154 matches found
CVE-2024-30694
CVE-2024-30694 entry is rejected/not used as explicitly stated in the Initial Description.
CVE-2024-30676
The connected PT-2024-23559 entry identifies a Denial-of-Service flaw in ROS2 Iron Irwini, where ROS2 nodes can be remotely crashed (DoS) by a malicious user, disrupting system operation. Affected setup specifies ROS VERSION 2 with ROS PYTHON VERSION 3. Until a patch is available, the recommendat...
CVE-2024-30683
CVE-2024-30683 entry is rejected/not used and does not represent an active vulnerability entry.
CVE-2024-30681
CVE-2024-30681 entry is rejected/not used; it does not represent an active vulnerability entry.
CVE-2024-30684
CVE-2024-30684 is rejected; this entry is not used and does not indicate an active vulnerability.
CVE-2024-30697
CVE-2024-30697 entry is rejected/not used and does not represent an active vulnerability.
CVE-2024-30696
This CVE-2024-30696 entry is rejected/not used and does not represent an active vulnerability.
CVE-2024-30679
CVE-2024-30679 entry is rejected/not used and does not represent an active vulnerability.
CVE-2024-30692
CVE-2024-30692 has been withdrawn as invalid. Connected PT-2024-23572 documents a DoS vulnerability in ROS2 Galactic Geochelone, affecting ROS2 VERSION 2 and ROS PYTHON VERSION 3, with remote DoS possible and no fix available yet; no exploit details provided. Monitor for updates.
PT-2024-23561 · Unknown · Ros2 Iron Irwini
Name of the Vulnerable Software and Affected Versions: ROS2 Iron Irwini versions 2 Description: An issue was discovered in the default configurations of ROS2 Iron Irwini, allowing unauthenticated attackers to authenticate using default credentials. Recommendations: For ROS2 Iron Irwini version 2,...
PT-2024-23567 · Ros2 · Ros2
Name of the Vulnerable Software and Affected Versions: ROS2 Iron Irwini versions ROS VERSION 2 and ROS PYTHON VERSION 3 Description: An issue was discovered that allows remote attackers to execute arbitrary code via packages or nodes within the ROS2 system. Recommendations: For ROS2 Iron Irwini...
CVE-2024-30675
CVE-2024-30675 entry is rejected/not used and does not represent an active vulnerability entry.
CVE-2024-30674
CVE-2024-30674 entry is rejected/not used and does not represent an active vulnerability.
CVE-2024-29442
CVE-2024-29442 entry is rejected/not used per initial description.
CVE-2024-29440
The connected PT-2024-22898 entry describes a vulnerability affecting ROS2 Humble Hawksbill, specifically versions where ROS VERSION is 2 and ROS PYTHON VERSION is 3. Affected component(s) are ROS2 nodes exposed remotely; the issue is an unauthorized access vulnerability that could allow a malici...
CVE-2024-25198
Inappropriate pointer order of laserscanfilter.reset and tflistener.reset amclnode.cpp in Open Robotics Robotic Operating Sytstem 2 ROS2 and Nav2 humble versions leads to a use-after-free...
CVE-2024-25199
Inappropriate pointer order of mapsub and mapfreemap amclnode.cpp in Open Robotics Robotic Operating Sytstem 2 ROS2 and Nav2 humble versions leads to a use-after-free...
CVE-2024-25197
Open Robotics Robotic Operating Sytstem 2 ROS2 and Nav2 humble versions were discovered to contain a NULL pointer dereference via the isCurrent function at /src/layeredcostmap.cpp...
Buffer overflow
Open Robotics Robotic Operating Sytstem 2 ROS2 and Nav2 humble versions were discovered to contain a buffer overflow via the nav2controller process. This vulnerability is triggerd via sending a crafted .yaml file...