This page tracks the Debian fix status. The vulnerability itself is described on the main CVE page. View CVE-2019-13445 →

DEBIAN-CVE-2019-13445

An issue was discovered in the ROS communications-related packages (aka ros_comm or ros-melodic-ros-comm) through 1.14.3. parseOptions() in tools/rosb...

Original description

The description as published by the source.

An issue was discovered in the ROS communications-related packages (aka ros_comm or ros-melodic-ros-comm) through 1.14.3. parseOptions() in tools/rosbag/src/record.cpp has an integer overflow when a crafted split option can be entered on the command line.

Source: OSV.dev (Open Source Vulnerabilities) OSV

Affected packages

Debian:12 ros-ros-comm

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.3+ds1-11"}]}]

Debian:13 ros-ros-comm

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.3+ds1-11"}]}]

Debian:14 ros-ros-comm

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.3+ds1-11"}]}]

References

advisory security-tracker.debian.org