CVE-2023-39948
Uncaught fastcdr exception (Unexpected CDR type received) crashing fastdds
Summary
Uncaught fastcdr exception (Unexpected CDR type received) crashing fastdds
Original description
The description as published by the source.
eprosima Fast DDS is a C++ implementation of the Data Distribution Service standard of the Object Management Group. Prior to versions 2.10.0 and 2.6.5, the BadParamException thrown by Fast CDR is not caught in Fast DDS. This can remotely crash any Fast DDS process. Versions 2.10.0 and 2.6.5 contain a patch for this issue.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Fix status by distribution
Fixed packages published by each distribution for this CVE
- Debian DEBIAN-CVE-2023-39948 fastdds Fixed in: 2.1.0+ds-9+deb11u1
References
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- advisory debian.org
- report github.com
- web github.com