155 matches found
CVE-2024-30962
Buffer Overflow vulnerability in Open Robotics Robotic Operating System 2 ROS2 navigation2- ROS2-humble and navigation 2-humble allows a local attacker to execute arbitrary code via the nav2amcl process...
CVE-2024-37863
CVE-2024-37863 affects Open Robotics ROS 2 (ROS2) and Nav2 humble, with a buffer overflow in the nav2_amcl process triggered by a crafted YAML file. Public sources describe vulnerable components and the advisory mentions a high-severity impact (NVD metrics show CVSS v3.1: 9.8, network attack vect...
CVE-2024-30961
CVE-2024-30961 affects Open Robotics ROS2 Navigation2 (navigation2-humble and related nav2_bt_navigator). The vulnerability is described as an insecure permissions issue that enables a local attacker to execute arbitrary code via the error-thrown mechanism in nav2_bt_navigator. CVSS data indicate...
CVE-2024-37862
Buffer Overflow vulnerability in Open Robotic Robotic Operating System 2 ROS2 navigation2- ROS2-humble&& navigation2-humble allows a local attacker to execute arbitrary code via a crafted .yaml file to the nav2planner process...
CVE-2024-37863
Open Robotics Robotic Operating System 2 ROS2 and Nav2 humble versions were discovered to contain a buffer overflow via the nav2amcl process. This vulnerability is triggered via sending a crafted .yaml file...
CVE-2024-30963
Open Robotics ROS2 Navigation2 (navigation2 for ROS2 Humble) is affected by a Buffer Overflow in the navigation2 component. The vulnerability allows a local attacker to execute arbitrary code via a crafted script, with high impact to confidentiality, integrity, and availability. Root cause: buffe...
CVE-2024-30962
The vulnerability CVE-2024-30962 affects Open Robotics ROS 2 navigation2 (navigation2-humble) with a buffer overflow in the nav2_amcl process. A local attacker can exploit this to execute arbitrary code. The issue is documented across multiple sources (e.g., NVD, Red Hat, CNNVD, CIRCL) with a CVS...
CVE-2024-37861
Open Robotics Robotic Operating System 2 ROS2 and Nav2 humble versions were discovered to contain a buffer overflow via the nav2amcl process. This vulnerability is triggered via sending a crafted .yaml file...
CVE-2024-29452
CVE-2024-29452 relates to ROS2 Humble Hawksbill, with insecure deserialization vulnerabilities in ROS2 Humble Hawksbill versions 2 and 3. The issue enables an attacker to execute arbitrary code and obtain sensitive information via crafted input affecting the Data Serialization and Deserialization...
CVE-2024-29454
CVE-2024-29454 is rejected/not used; this candidate was withdrawn and does not represent an active vulnerability entry.
CVE-2024-29455
Consolidated data shows a concrete issue in ROS2 Humble Hawksbill: an arbitrary file upload vulnerability in the file upload mechanism affecting versions 2, enabling potential arbitrary code execution, denial of service, and exposure of sensitive information. The root cause and exact affected fil...
CVE-2024-29448
ROS2 Humble Hawksbill (versions 2) is affected by a reported buffer overflow in the C++ components, which could allow arbitrary code execution or a denial of service through improper handling of arrays or strings. Remediation is to update to a version that includes the fix for this issue to mitig...
CVE-2024-29450
The published details in PT-2024-22907 indicate a vulnerability affecting ROS2 Humble Hawksbill versions 2, located in the permission and access control components. The issue could allow an attacker to execute arbitrary code, cause a denial of service, escalate privileges, and obtain sensitive in...
CVE-2024-29449
CVE-2024-29449 is not a publicly usable vulnerability; connected PT-2024-22905 reports a ROS2 Humble Hawksbill issue where cleartext transmission between ROS2 nodes enables potential MITM access to sensitive data. Affected: ROS2 Humble Hawksbill version 2. Root cause: unencrypted inter-node commu...
CVE-2024-30712
CVE-2024-30712 entry is rejected/not used; this ID does not represent an active vulnerability.
CVE-2024-30708
CVE-2024-30708 is rejected/not used; the CNA withdrew it and there is no evidence of a vulnerability.
CVE-2024-29441
CVE-2024-29441 entry is rejected/not used per the initial description.
CVE-2024-30711
CVE-2024-30711 entry is rejected/not used and does not represent an active vulnerability.
CVE-2024-30707
PT-2024-23584 documents a vulnerability in ROS2 Dashing Diademata (versions 2) where remote attackers could escalate privileges and inject unauthorized nodes. The issue affects ROS2 Dashing Diademata version 2, and there is no information in the provided documents about a newer version that conta...