155 matches found
CVE-2024-37863
Open Robotics Robotic Operating System 2 (ROS2) and Nav2 humble versions are vulnerable to a buffer overflow within the nav2_amcl process. The vulnerability is triggered when the process handles a crafted .yaml file . As a temporary workaround, it is recommended to restrict the use of the nav2_am...
CVE-2024-30964
An Insecure Permissions vulnerability in Open Robotics Robotic Operating System 2 (ROS2) affects the navigation2- ROS2-humble and navigation 2-humble components. A local attacker can exploit this flaw to execute arbitrary code via the initial_pose_sub thread created by nav2_bt_navigator. While a ...
CVE-2024-37861
Open Robotics Robotic Operating System 2 ROS2 and Nav2 humble versions were discovered to contain a buffer overflow via the nav2amcl process. This vulnerability is triggered via sending a crafted .yaml file...
CVE-2024-37862
Buffer Overflow vulnerability in Open Robotic Robotic Operating System 2 ROS2 navigation2- ROS2-humble&& navigation2-humble allows a local attacker to execute arbitrary code via a crafted .yaml file to the nav2planner process...
CVE-2024-37863
Open Robotics Robotic Operating System 2 ROS2 and Nav2 humble versions were discovered to contain a buffer overflow via the nav2amcl process. This vulnerability is triggered via sending a crafted .yaml file...
CVE-2024-30961
CVE-2024-30961 affects Open Robotics ROS2 Navigation2 (navigation2-humble and related nav2_bt_navigator). The vulnerability is described as an insecure permissions issue that enables a local attacker to execute arbitrary code via the error-thrown mechanism in nav2_bt_navigator. CVSS data indicate...
CVE-2024-30962
The vulnerability CVE-2024-30962 affects Open Robotics ROS 2 navigation2 (navigation2-humble) with a buffer overflow in the nav2_amcl process. A local attacker can exploit this to execute arbitrary code. The issue is documented across multiple sources (e.g., NVD, Red Hat, CNNVD, CIRCL) with a CVS...
CVE-2024-30963
A buffer overflow vulnerability exists in the navigation2 component of Open Robotics Robotic Operating System 2 (ROS2) , specifically affecting the ROS2-humble version. This flaw allows a local attacker to achieve arbitrary code execution by providing a crafted script . As of the current document...
CVE-2024-29452
CVE-2024-29452 relates to ROS2 Humble Hawksbill, with insecure deserialization vulnerabilities in ROS2 Humble Hawksbill versions 2 and 3. The issue enables an attacker to execute arbitrary code and obtain sensitive information via crafted input affecting the Data Serialization and Deserialization...
CVE-2024-29450
The published details in PT-2024-22907 indicate a vulnerability affecting ROS2 Humble Hawksbill versions 2, located in the permission and access control components. The issue could allow an attacker to execute arbitrary code, cause a denial of service, escalate privileges, and obtain sensitive in...
CVE-2024-29455
Consolidated data shows a concrete issue in ROS2 Humble Hawksbill: an arbitrary file upload vulnerability in the file upload mechanism affecting versions 2, enabling potential arbitrary code execution, denial of service, and exposure of sensitive information. The root cause and exact affected fil...
CVE-2024-29454
CVE-2024-29454 is rejected/not used; this candidate was withdrawn and does not represent an active vulnerability entry.
CVE-2024-29448
ROS2 Humble Hawksbill (versions 2) is affected by a reported buffer overflow in the C++ components, which could allow arbitrary code execution or a denial of service through improper handling of arrays or strings. Remediation is to update to a version that includes the fix for this issue to mitig...
CVE-2024-29449
CVE-2024-29449 is not a publicly usable vulnerability; connected PT-2024-22905 reports a ROS2 Humble Hawksbill issue where cleartext transmission between ROS2 nodes enables potential MITM access to sensitive data. Affected: ROS2 Humble Hawksbill version 2. Root cause: unencrypted inter-node commu...
CVE-2024-30708
CVE-2024-30708 is rejected/not used; the CNA withdrew it and there is no evidence of a vulnerability.
CVE-2024-30711
CVE-2024-30711 entry is rejected/not used and does not represent an active vulnerability.
CVE-2024-30712
CVE-2024-30712 entry is rejected/not used; this ID does not represent an active vulnerability.
CVE-2024-29441
CVE-2024-29441 entry is rejected/not used per the initial description.
CVE-2024-29447
ROS2 Humble Hawksbill (version 2) is identified in connected sources as having an issue where default configurations allow unauthenticated access via default credentials. This vulnerability surface is tied to the default credential behavior, enabling unauthorized access if defaults are not change...