CVE-2021-37146

See a problem?
Please try reporting it to the source first.
Source
https://nvd.nist.gov/vuln/detail/CVE-2021-37146
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2021-37146.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2021-37146
Related
Published
2021-09-28T13:15:07Z
Modified
2025-01-08T08:15:38.990406Z
Severity
  • 7.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
Summary
[none]
Details

An infinite loop in Open Robotics roscomm XMLRPC server in ROS Melodic through 1.4.11 and ROS Noetic through1.15.11 allows remote attackers to cause a Denial of Service in roscomm via a crafted XMLRPC call.

References

Affected packages

Debian:11 / ros-ros-comm

Package

Name
ros-ros-comm
Purl
pkg:deb/debian/ros-ros-comm?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.15.9+ds1-7+deb11u1

Affected versions

1.*

1.15.9+ds1-7

Ecosystem specific 

{
    "urgency": "not yet assigned"
}

Debian:12 / ros-ros-comm

Package

Name
ros-ros-comm
Purl
pkg:deb/debian/ros-ros-comm?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.15.13+ds1-2

Ecosystem specific 

{
    "urgency": "not yet assigned"
}

Debian:13 / ros-ros-comm

Package

Name
ros-ros-comm
Purl
pkg:deb/debian/ros-ros-comm?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.15.13+ds1-2

Ecosystem specific 

{
    "urgency": "not yet assigned"
}

Git / github.com/ros-gbp/ros_comm-release

Affected ranges

Type
GIT
Repo
https://github.com/ros-gbp/ros_comm-release
Events
Introduced
03899cc12c07c6cd3a295fb4a060a977ebfecef5
Last affected
5ca0fc41f11f396e543e80683c912a609aa8a438
Type
GIT
Repo
https://github.com/ros/ros_comm
Events
Introduced
8cf0bc0318be3cbc89ffec1e93bc99670e171dd1
Last affected
f5fa3a168760d62e9693f10dcb9adfffc6132d22

Affected versions

1.*

1.15.0
1.15.1
1.15.10
1.15.11
1.15.2
1.15.3
1.15.4
1.15.5
1.15.6
1.15.7
1.15.8
1.15.9

upstream/1.*

upstream/1.12.15
upstream/1.12.16
upstream/1.12.17
upstream/1.14.10
upstream/1.14.5
upstream/1.14.6
upstream/1.14.7
upstream/1.14.8
upstream/1.14.9
upstream/1.15.0
upstream/1.15.1
upstream/1.15.10
upstream/1.15.11
upstream/1.15.2
upstream/1.15.3
upstream/1.15.4
upstream/1.15.5
upstream/1.15.6
upstream/1.15.7
upstream/1.15.8
upstream/1.15.9