CVE-2021-38445

Publication date

2022-05-05 15:17:32

Family

icscert

State

PUBLISHED

Description

OCI OpenDDS versions prior to 3.18.1 do not handle a length parameter consistent with the actual length of the associated data, which may allow an attacker to remotely execute arbitrary code.