303 matches found
PT-2024-20811 · Open Robotics · Ros2 +1
Name of the Vulnerable Software and Affected Versions: Open Robotics Robotic Operating System 2 ROS2 and Nav2 humble versions Description: The issue is related to an inappropriate pointer order of map sub and map freemap in the amcl node.cpp file, leading to a use-after-free. Recommendations: For...
PT-2024-20810 · Open Robotics · Ros2
Name of the Vulnerable Software and Affected Versions: Open Robotics Robotic Operating System 2 ROS2 and Nav2 humble versions Description: The issue arises from an inappropriate pointer order of laser scan filter .reset and tf listener .reset in the amcl node.cpp file, leading to a use-after-free...
PT-2024-20809 · Open Robotics · Ros2 +1
Name of the Vulnerable Software and Affected Versions: Open Robotics Robotic Operating Sytstem 2 ROS2 and Nav2 humble versions Description: A NULL pointer dereference issue was discovered via the isCurrent function at /src/layered costmap.cpp. This issue affects the navigation capabilities of the...
Nav2 Security Vulnerability
Nav2 is a navigation framework and system for ROS2. A security vulnerability exists in Nav2 that stems from an incorrect pointer order that can lead to reuse after release...
Nav2 Security Vulnerability
Nav2 is a navigation framework and system for ROS2. A security vulnerability exists in Nav2 that stems from a buffer overflow that can be caused by sending a carefully crafted yaml file...
Command injection
OS command injection vulnerability in command processing or system call componentsROS2 Robot Operating System 2 Foxy Fitzroy, with ROSVERSION=2 and ROSPYTHONVERSION=3 allows attackers to run arbitrary commands...
Number withdrawn
Robot Operating System is a meta-operating system for robots. This CVE number has been withdrawn...
CVE-2023-51197
An issue in ROS2 Foxy Fitzroy allows command injection through shell command execution when ROS_VERSION=2 and ROS_PYTHON_VERSION=3. Root cause: vulnerable shell command pathway in ROS2. Impact: arbitrary commands and potential further effects as described. No exploit details provided in the docum...
PT-2024-14070 · Unknown · Ros2 Foxy Fitzroy
Name of the Vulnerable Software and Affected Versions: ROS2 Foxy Fitzroy versions 2 Description: Insecure deserialization in ROS2 allows attackers to execute arbitrary code via a crafted input. The issue affects ROS2 Foxy Fitzroy with ROS VERSION=2 and ROS PYTHON VERSION=3. Recommendations: For...
PT-2024-14064 · Ros2 · Ros2
Name of the Vulnerable Software and Affected Versions: ROS2 Robot Operating System 2 Foxy Fitzroy Description: An issue was discovered in shell command execution in ROS2, allowing an attacker to run arbitrary commands and cause other impacts. The issue is related to the ROS VERSION=2 and ROS PYTH...
Number withdrawn
Robot Operating System is a meta-operating system for robots. This CVE number has been withdrawn...
PT-2024-14069 · Ros2 · Ros2
Name of the Vulnerable Software and Affected Versions: ROS2 Robot Operating System 2 versions Foxy Fitzroy Description: The issue is an OS command injection vulnerability in command processing or system call components. This allows attackers to run arbitrary commands. The ROS VERSION is 2 and ROS...
PT-2024-14071 · Unknown · Ros2 Foxy Fitzroy
Name of the Vulnerable Software and Affected Versions: ROS2 Foxy Fitzroy version 2 Description: An Arbitrary File Upload issue allows attackers to run arbitrary code and cause other impacts via the upload of a crafted file. Recommendations: For ROS2 Foxy Fitzroy version 2, consider restricting fi...
PT-2024-14068 · Ros2 · Ros2
Name of the Vulnerable Software and Affected Versions: ROS2 Robot Operating System 2 Foxy Fitzroy versions 2 Description: The issue allows attackers to access sensitive information via a man-in-the-middle attack due to cleartext transmission. This can be exploited to gain unauthorized access to...
Number withdrawn
ROS2 Foxy Fitzroy is an application of the ROS2 organization. This CVE number has been withdrawn...
Number withdrawn
ROS2 Foxy Fitzroy is an application of the ROS2 organization. This CVE number has been withdrawn...
PT-2024-14066 · Unknown · Ros2 Foxy Fitzroy
Name of the Vulnerable Software and Affected Versions: ROS2 Foxy Fitzroy version 2 Description: A buffer overflow issue exists due to improper handling of arrays or strings, allowing attackers to run arbitrary code or cause a denial of service. Recommendations: For ROS2 Foxy Fitzroy version 2, at...
Number withdrawn
ROS2 Foxy Fitzroy is an application of the ROS2 organization. This CVE number has been withdrawn...
