CVE-2023-42459

Fast DDS is a C++ implementation of the DDS (Data Distribution Service) standard of the OMG (Object Management Group). In affected versions specific DATA submessages can be sent to a discovery locator which may trigger a free error. This can remotely crash any Fast-DDS process. The call to free() could potentially leave the pointer in the attackers control which could lead to a double free. This issue has been addressed in versions 2.12.0, 2.11.3, 2.10.3, and 2.6.7. Users are advised to upgrade. There are no known workarounds for this vulnerability.

Database specific

{
    "cwe_ids": [
        "CWE-415",
        "CWE-416",
        "CWE-590"
    ]
}

References

Affected packages

Git / github.com/eprosima/fast-dds

Affected ranges

Type

GIT

Repo

https://github.com/eprosima/fast-dds

Events

Introduced

64700fcb9058c14e3c7aeee0ec130c47c9824917

Last affected

e0067c8ea61ed6c5f200def0f0117acea9ec38cc

Database specific

{
    "versions": [
        {
            "introduced": "2.11.0"
        },
        {
            "last_affected": "2.11.1"
        }
    ]
}

Type

GIT

Repo

https://github.com/eprosima/fast-dds

Events

Introduced

463d59ca81c7fd732edf45b982a58c0b54fc1da4

Fixed

5ac1dbacc7847f9bc080328930a7a8adcada2fe5

Database specific

{
    "versions": [
        {
            "introduced": "2.10.0"
        },
        {
            "fixed": "2.10.3"
        }
    ]
}

Type

GIT

Repo

https://github.com/eprosima/fast-dds

Events

Introduced

Fixed

125f90341a52d73abcfa5621f9bb51895cf44bbb

Database specific

{
    "versions": [
        {
            "introduced": "0"
        },
        {
            "fixed": "2.6.7"
        }
    ]
}