CVE-2023-39947
Another heap overflow in push_back_helper
Severity Score
Exploit Likelihood
Affected Versions
Public Exploits
0Exploited in Wild
-Decision
Descriptions
eprosima Fast DDS is a C++ implementation of the Data Distribution Service standard of the Object Management Group. Prior to versions 2.11.1, 2.10.2, 2.9.2, and 2.6.6, even after the fix at commit 3492270, malformed `PID_PROPERTY_LIST` parameters cause heap overflow at a different program counter. This can remotely crash any Fast-DDS process. Versions 2.11.1, 2.10.2, 2.9.2, and 2.6.6 contain a patch for this issue.
eprosima Fast DDS es una implementación en C++ del estándar Data Distribution Service del Object Management Group. Antes de las versiones 2.11.1, 2.10.2, 2.9.2, y 2.6.6, incluso después de la corrección en el commit 3492270, los parámetros malformados `PID_PROPERTY_LIST` causan desbordamiento de heap en un contador de programa diferente. Esto puede bloquear remotamente cualquier proceso Fast-DDS. Las versiones 2.11.1, 2.10.2, 2.9.2 y 2.6.6 contienen un parche para este problema.
CVSS Scores
SSVC
- Decision:Attend
Timeline
- 2023-08-07 CVE Reserved
- 2023-08-11 CVE Published
- 2024-09-12 EPSS Updated
- 2024-10-10 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-122: Heap-based Buffer Overflow
- CWE-787: Out-of-bounds Write
CAPEC
References (3)
| URL | Tag | Source |
|---|---|---|
| https://github.com/eProsima/Fast-DDS/commit/349227005827e8a67a0406b823138b5068cc47dc | Third Party Advisory | |
| https://github.com/eProsima/Fast-DDS/security/advisories/GHSA-mf55-5747-c4pv | Third Party Advisory | |
| https://www.debian.org/security/2023/dsa-5481 | Third Party Advisory |
|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Eprosima Search vendor "Eprosima" | Fast Dds Search vendor "Eprosima" for product "Fast Dds" | >= 2.6.0 < 2.6.6 Search vendor "Eprosima" for product "Fast Dds" and version " >= 2.6.0 < 2.6.6" | - |
Affected
| ||||||
| Eprosima Search vendor "Eprosima" | Fast Dds Search vendor "Eprosima" for product "Fast Dds" | >= 2.9.0 < 2.9.2 Search vendor "Eprosima" for product "Fast Dds" and version " >= 2.9.0 < 2.9.2" | - |
Affected
| ||||||
| Eprosima Search vendor "Eprosima" | Fast Dds Search vendor "Eprosima" for product "Fast Dds" | >= 2.10.0 < 2.10.2 Search vendor "Eprosima" for product "Fast Dds" and version " >= 2.10.0 < 2.10.2" | - |
Affected
| ||||||
| Eprosima Search vendor "Eprosima" | Fast Dds Search vendor "Eprosima" for product "Fast Dds" | 2.11.0 Search vendor "Eprosima" for product "Fast Dds" and version "2.11.0" | - |
Affected
| ||||||
| Debian Search vendor "Debian" | Debian Linux Search vendor "Debian" for product "Debian Linux" | 11.0 Search vendor "Debian" for product "Debian Linux" and version "11.0" | - |
Affected
| ||||||
| Debian Search vendor "Debian" | Debian Linux Search vendor "Debian" for product "Debian Linux" | 12.0 Search vendor "Debian" for product "Debian Linux" and version "12.0" | - |
Affected
| ||||||