_system:2:humble:*:*:*:*:*:*

EPSS

Процентиль: 38%

0.00166

Низкий

6.5 Medium

CVSS3

Дефекты

CWE-476

Связанные уязвимости

GHSA-r3h6-h7mc-hvh5