CVE-2024-37862

CVE-2024-37862 describes a Buffer Overflow in ROS 2 navigation2 (navigation2-humble) affecting the nav2_planner component. A local attacker can execute arbitrary code by providing a crafted .yaml file to the nav2_planner process. Documented impact includes potential full system compromise; CVSS v...

PT-2024-23693 · Open Robotics · Ros2 +1

Name of the Vulnerable Software and Affected Versions: Open Robotics Robotic Operating System 2 ROS2 navigation2- ROS2-humble and navigation 2-humble Description: A Buffer Overflow issue allows a local attacker to execute arbitrary code via a crafted script. This issue exists in the navigation2...

CVE-2024-30962

Buffer Overflow vulnerability in Open Robotics Robotic Operating System 2 ROS2 navigation2- ROS2-humble and navigation 2-humble allows a local attacker to execute arbitrary code via the nav2amcl process...

PT-2024-23692 · Open Robotics · Ros2

Name of the Vulnerable Software and Affected Versions: Open Robotics Robotic Operating System 2 ROS2 navigation2- ROS2-humble and navigation 2-humble Description: A buffer overflow vulnerability exists in Open Robotics Robotic Operating System 2 ROS2, specifically in navigation2- ROS2-humble and...

CVE-2024-30961

Insecure Permissions vulnerability in Open Robotics Robotic Operating System 2 ROS2 navigation2- ROS2-humble and navigation 2-humble allows a local attacker to execute arbitrary code via the error-thrown mechanism in nav2btnavigator...

CVE-2024-37861

Open Robotics Robotic Operating System 2 ROS2 and Nav2 humble versions were discovered to contain a buffer overflow via the nav2amcl process. This vulnerability is triggered via sending a crafted .yaml file...

PT-2024-27792 · Open Robotics · Ros2 +1

Name of the Vulnerable Software and Affected Versions: Open Robotics Robotic Operating System 2 ROS2 and Nav2 humble versions Description: The issue is a buffer overflow that occurs via the nav2 amcl process. This is triggered by sending a crafted .yaml file. Recommendations: For Open Robotics...

CVE-2024-38910

Open Robotics Robotic Operating System 2 ROS2 and Nav2 humble version was discovered to contain a use-after-free in the nav2amcl process. This vulnerability is triggered via sending a request to change dynamic parameters...

CVE-2024-38910

CVE-2024-38910 affects ROS2/Nav2 humble and specifically the nav2_amcl process, where a use-after-free vulnerability is triggered by a request to change dynamic parameters. Reported across Red Hat, NVD, CVE lists and CNVD/CNNVD families, the issue is described as a post-release reuse in nav2_amcl...

The vulnerability of the epoll kernel component in the Linux operating system, which allows a hacker to trigger a service failure

The vulnerability of the epoll kernel component in the Linux operating system is related to improper blocking in the epeventpollpoll function. Exploiting this vulnerability can allow an attacker to cause a service failure...

CVE-2024-30964

CVE-2024-30964 affects ROS2 navigation2 (navigation2-humble) with an Insecure Permissions flaw in the nav2_bt_navigator’s initial_pose_sub thread. A local attacker could execute arbitrary code, as the vulnerability allows local code execution with low privileges and no user interaction required. ...

CVE-2024-38920

Open Robotics Robotic Operating System 2 ROS2 and Nav2 humble versions were discovered to contain a use-after-free via the nav2amcl process. This vulnerability is triggerd via remotely sending a request for change the value of dynamic-parameter/amcl maxbeams...

CVE-2024-38920

Open Robotics Robotic Operating System 2 ROS2 and Nav2 humble versions were discovered to contain a use-after-free via the nav2amcl process. This vulnerability is triggerd via remotely sending a request for change the value of dynamic-parameter/amcl maxbeams...

Nav2 安全漏洞

Nav2 is the ROS community's navigation framework and system for ROS2. A security vulnerability exists in Nav2, which stems from the inclusion of a buffer overflow vulnerability. A local attacker exploiting this vulnerability could execute arbitrary code via a carefully crafted script...

CVE-2024-30963

Buffer Overflow vulnerability in Open Robotics Robotic Operating System 2 ROS2 navigation2- ROS2-humble and navigation 2-humble allows a local attacker to execute arbitrary code via a crafted script...

CVE-2024-30962

Buffer Overflow vulnerability in Open Robotics Robotic Operating System 2 ROS2 navigation2- ROS2-humble and navigation 2-humble allows a local attacker to execute arbitrary code via the nav2amcl process...

CVE-2024-37863

Open Robotics Robotic Operating System 2 ROS2 and Nav2 humble versions were discovered to contain a buffer overflow via the nav2amcl process. This vulnerability is triggered via sending a crafted .yaml file...

CVE-2024-37860

The CVE-2024-37860 entry concerns a buffer overflow in ROS 2 navigation2 (navigation2-humble) affecting the nav2_amcl process. Affected component is navigation2/nav2_amcl; the root cause is a crafted YAML file that can overflow a buffer, enabling a local attacker to execute arbitrary code . The p...

CVE-2024-30961

CVE-2024-30961 affects Open Robotics ROS2 Navigation2 (navigation2-humble and related nav2_bt_navigator). The vulnerability is described as an insecure permissions issue that enables a local attacker to execute arbitrary code via the error-thrown mechanism in nav2_bt_navigator. CVSS data indicate...

The vulnerability of Linux operating system’s DRM/MSM components, which allows a hacker to trigger a service failure

The vulnerability of DRM/SMM components in the Linux operating system is related to resource management errors. Exploiting this vulnerability can allow a hacker to cause service failures...