// For flags

CVE-2023-42459

Malformed DATA submessage leads to bad-free error in Fast-DDS

Severity Score

7.5
*CVSS v3.1

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

1
*Multiple Sources

Exploited in Wild

-
*KEV

Decision

-
*SSVC
Descriptions

Fast DDS is a C++ implementation of the DDS (Data Distribution Service) standard of the OMG (Object Management Group). In affected versions specific DATA submessages can be sent to a discovery locator which may trigger a free error. This can remotely crash any Fast-DDS process. The call to free() could potentially leave the pointer in the attackers control which could lead to a double free. This issue has been addressed in versions 2.12.0, 2.11.3, 2.10.3, and 2.6.7. Users are advised to upgrade. There are no known workarounds for this vulnerability.

Fast DDS es una implementación en C++ del estándar DDS (Servicio de Distribución de Datos) de OMG (Object Management Group). En las versiones afectadas, se pueden enviar submensajes de DATOS específicos a un localizador de descubrimiento que puede provocar un error free. Esto puede bloquear de forma remota cualquier proceso Fast-DDS. La llamada a free() podría potencialmente dejar el puntero en el control del atacante, lo que podría conducir a un doble free. Este problema se solucionó en las versiones 2.12.0, 2.11.3, 2.10.3 y 2.6.7. Se recomienda a los usuarios que actualicen. No se conocen workarounds para esta vulnerabilidad.

*Credits: N/A
CVSS Scores
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
None
Integrity
None
Availability
High
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
Low
Integrity
Low
Availability
High
* Common Vulnerability Scoring System
SSVC
  • Decision:-
Exploitation
-
Automatable
-
Tech. Impact
-
* Organization's Worst-case Scenario
Timeline
  • 2023-09-08 CVE Reserved
  • 2023-10-16 CVE Published
  • 2024-08-02 CVE Updated
  • 2024-08-02 First Exploit
  • 2024-10-22 EPSS Updated
  • ---------- Exploited in Wild
  • ---------- KEV Due Date
CWE
  • CWE-415: Double Free
  • CWE-416: Use After Free
  • CWE-590: Free of Memory not on the Heap
CAPEC
Affected Vendors, Products, and Versions
Vendor Product Version Other Status
Vendor Product Version Other Status <-- --> Vendor Product Version Other Status
Eprosima
Search vendor "Eprosima"
 Fast Dds
Search vendor "Eprosima" for product "Fast Dds"
 < 2.6.7
Search vendor "Eprosima" for product "Fast Dds" and version " < 2.6.7"
-
Affected
Eprosima
Search vendor "Eprosima"
 Fast Dds
Search vendor "Eprosima" for product "Fast Dds"
 >= 2.10.0 < 2.10.3
Search vendor "Eprosima" for product "Fast Dds" and version " >= 2.10.0 < 2.10.3"
-
Affected
Eprosima
Search vendor "Eprosima"
 Fast Dds
Search vendor "Eprosima" for product "Fast Dds"
 >= 2.11.0 <= 2.11.1
Search vendor "Eprosima" for product "Fast Dds" and version " >= 2.11.0 <= 2.11.1"
-
Affected