Beveiligingsadvies

CVE-2024-30258

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2024-05-13 14:41:52

Laatst bijgewerkt 2024-08-02 01:32:05

Toegewezen door GitHub_M

CVSS-score 8.2

Status PUBLISHED

Beschrijving

FastDDS is a C++ implementation of the DDS (Data Distribution Service) standard of the OMG (Object Management Group). Prior to versions 2.14.1, 2.13.5, 2.10.4, and 2.6.8, when a publisher serves a malformed `RTPS` packet, the subscriber crashes when creating `pthread`. This can remotely crash any Fast-DDS process, potentially leading to a DOS attack. Versions 2.14.1, 2.13.5, 2.10.4, and 2.6.8 contain a patch for the issue.

← Alle CVE's bekijken Bekijk op cve.org ↗