259 matches found
CVE-2021-38435 RTI Connext DDS Professional and Connext DDS Secure Incorrect Calculation of Buffer Size
RTI Connext DDS Professional and Connext DDS Secure Versions 4.2x to 6.1.0 not correctly calculate the size when allocating the buffer, which may result in a buffer overflow...
CVE-2021-38435
RTI Connext DDS Professional and Connext DDS Secure, versions 4.2x–6.1.0, are affected by CVE-2021-38435 due to an incorrect calculation of buffer size during allocation, which may result in a buffer overflow. Affected products are RTI Connext DDS Professional and Connext DDS Secure (4.2x–6.1.0)....
CVE-2021-38433 RTI Connext DDS Professional and Connext DDS Secure Stack-based Buffer Overflow
RTI Connext DDS Professional and Connext DDS Secure Versions 4.2x to 6.1.0 vulnerable to a stack-based buffer overflow, which may allow a local attacker to execute arbitrary code...
CVE-2021-38433
RTI Connext DDS Professional and Connext DDS Secure versions 4.2.x–6.1.0 are affected by a stack-based buffer overflow (CVE-2021-38433). The issue is disclosed as a stack-based buffer overflow that may allow a local attacker to execute arbitrary code. Connected sources confirm the affected produc...
CVE-2021-38433 RTI Connext DDS Professional and Connext DDS Secure Stack-based Buffer Overflow
RTI Connext DDS Professional and Connext DDS Secure Versions 4.2x to 6.1.0 vulnerable to a stack-based buffer overflow, which may allow a local attacker to execute arbitrary code...
CVE-2021-38427 RTI Connext DDS Professional and Connext DDS Secure Stack-based Buffer Overflow
RTI Connext DDS Professional and Connext DDS Secure Versions 4.2.x to 6.1.0 are vulnerable to a stack-based buffer overflow, which may allow a local attacker to execute arbitrary code...
CVE-2021-38427
RTI Connext DDS Professional and Connext DDS Secure versions 4.2.x–6.1.0 are affected by a stack-based buffer overflow that could allow a local attacker to execute arbitrary code. This vulnerability is documented as CVE-2021-38427. Connected sources confirm the affected product family and version...
CVE-2021-38487 Potential Network Amplification and Information Exposure in RTI Connext Professional and Connext Micro
RTI Connext Professional versions 4.1 to 6.1.0, and Connext Micro versions 2.4 and later are vulnerable when an attacker sends a specially crafted packet to flood target devices with unwanted traffic. This may result in a denial-of-service condition and information exposure...
CVE-2021-38487
RTI Connext DDS products are affected by a network amplification vulnerability: Connext Professional 4.1–6.1.0, Connext Secure 4.2x–6.1.0, and Connext Micro 2.4 and later may be flooded by specially crafted packets, causing DoS and information exposure. Root cause involves processing of external ...
PT-2022-10732 · Real Time Innovations · Rti Connext Professional +2
Name of the Vulnerable Software and Affected Versions: RTI Connext DDS Professional versions 4.2x through 6.1.0 Connext DDS Secure versions 4.2x through 6.1.0 Connext DDS Micro versions 2.4 and later Description: The issue arises when an attacker sends a specially crafted packet to flood target...
PT-2022-10722 · Rti · Connext Dds Secure +1
Name of the Vulnerable Software and Affected Versions: RTI Connext DDS Professional and Connext DDS Secure versions 4.2.x through 6.1.0 Description: The issue is a stack-based buffer overflow that may allow a local attacker to execute arbitrary code. This can potentially lead to unauthorized acce...
PT-2022-10724 · Rti · Connext Dds Secure +1
Name of the Vulnerable Software and Affected Versions: RTI Connext DDS Professional and Connext DDS Secure versions 4.2x through 6.1.0 Description: The issue is a stack-based buffer overflow that may allow a local attacker to execute arbitrary code. This can potentially lead to unauthorized acces...
Real-Time Innovations Connext Dds Secure 输入验证错误漏洞
Real-Time Innovations Connext Dds Secure is a trusted software connectivity framework from Real-Time Innovations, Inc. It is used to build and protect system-of-systems. An input validation error vulnerability exists in Real-Time Innovations Connext Dds Secure, which stems from a failure to...
Connext Dds多款产品缓冲区错误漏洞
Real-Time Innovations Connext Dds Professional and Connext Dds Secure are both products of Real-Time Innovations, Inc. Connext Dds Professional is a software framework designed to meet the demanding connectivity requirements of autonomous systems. Connext Dds Secure is a trusted software...
Connext Dds 多款产品缓冲区错误漏洞
Real-Time Innovations Connext Dds Professional and Connext Dds Secure are both products of Real-Time Innovations, Inc. Connext Dds Professional is a software framework designed to meet the demanding connectivity requirements of autonomous systems. Connext Dds Secure is a trusted software...
Real-Time Innovations Connext Dds多款产品缓冲区错误漏洞
Real-Time Innovations Connext Dds Professional and Connext Dds Secure are both products of Real-Time Innovations, Inc. Connext Dds Professional is a software framework designed to meet the demanding connectivity requirements of autonomous systems. Connext Dds Secure is a trusted software...
Multiple Data Distribution Service (DDS) Implementations (Update A)
1. EXECUTIVE SUMMARY CVSS v3 8.6 ATTENTION: Exploitable remotely/low attack complexity Vendors: Eclipse, eProsima, GurumNetworks, Object Computing, Inc. OCI, Real-Time Innovations RTI, TwinOaks Computing Equipment: CycloneDDS, FastDDS, GurumDDS, OpenDDS, Connext DDS Professional, Connext DDS...
RTI Connext DDS 5.1.1.x < 5.1.1.5 / 5.2.3.x < 5.2.3.17 / 5.2.7 Multiple Vulnerabilities
The version of Real Time Innovations RTI Connext Data Distribution Service DDS installed on the remote Windows host is 5.1.1.x prior to 5.1.1.5 or 5.2.3.x prior to either 5.2.3.17 or 5.2.7. It is, therefore, affected by multiple vulnerabilities : - A heap-based buffer overflow condition exists th...