CVE-2024-30684

CVE-2024-30684 is rejected; this entry is not used and does not indicate an active vulnerability.

CVE-2024-30679

CVE-2024-30679 entry is rejected/not used and does not represent an active vulnerability.

CVE-2024-30701

This CVE-2024-30701 entry is rejected and does not represent an active vulnerability.

CVE-2024-30697

CVE-2024-30697 entry is rejected/not used and does not represent an active vulnerability.

CVE-2024-30703

CVE-2024-30703 entry is rejected and not used; no vulnerability exists.

CVE-2024-30678

CVE-2024-30678 is rejected/not used and does not represent an active vulnerability entry.

CVE-2024-30706

CVE-2024-30706 entry is rejected/not used and does not represent an active vulnerability.

CVE-2024-30695

This CVE entry is rejected/not used as stated.

CVE-2024-30676

The connected PT-2024-23559 entry identifies a Denial-of-Service flaw in ROS2 Iron Irwini, where ROS2 nodes can be remotely crashed (DoS) by a malicious user, disrupting system operation. Affected setup specifies ROS VERSION 2 with ROS PYTHON VERSION 3. Until a patch is available, the recommendat...

CVE-2024-30686

This CVE-2024-30686 entry is rejected/not used; withdrawn by its CNA and not a valid vulnerability.

PT-2024-23561 · Unknown · Ros2 Iron Irwini

Name of the Vulnerable Software and Affected Versions: ROS2 Iron Irwini versions 2 Description: An issue was discovered in the default configurations of ROS2 Iron Irwini, allowing unauthenticated attackers to authenticate using default credentials. Recommendations: For ROS2 Iron Irwini version 2,...

PT-2024-23567 · Ros2 · Ros2

Name of the Vulnerable Software and Affected Versions: ROS2 Iron Irwini versions ROS VERSION 2 and ROS PYTHON VERSION 3 Description: An issue was discovered that allows remote attackers to execute arbitrary code via packages or nodes within the ROS2 system. Recommendations: For ROS2 Iron Irwini...

CVE-2024-30674

CVE-2024-30674 entry is rejected/not used and does not represent an active vulnerability.

CVE-2024-30675

CVE-2024-30675 entry is rejected/not used and does not represent an active vulnerability entry.

CVE-2024-29442

CVE-2024-29442 entry is rejected/not used per initial description.

CVE-2024-29440

The connected PT-2024-22898 entry describes a vulnerability affecting ROS2 Humble Hawksbill, specifically versions where ROS VERSION is 2 and ROS PYTHON VERSION is 3. Affected component(s) are ROS2 nodes exposed remotely; the issue is an unauthorized access vulnerability that could allow a malici...

CVE-2024-25197

Open Robotics Robotic Operating Sytstem 2 ROS2 and Nav2 humble versions were discovered to contain a NULL pointer dereference via the isCurrent function at /src/layeredcostmap.cpp...

CVE-2024-25199

Inappropriate pointer order of mapsub and mapfreemap amclnode.cpp in Open Robotics Robotic Operating Sytstem 2 ROS2 and Nav2 humble versions leads to a use-after-free...

CVE-2024-25198

Inappropriate pointer order of laserscanfilter.reset and tflistener.reset amclnode.cpp in Open Robotics Robotic Operating Sytstem 2 ROS2 and Nav2 humble versions leads to a use-after-free...

Buffer overflow

Open Robotics Robotic Operating Sytstem 2 ROS2 and Nav2 humble versions were discovered to contain a buffer overflow via the nav2controller process. This vulnerability is triggerd via sending a crafted .yaml file...