CVEvulnerability

CVE-2023-39947

7.5 HIGH Published 2023-08-11 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2023-08-11
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
8.2 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H
CVSS 3.1 ([email protected])
7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weaknesses
CWE-122, CWE-787

Description

eprosima Fast DDS is a C++ implementation of the Data Distribution Service standard of the Object Management Group. Prior to versions 2.11.1, 2.10.2, 2.9.2, and 2.6.6, even after the fix at commit 3492270, malformed `PID_PROPERTY_LIST` parameters cause heap overflow at a different program counter. This can remotely crash any Fast-DDS process. Versions 2.11.1, 2.10.2, 2.9.2, and 2.6.6 contain a patch for this issue.

Affected configurations

• eprosima fast dds (>= 2.6.0 < 2.6.6) • eprosima fast dds (>= 2.9.0 < 2.9.2) • eprosima fast dds (>= 2.10.0 < 2.10.2) • eprosima fast dds 2.11.0 • debian debian linux 11.0 • debian debian linux 12.0

Related

Weakness · CWE (2)

  • CWE-122 Heap-based Buffer Overflow weakness
  • CWE-787 Out-of-bounds Write weakness

References