CVE-2024-30258

Опубликовано: 14 мая 2024

Источник: nvd

CVSS3: 8.2

CVSS3: 7.5

EPSS Низкий

Описание

FastDDS is a C++ implementation of the DDS (Data Distribution Service) standard of the OMG (Object Management Group). Prior to versions 2.14.1, 2.13.5, 2.10.4, and 2.6.8, when a publisher serves a malformed RTPS packet, the subscriber crashes when creating pthread. This can remotely crash any Fast-DDS process, potentially leading to a DOS attack. Versions 2.14.1, 2.13.5, 2.10.4, and 2.6.8 contain a patch for the issue.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:eprosima:fast_dds:*:*:*:*:*:*:*:*

Версия до 2.6.8 (исключая)

cpe:2.3:a:eprosima:fast_dds:*:*:*:*:*:*:*:*

Версия от 2.10.0 (включая) до 2.10.4 (исключая)

cpe:2.3:a:eprosima:fast_dds:*:*:*:*:*:*:*:*

Версия от 2.13.0 (включая) до 2.13.5 (исключая)

cpe:2.3:a:eprosima:fast_dds:2.14.0:*:*:*:*:*:*:*

EPSS

Процентиль: 79%

0.01297

Низкий

8.2 High

CVSS3

7.5 High

CVSS3

Дефекты

CWE-20

NVD-CWE-noinfo

Связанные уязвимости

CVE-2024-30258

CVSS3: 8.2

ubuntu

больше 1 года назад

FastDDS is a C++ implementation of the DDS (Data Distribution Service) standard of the OMG (Object Management Group). Prior to versions 2.14.1, 2.13.5, 2.10.4, and 2.6.8, when a publisher serves a malformed `RTPS` packet, the subscriber crashes when creating `pthread`. This can remotely crash any Fast-DDS process, potentially leading to a DOS attack. Versions 2.14.1, 2.13.5, 2.10.4, and 2.6.8 contain a patch for the issue.

CVE-2024-30258

CVSS3: 8.2

debian

больше 1 года назад

FastDDS is a C++ implementation of the DDS (Data Distribution Service) ...

EPSS

Процентиль: 79%

0.01297

Низкий

8.2 High

CVSS3

7.5 High

CVSS3

Дефекты

CWE-20

NVD-CWE-noinfo