CVE-2019-13566

2019-11-2221:15:10

Google

osv.dev

8.3 High

AI Score

Confidence

High

0.012 Low

EPSS

Percentile

85.1%

JSON

An issue was discovered in the ROS communications-related packages (aka ros_comm or ros-melodic-ros-comm) through 1.14.3. A buffer overflow allows attackers to cause a denial of service and possibly execute arbitrary code via an IP address with a long hostname.

CPENameOperatorVersion
ros_comm-releaseeq1.13.1
ros_comm-releaseeq1.12.1
ros_comm-releaseequpstream/1.9.17
ros_comm-releaseequpstream/1.9.51
ros_comm-releaseequpstream/1.11.1
ros_comm-releaseeq1.11.12
ros_comm-releaseeq1.9.19
ros_comm-releaseeq1.9.18
ros_comm-releaseeqNone/1.8.16
ros_comm-releaseeq1.11.8

Name	Operator	Version
ros_comm-release	eq	1.13.1
ros_comm-release	eq	1.12.1
ros_comm-release	eq	upstream/1.9.17
ros_comm-release	eq	upstream/1.9.51
ros_comm-release	eq	upstream/1.11.1
ros_comm-release	eq	1.11.12
ros_comm-release	eq	1.9.19
ros_comm-release	eq	1.9.18
ros_comm-release	eq	None/1.8.16
ros_comm-release	eq	1.11.8