CVE-2023-50257

ROS2 CVE-2023-50257 Reproduction 🔍 Обзор Этот репозиторий основан на PoC для CVE-2023-50257 и автоматизирует сбор RTPS-пакетов, разбор значений GUID и отправку успешного DoS-пакета. CVE-2023-50257 — известная уязвимость в ROS2 Robot Operating System 2...

CVE-2024-37860: Improper Control of Generation of Code

Buffer Overflow vulnerability in Open Robotic Operating System 2 ROS2 navigation2- ROS2-humble&& navigation2-humble allows a local attacker to execute arbitrary code via a crafted .yaml file to the nav2amcl process...

CVE-2024-30961: Improper Control of Generation of Code

Insecure Permissions vulnerability in Open Robotics Robotic Operating System 2 ROS2 navigation2- ROS2-humble and navigation 2-humble allows a local attacker to execute arbitrary code via the error-thrown mechanism in nav2btnavigator...

CVE-2024-30962: Buffer Copy without Checking Size of Input

Buffer Overflow vulnerability in Open Robotics Robotic Operating System 2 ROS2 navigation2- ROS2-humble and navigation 2-humble allows a local attacker to execute arbitrary code via the nav2amcl process...

CVE-2024-37862: Improper Control of Generation of Code

Buffer Overflow vulnerability in Open Robotic Robotic Operating System 2 ROS2 navigation2- ROS2-humble&& navigation2-humble allows a local attacker to execute arbitrary code via a crafted .yaml file to the nav2planner process...

CVE-2024-30963: Improper Control of Generation of Code

Buffer Overflow vulnerability in Open Robotics Robotic Operating System 2 ROS2 navigation2- ROS2-humble and navigation 2-humble allows a local attacker to execute arbitrary code via a crafted script...

CVE-2024-30964: Improper Control of Generation of Code

Insecure Permissions vulnerability in Open Robotics Robotic Operating System 2 ROS2 navigation2- ROS2-humble and navigation 2-humble allows a local attacker to execute arbitrary code via the initialposesub thread created by nav2btnavigator...

CVE-2024-29448

ROS2 Humble Hawksbill (versions 2) is affected by a reported buffer overflow in the C++ components, which could allow arbitrary code execution or a denial of service through improper handling of arrays or strings. Remediation is to update to a version that includes the fix for this issue to mitig...

CVE-2024-29455

Consolidated data shows a concrete issue in ROS2 Humble Hawksbill: an arbitrary file upload vulnerability in the file upload mechanism affecting versions 2, enabling potential arbitrary code execution, denial of service, and exposure of sensitive information. The root cause and exact affected fil...

CVE-2024-29447

ROS2 Humble Hawksbill (version 2) is identified in connected sources as having an issue where default configurations allow unauthenticated access via default credentials. This vulnerability surface is tied to the default credential behavior, enabling unauthorized access if defaults are not change...

CVE-2024-29445

This CVE entry is rejected and not used; it does not represent an active vulnerability entry.

CVE-2024-29440

The connected PT-2024-22898 entry describes a vulnerability affecting ROS2 Humble Hawksbill, specifically versions where ROS VERSION is 2 and ROS PYTHON VERSION is 3. Affected component(s) are ROS2 nodes exposed remotely; the issue is an unauthorized access vulnerability that could allow a malici...