13 matches found
CVE-2024-30721
CVE-2024-30721 is rejected; this candidate withdrawn and not an active vulnerability entry.
CVE-2024-30708
CVE-2024-30708 is rejected/not used; the CNA withdrew it and there is no evidence of a vulnerability.
CVE-2024-30718
CVE-2024-30718 entry is rejected/not used and does not represent an active vulnerability.
CVE-2024-29445
This CVE entry is rejected and not used; it does not represent an active vulnerability entry.
CVE-2024-29439
CVE-2024-29439 is rejected/not used per initial description.
CVE-2024-30701
This CVE-2024-30701 entry is rejected and does not represent an active vulnerability.
CVE-2024-30676
The connected PT-2024-23559 entry identifies a Denial-of-Service flaw in ROS2 Iron Irwini, where ROS2 nodes can be remotely crashed (DoS) by a malicious user, disrupting system operation. Affected setup specifies ROS VERSION 2 with ROS PYTHON VERSION 3. Until a patch is available, the recommendat...
CVE-2024-30688
CVE-2024-30688 is rejected/not used and does not represent an active vulnerability entry.
Command injection
OS command injection vulnerability in command processing or system call componentsROS2 Robot Operating System 2 Foxy Fitzroy, with ROSVERSION=2 and ROSPYTHONVERSION=3 allows attackers to run arbitrary commands...
CVE-2023-51201
CVE-2023-51201 is listed as withdrawn in the Initial document, but connected sources describe a concrete issue in ROS2 Foxy Fitzroy: cleartext transmission enabling man-in-the-middle access to sensitive data. Affected software: ROS2 Foxy Fitzroy (ROS2). Vulnerable component: Transmission security...
CVE-2023-51208
CVE-2023-51208 is rejected/not used; the CNA withdrew this candidate.
CVE-2023-51199
CVE-2023-51199 entry is withdrawn (DO NOT USE candidate). Connected docs describe a real vulnerability: in ROS2 Foxy Fitzroy (ROS2 Foxy Fitzroy, ROS_VERSION=2, ROS_PYTHON_VERSION=3) there is a Buffer Overflow caused by improper handling of arrays or strings, enabling arbitrary code execution or d...
CVE-2023-33565
CVE-2023-33565 entry is rejected; not used and does not represent an active vulnerability entry.