FastDDS heap buffer overflow when publisher sends malformed packet
概要
FastDDS heap buffer overflow when publisher sends malformed packet
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
FastDDS is a C++ implementation of the DDS (Data Distribution Service) standard of the OMG (Object Management Group). Prior to versions 2.14.1, 2.13.5, 2.10.4, and 2.6.8, when a publisher serves malformed RTPS packet, heap buffer overflow occurs on the subscriber. This can remotely crash any Fast-DDS process, potentially leading to a DOS attack. Versions 2.14.1, 2.13.5, 2.10.4, and 2.6.8 contain a patch for the issue.
出典: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
ディストリビューション別の修正状況
各ディストリビューションが公開している、この CVE の修正パッケージ
- Debian DEBIAN-CVE-2024-30259 fastdds
参照URL
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- web drive.google.com
- web vimeo.com