16 matches found
CVE-2021-38429
OCI OpenDDS versions prior to 3.18.1 are vulnerable when an attacker sends a specially crafted packet to flood target devices with unwanted traffic, which may result in a denial-of-service condition and information exposure...
CVE-2021-38429
OCI OpenDDS versions prior to 3.18.1 are vulnerable when an attacker sends a specially crafted packet to flood target devices with unwanted traffic, which may result in a denial-of-service condition and information exposure...
CVE-2021-38447
OCI OpenDDS versions prior to 3.18.1 are vulnerable when an attacker sends a specially crafted packet to flood target devices with unwanted traffic, which may result in a denial-of-service condition...
CVE-2021-38429
OCI OpenDDS versions prior to 3.18.1 are vulnerable when an attacker sends a specially crafted packet to flood target devices with unwanted traffic, which may result in a denial-of-service condition and information exposure...
CVE-2021-38447
OCI OpenDDS versions prior to 3.18.1 are vulnerable when an attacker sends a specially crafted packet to flood target devices with unwanted traffic, which may result in a denial-of-service condition...
CVE-2021-38445
OCI OpenDDS versions prior to 3.18.1 do not handle a length parameter consistent with the actual length of the associated data, which may allow an attacker to remotely execute arbitrary code...
CVE-2021-38429 OCI OpenDDS Secure Network Amplification
OCI OpenDDS versions prior to 3.18.1 are vulnerable when an attacker sends a specially crafted packet to flood target devices with unwanted traffic, which may result in a denial-of-service condition and information exposure...
CVE-2021-38447 OCI OpenDDS Secure Amplification
OCI OpenDDS versions prior to 3.18.1 are vulnerable when an attacker sends a specially crafted packet to flood target devices with unwanted traffic, which may result in a denial-of-service condition...
CVE-2021-38447 OCI OpenDDS Secure Amplification
OCI OpenDDS versions prior to 3.18.1 are vulnerable when an attacker sends a specially crafted packet to flood target devices with unwanted traffic, which may result in a denial-of-service condition...
CVE-2021-38445 OCI OpenDDS Secure Improper Handling of Length Parameter Inconsistency
OCI OpenDDS versions prior to 3.18.1 do not handle a length parameter consistent with the actual length of the associated data, which may allow an attacker to remotely execute arbitrary code...
PT-2022-10730
Name of the Vulnerable Software and Affected Versions OCI OpenDDS versions prior to 3.18.1 Description The issue arises when an attacker sends a specially crafted packet to flood target devices with unwanted traffic, potentially resulting in a denial-of-service condition. Recommendations For...
PT-2022-10729
Name of the Vulnerable Software and Affected Versions OCI OpenDDS versions prior to 3.18.1 Description The issue arises from inconsistent handling of a length parameter in relation to the actual length of associated data. This inconsistency may allow an attacker to remotely execute arbitrary code...
CVE-2021-38429: Insufficient Control of Network Message Volume (Network Amplification)
OCI OpenDDS versions prior to 3.18.1 are vulnerable when an attacker sends a specially crafted packet to flood target devices with unwanted traffic, which may result in a denial-of-service condition and information exposure...
CVE-2021-38447: Asymmetric Resource Consumption (Amplification)
OCI OpenDDS versions prior to 3.18.1 are vulnerable when an attacker sends a specially crafted packet to flood target devices with unwanted traffic, which may result in a denial-of-service condition...
CVE-2021-38445: Improper Handling of Length Parameter Inconsistency
OCI OpenDDS versions prior to 3.18.1 do not handle a length parameter consistent with the actual length of the associated data, which may allow an attacker to remotely execute arbitrary code...
PT-2022-10723
Name of the Vulnerable Software and Affected Versions OCI OpenDDS versions prior to 3.18.1 Description The issue arises when an attacker sends a specially crafted packet to flood target devices with unwanted traffic. This may result in a denial-of-service condition and information exposure...