ros2_CVE-2024-28231

Este repositorio incluye una imagen Docker vulnerable de ros2 iron basada en ubuntu 22 y un exploit correspondiente. Explotamos la vulnerabilidad en fastrtps versión 2.10.3, permitiendo la denegación de servicio de un suscriptor remoto mediante un desbordamiento de búfer en el heap. Vulnerable ba...

CVE-2024-30678

CVE-2024-30678 is rejected/not used and does not represent an active vulnerability entry.

PT-2024-23561 · Unknown · Ros2 Iron Irwini

Name of the Vulnerable Software and Affected Versions: ROS2 Iron Irwini versions 2 Description: An issue was discovered in the default configurations of ROS2 Iron Irwini, allowing unauthenticated attackers to authenticate using default credentials. Recommendations: For ROS2 Iron Irwini version 2,...

PT-2024-23567 · Ros2 · Ros2

Name of the Vulnerable Software and Affected Versions: ROS2 Iron Irwini versions ROS VERSION 2 and ROS PYTHON VERSION 3 Description: An issue was discovered that allows remote attackers to execute arbitrary code via packages or nodes within the ROS2 system. Recommendations: For ROS2 Iron Irwini...