CVE-2023-39947

2023-08-1114:15:13

Debian Security Bug Tracker

security-tracker.debian.org

eprosima fast dds

heap overflow

vulnerability

patch

versions

0.0005 Low

EPSS

Percentile

16.5%

JSON

eprosima Fast DDS is a C++ implementation of the Data Distribution Service standard of the Object Management Group. Prior to versions 2.11.1, 2.10.2, 2.9.2, and 2.6.6, even after the fix at commit 3492270, malformed PID_PROPERTY_LIST parameters cause heap overflow at a different program counter. This can remotely crash any Fast-DDS process. Versions 2.11.1, 2.10.2, 2.9.2, and 2.6.6 contain a patch for this issue.

OSVersionArchitecturePackageVersionFilename
Debian12allfastdds< 2.9.1+ds-1+deb12u1fastdds_2.9.1+ds-1+deb12u1_all.deb
Debian11allfastdds< 2.1.0+ds-9+deb11u1fastdds_2.1.0+ds-9+deb11u1_all.deb
Debian999allfastdds< 2.10.1+ds-3fastdds_2.10.1+ds-3_all.deb
Debian13allfastdds< 2.10.1+ds-3fastdds_2.10.1+ds-3_all.deb

OS	Version	Architecture	Package	Version	Filename
Debian	12	all	fastdds	< 2.9.1+ds-1+deb12u1	fastdds_2.9.1+ds-1+deb12u1_all.deb
Debian	11	all	fastdds	< 2.1.0+ds-9+deb11u1	fastdds_2.1.0+ds-9+deb11u1_all.deb
Debian	999	all	fastdds	< 2.10.1+ds-3	fastdds_2.10.1+ds-3_all.deb
Debian	13	all	fastdds	< 2.10.1+ds-3	fastdds_2.10.1+ds-3_all.deb

0.0005 Low

EPSS

Percentile

16.5%

JSON

Related for DEBIANCVE:CVE-2023-39947