CVE-2024-30915

The OpenDDS middleware framework (specifically commit b1c534032bb62ad4ae32609778de6b8d6c823a66 ) contains a vulnerability in the DataReaderQoS component. A local attacker can exploit the max_samples parameter to trigger a denial of service and potentially obtain sensitive information . This issue...

CVE-2023-52427

OpenDDS up to version 3.27 contains a segmentation fault in DataWriter when resource_limits.max_samples is set to a large value. The issue is attributed to memory capacity being exceeded, with vendors noting the product isn’t designed to handle max_samples values that exceed system memory. The pu...

CVE-2021-38445

CVE-2021-38445 affects OCI OpenDDS: versions prior to 3.18.1 do not handle a length parameter consistently with the actual data length, enabling remote code execution. The root cause is improper length handling in the OpenDDS data path, leading to potential arbitrary code execution on affected sy...

CVE-2021-38447

OCI OpenDDS prior to version 3.18.1 is vulnerable to a network amplification/DoS due to an attacker sending specially crafted packets, causing denial of service. Affected: OpenDDS (OCI) before 3.18.1. Root cause: improper handling that allows amplification and excessive network traffic. Impact: d...

CVE-2023-37915

OpenDDS (C++ implementation of OMG DDS) is affected by CVE-2023-37915 due to a vulnerability in parsing a malformed PID_PROPERTY_LIST within a DATA submessage during participant discovery. The underlying issue can cause remote crashes of OpenDDS processes when a crafted DATA submessage is sent to...

CVE-2021-38429

CVE-2021-38429 affects OCI OpenDDS: versions prior to 3.18.1 are vulnerable to a network amplification issue where a specially crafted packet can flood target devices, causing denial-of-service and information exposure. The ICS/CISA advisory explicitly notes mitigation by upgrading OpenDDS to ver...

CVE-2023-23932

OpenDDS (C++ implementation of OMG DDS) is affected by CVE-2023-23932. The vulnerability involves processing of RTPS network input: untrusted, badly-formed input may cause OpenDDS applications to crash. Root cause details indicate the issue affected OpenDDS prior to version 3.23.1. Public referen...

CVE-2025-67111

OpenDDS DDS versions prior to v3.33.0 are vulnerable to an integer overflow within the RTPS protocol implementation . This flaw allows a remote attacker to trigger a Denial of Service (DoS) by sending a specially crafted message. To remediate this vulnerability, it is recommended to update to ver...