CVE-2021-38425

eProsima Fast DDS versions prior to 2.4.0 (#2269) are susceptible to exploitation when an attacker sends a specially crafted packet to flood a target device with unwanted traffic, which may result in a denial-of-service condition and information exposure.

References

Affected packages

Debian:11 / fastdds

Package

Name: fastdds
Purl: pkg:deb/debian/fastdds?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.1.0+ds-9+deb11u1

Affected versions

2.*

2.1.0+ds-9

Ecosystem specific

{
    "urgency": "not yet assigned"
}

Debian:12 / fastdds

Package

Name: fastdds
Purl: pkg:deb/debian/fastdds?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.6.1+ds-1

Ecosystem specific

{
    "urgency": "not yet assigned"
}

Debian:13 / fastdds

Package

Name: fastdds
Purl: pkg:deb/debian/fastdds?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.6.1+ds-1

Ecosystem specific

{
    "urgency": "not yet assigned"
}

Git / github.com/eprosima/fast-dds

Affected ranges

Type: GIT
Repo: https://github.com/eprosima/fast-dds
Events: Introduced

0 Unknown introduced commit / All previous commits are affected

Fixed

14cf9c7543b5437c26bc4215700fb0544c763ec7