81 matches found
PT-2024-23551 · Ros · Ros
Name of the Vulnerable Software and Affected Versions: ROS Robot Operating System Melodic Morenia version 1 Description: An issue was discovered in the default configurations of ROS, allowing unauthenticated attackers to gain access using default credentials, posing a serious threat to the...
PT-2024-23549 · Unknown · Ros Melodic Morenia
Name of the Vulnerable Software and Affected Versions: ROS Melodic Morenia versions where ROS VERSION is 1 and ROS PYTHON VERSION is 3 Description: An unauthorized access issue has been discovered, potentially allowing a malicious user to gain unauthorized information access to multiple ROS nodes...
PT-2024-23550 · Unknown · Ros Melodic Morenia
Name of the Vulnerable Software and Affected Versions: ROS Robot Operating System Melodic Morenia versions 1 Description: An issue was discovered where the system transmits messages in plaintext, exposing sensitive information and making it vulnerable to man-in-the-middle MitM attacks. This allow...
DEBIAN-CVE-2021-37146
An infinite loop in Open Robotics roscomm XMLRPC server in ROS Melodic through 1.4.11 and ROS Noetic through1.15.11 allows remote attackers to cause a Denial of Service in roscomm via a crafted XMLRPC call...
CVE-2021-37146
An infinite loop in Open Robotics roscomm XMLRPC server in ROS Melodic through 1.4.11 and ROS Noetic through1.15.11 allows remote attackers to cause a Denial of Service in roscomm via a crafted XMLRPC call...
CVE-2021-37146
An infinite loop in Open Robotics roscomm XMLRPC server in ROS Melodic through 1.4.11 and ROS Noetic through1.15.11 allows remote attackers to cause a Denial of Service in roscomm via a crafted XMLRPC call...
Open redirect
An infinite loop in Open Robotics roscomm XMLRPC server in ROS Melodic through 1.4.11 and ROS Noetic through1.15.11 allows remote attackers to cause a Denial of Service in roscomm via a crafted XMLRPC call...
CVE-2021-37146
CVE-2021-37146 involves an infinite loop in the Open Robotics ros_comm XMLRPC server, affecting ROS Melodic <=1.4.11 and ROS Noetic
CVE-2021-37146
An infinite loop in Open Robotics roscomm XMLRPC server in ROS Melodic through 1.4.11 and ROS Noetic through1.15.11 allows remote attackers to cause a Denial of Service in roscomm via a crafted XMLRPC call...
CVE-2021-37146
An infinite loop in Open Robotics roscomm XMLRPC server in ROS Melodic through 1.4.11 and ROS Noetic through1.15.11 allows remote attackers to cause a Denial of Service in roscomm via a crafted XMLRPC call...
OpenRobotics ros_comm 安全漏洞
OpenRobotics roscomm is a communication package for a robotics development platform from the Open Source Robotics Foundation Openrobotics. A security vulnerability in the Open Robotics roscomm XMLRPC service in ROS Melodic 1.4.11 and earlier and ROS Noetic 1.15.11 and earlier can be exploited by ...
CVE-2021-37146: Loop with Unreachable Exit Condition
An infinite loop in Open Robotics roscomm XMLRPC server in ROS Melodic through 1.4.11 and ROS Noetic through1.15.11 allows remote attackers to cause a Denial of Service in roscomm via a crafted XMLRPC call...
CVE-2021-37146
An infinite loop in Open Robotics roscomm XMLRPC server in ROS Melodic through 1.4.11 and ROS Noetic through1.15.11 allows remote attackers to cause a Denial of Service in roscomm via a crafted XMLRPC call...
UBUNTU-CVE-2021-37146
An infinite loop in Open Robotics roscomm XMLRPC server in ROS Melodic through 1.4.11 and ROS Noetic through1.15.11 allows remote attackers to cause a Denial of Service in roscomm via a crafted XMLRPC call...
PT-2021-21529
Name of the Vulnerable Software and Affected Versions ROS Melodic versions 1.4.11 and earlier ROS Noetic versions 1.15.11 and earlier Description The issue is related to an infinite loop in the Open Robotics ros comm XMLRPC server, which allows remote attackers to cause a Denial of Service in ros...
Design/Logic Flaw
An issue was discovered in the ROS communications-related packages aka roscomm or ros-melodic-ros-comm through 1.14.3. ROSASSERTMSG only works when ROSASSERTENABLED is defined. This leads to a problem in the remove function in clients/roscpp/src/libros/spinner.cpp. When ROSASSERTENABLED is not...
CVE-2019-13465
CVE-2019-13465 affects ROS communications-related packages (ros_comm/ros-melodic-ros-comm) through 1.14.3. The root cause is that ROS_ASSERT_MSG only works when ROS_ASSERT_ENABLED is defined; when not defined, the iterator loop in remove() (clients/roscpp/src/libros/spinner.cpp) can run out of th...
CVE-2019-13465
An issue was discovered in the ROS communications-related packages aka roscomm or ros-melodic-ros-comm through 1.14.3. ROSASSERTMSG only works when ROSASSERTENABLED is defined. This leads to a problem in the remove function in clients/roscpp/src/libros/spinner.cpp. When ROSASSERTENABLED is not...
CVE-2019-13445: Integer Overflow or Wraparound
An issue was discovered in the ROS communications-related packages aka roscomm or ros-melodic-ros-comm through 1.14.3. parseOptions in tools/rosbag/src/record.cpp has an integer overflow when a crafted split option can be entered on the command line...
CVE-2019-13465: Undefined Security Weakness
An issue was discovered in the ROS communications-related packages aka roscomm or ros-melodic-ros-comm through 1.14.3. ROSASSERTMSG only works when ROSASSERTENABLED is defined. This leads to a problem in the remove function in clients/roscpp/src/libros/spinner.cpp. When ROSASSERTENABLED is not...