Ubuntu.comUB:CVE-2019-13465CVE-2019-13465
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
8.6 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
0.001 Low
EPSS
Percentile
42.6%
An issue was discovered in the ROS communications-related packages (aka
ros_comm or ros-melodic-ros-comm) through 1.14.3. ROS_ASSERT_MSG only works
when ROS_ASSERT_ENABLED is defined. This leads to a problem in the remove()
function in clients/roscpp/src/libros/spinner.cpp. When ROS_ASSERT_ENABLED
is not defined, the iterator loop will run out of the scope of the array,
and cause denial of service for other components (that depend on the
communication-related functions of this package). NOTE: The reporter of
this issue now believes it was a false alarm.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| ubuntu | 18.04 | noarch | ros-ros-comm | < any | UNKNOWN |
| ubuntu | 16.04 | noarch | ros-ros-comm | < any | UNKNOWN |
Related
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
8.6 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
0.001 Low
EPSS
Percentile
42.6%