Lucene search
K

562 matches found

OSV
OSV
added 2024/02/19 8:15 p.m.5 views

DEBIAN-CVE-2023-50257

eProsima Fast DDS formerly Fast RTPS is a C++ implementation of the Data Distribution Service standard of the Object Management Group. Even with the application of SROS2, due to the issue where the data pUD and guid values used to disconnect between nodes are not encrypted, a vulnerability has be...

9.6CVSS8.3AI score0.00167EPSS
Exploits0References1
NVD
NVD
added 2024/02/19 8:15 p.m.19 views

CVE-2023-50257

eProsima Fast DDS formerly Fast RTPS is a C++ implementation of the Data Distribution Service standard of the Object Management Group. Even with the application of SROS2, due to the issue where the data pUD and guid values used to disconnect between nodes are not encrypted, a vulnerability has be...

9.6CVSS9.2AI score0.00167EPSS
Exploits0References5
Prion
Prion
added 2024/02/19 8:15 p.m.15 views

Design/Logic Flaw

eProsima Fast DDS formerly Fast RTPS is a C++ implementation of the Data Distribution Service standard of the Object Management Group. Even with the application of SROS2, due to the issue where the data pUD and guid values used to disconnect between nodes are not encrypted, a vulnerability has be...

5.8CVSS7.2AI score0.00167EPSS
Exploits0References5
OSV
OSV
added 2024/02/19 8:15 p.m.5 views

UBUNTU-CVE-2023-50257

eProsima Fast DDS formerly Fast RTPS is a C++ implementation of the Data Distribution Service standard of the Object Management Group. Even with the application of SROS2, due to the issue where the data pUD and guid values used to disconnect between nodes are not encrypted, a vulnerability has be...

9.6CVSS5.8AI score0.00167EPSS
Exploits0References4
CVE
CVE
added 2024/02/19 7:22 p.m.99 views

CVE-2023-50257

CVE-2023-50257 affects eProsima Fast DDS (Fast RTPS) with SROS2. The issue: RTPS Disconnect packets (p[UD]/guid) are not encrypted, enabling a malicious actor to forcibly disconnect a Subscriber and deny connections by sending disconnect packets to 239.255.0.1:7400 using the Publisher ID. Impact ...

9.6CVSS9.2AI score0.00167EPSS
Exploits0References5Affected Software1
OSV
OSV
added 2024/02/19 7:22 p.m.23 views

CVE-2023-50257 Disconnect Vulnerability in RTPS Packets Used by SROS2

eProsima Fast DDS formerly Fast RTPS is a C++ implementation of the Data Distribution Service standard of the Object Management Group. Even with the application of SROS2, due to the issue where the data pUD and guid values used to disconnect between nodes are not encrypted, a vulnerability has be...

9.6CVSS9AI score0.00167EPSS
Exploits0References7
Debian CVE
Debian CVE
added 2024/02/19 7:22 p.m.9 views

CVE-2023-50257

eProsima Fast DDS formerly Fast RTPS is a C++ implementation of the Data Distribution Service standard of the Object Management Group. Even with the application of SROS2, due to the issue where the data pUD and guid values used to disconnect between nodes are not encrypted, a vulnerability has be...

9.6CVSS9.2AI score0.00167EPSS
Exploits0
Cvelist
Cvelist
added 2024/02/19 7:22 p.m.13 views

CVE-2023-50257 Disconnect Vulnerability in RTPS Packets Used by SROS2

eProsima Fast DDS formerly Fast RTPS is a C++ implementation of the Data Distribution Service standard of the Object Management Group. Even with the application of SROS2, due to the issue where the data pUD and guid values used to disconnect between nodes are not encrypted, a vulnerability has be...

9.6CVSS9.4AI score0.00167EPSS
Exploits0References5
Vulnrichment
Vulnrichment
added 2024/02/19 7:22 p.m.10 views

CVE-2023-50257 Disconnect Vulnerability in RTPS Packets Used by SROS2

eProsima Fast DDS formerly Fast RTPS is a C++ implementation of the Data Distribution Service standard of the Object Management Group. Even with the application of SROS2, due to the issue where the data pUD and guid values used to disconnect between nodes are not encrypted, a vulnerability has be...

9.6CVSS6.8AI score0.00167EPSS
Exploits0References5
CNNVD
CNNVD
added 2024/02/19 12:0 a.m.4 views

eProsima Fast DDS Access Control Error Vulnerability

eProsima Fast DDS is the C++ implementation of eProsima's OMG Object Management Group DDS Data Distribution Service standard. An access control error vulnerability exists in eProsima Fast DDS versions prior to 2.13.0, 2.12.2, 2.11.3, 2.10.3, and 2.6.7, which stems from a security issue in the RTP...

9.6CVSS6.6AI score0.00167EPSS
Exploits0References6
RedHat Linux
RedHat Linux
added 2024/02/07 1:34 p.m.2 views

gimp: dds buffer overflow RCE

A parsing vulnerability was found in the GNU Image Manipulation Program GIMP. This flaw allows an unauthenticated, remote attacker to trick a GIMP user into opening a malicious DDS file, possibly enabling the execution of unauthorized code within the GIMP process...

7.8CVSS6AI score0.11742EPSS
Exploits0References6
Amazon
Amazon
added 2024/01/22 12:0 a.m.2 views

Important: ImageMagick

Issue Overview: Integer overflow in MagickCore/profile.c in ImageMagick before 7.0.2-1 allows remote attackers to cause a denial of service segmentation fault or possibly execute arbitrary code via vectors involving the offset variable. CVE-2016-5841 ImageMagick 7.0.7-12 Q16, a CPU exhaustion...

9.8CVSS9.1AI score0.22748EPSS
Exploits53
BDU FSTEC
BDU FSTEC
added 2023/12/04 12:0 a.m.2 views

The vulnerability of the Fast DDS library lies in the use of memory after it is freed, allowing a attacker to cause a service failure.

The vulnerability of the Fast DDS library is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker who operates remotely to cause a service failure...

9CVSS7.2AI score0.0022EPSS
Exploits1References5Affected Software2
OpenVAS
OpenVAS
added 2023/12/01 12:0 a.m.18 views

Debian: Security Advisory (DLA-3677-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS5.6AI score0.11742EPSS
Exploits0References4
Debian
Debian
added 2023/11/30 5:15 p.m.25 views

[SECURITY] [DLA 3677-1] gimp-dds security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3677-1 [email protected] https://www.debian.org/lts/security/ Adrian Bunk November 30, 2023 https://wiki.debian.org/LTS -...

7.8CVSS6.7AI score0.11742EPSS
Exploits0
OSV
OSV
added 2023/11/30 12:0 a.m.14 views

DLA-3677-1 gimp-dds - security update

Bulletin has no description...

7.8CVSS6.2AI score0.11742EPSS
Exploits0
Tenable Nessus
Tenable Nessus
added 2023/11/30 12:0 a.m.21 views

Debian dla-3677 : gimp-dds - security update

The remote Debian 10 host has a package installed that is affected by a vulnerability as referenced in the dla-3677 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3677-1 [email protected] https://www.debian.org/lts/security/...

7.8CVSS7.4AI score0.11742EPSS
Exploits0References4
Veracode
Veracode
added 2023/11/28 12:57 p.m.21 views

Remote Code Execution

GIMP GNU Image Manipulation Program is vulnerable to Remote Code Execution RCE. The vulnerability is caused due to a parsing flaw which allows an unauthenticated, remote attacker to trick a GIMP user into opening a malicious DDS file. This can lead to the execution of unauthorized code within the...

7.8CVSS7.8AI score0.11742EPSS
Exploits0References3Affected Software2
Tenable Nessus
Tenable Nessus
added 2023/11/27 12:0 a.m.18 views

Debian DSA-5568-1 : fastdds - security update

The remote Debian 12 host has packages installed that are affected by a vulnerability as referenced in the dsa-5568 advisory. It was discovered that incorrect memory management in Fast DDS, a C++ implementation of the DDS Data Distribution Service might result in denial of service. The oldstable...

8.6CVSS7.2AI score0.0022EPSS
Exploits1References6
SUSE CVE
SUSE CVE
added 2023/11/16 1:54 a.m.1 views

SUSE CVE-2023-44441

GIMP DDS File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page o...

7.8CVSS7.6AI score0.11742EPSS
Exploits0References6
Rows per page
Query Builder