ros2_CVE-2024-28231

This repo includes a vulnerable Docker image of ros2 iron based on ubuntu 22 and a matching exploit. We exploit the vulnerability in fastrtps version 2.10.3, enabling denial of service of a remote subscriber via heap buffer overflow. Vulnerable base image Fast RTPS version 2.10.3 and dependencies...

CVE-2024-30678

CVE-2024-30678 is rejected/not used and does not represent an active vulnerability entry.

PT-2024-23569

Name of the Vulnerable Software and Affected Versions ROS2 Iron Irwini versions ROS VERSION 2 and ROS PYTHON VERSION 3 Description An arbitrary file upload issue has been discovered, allowing attackers to execute arbitrary code via a crafted payload to the file upload mechanism. This affects the...

PT-2024-23561 · Unknown · Ros2 Iron Irwini

Name of the Vulnerable Software and Affected Versions: ROS2 Iron Irwini versions 2 Description: An issue was discovered in the default configurations of ROS2 Iron Irwini, allowing unauthenticated attackers to authenticate using default credentials. Recommendations: For ROS2 Iron Irwini version 2,...

PT-2024-23567 · Ros2 · Ros2

Name of the Vulnerable Software and Affected Versions: ROS2 Iron Irwini versions ROS VERSION 2 and ROS PYTHON VERSION 3 Description: An issue was discovered that allows remote attackers to execute arbitrary code via packages or nodes within the ROS2 system. Recommendations: For ROS2 Iron Irwini...