CVE-2024-28231
- Source
- https://nvd.nist.gov/vuln/detail/CVE-2024-28231
- Import Source
- https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2024-28231.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/CVE-2024-28231
- Aliases
-
- GHSA-9m2j-qw67-ph4w
- Related
- Published
- 2024-03-20T20:15:08Z
- Modified
- 2024-10-12T11:21:26.850111Z
- Summary
- [none]
- Details
-
eprosima Fast DDS is a C++ implementation of the Data Distribution Service standard of the Object Management Group. Prior to versions 2.14.0, 2.13.4, 2.12.3, 2.10.4, and 2.6.8, manipulated DATA Submessage can cause a heap overflow error in the Fast-DDS process, causing the process to be terminated remotely. Additionally, the payloadsize in the DATA Submessage packet is declared as uint32t. When a negative number, such as -1, is input into this variable, it results in an Integer Overflow (for example, -1 gets converted to 0xFFFFFFFF). This eventually leads to a heap-buffer-overflow, causing the program to terminate. Versions 2.14.0, 2.13.4, 2.12.3, 2.10.4, and 2.6.8 contain a fix for this issue.
- References
Affected packages
Debian:11 / fastdds
Package
- Name
- fastdds
- Purl
- pkg:deb/debian/fastdds?arch=source
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affected
Affected versions
2.*
2.1.0+ds-9
2.1.0+ds-9+deb11u1
2.3.2+ds-1
2.3.2+ds-2
2.3.3+ds-1
2.3.4+ds-1
2.3.4+ds-2
2.3.4+ds-3
2.3.4+ds-4
2.4.0+ds-1
2.4.0+ds-2
2.4.0+ds-3
2.4.1+ds-1
2.5.0+ds-1
2.5.0+ds-2
2.5.0+ds-3
2.5.1+ds-1
2.6.0+ds-1
2.6.0+ds-2
2.6.0+ds-3
2.6.1+ds-1
2.6.1+ds-2
2.7.0+ds-1
2.7.0+ds-2
2.7.1+ds-1~bpo11+1
2.7.1+ds-1
2.8.0+ds-1
2.8.0+ds-2
2.8.1+ds-1
2.9.0+ds-1
2.9.0+ds-2
2.9.1+ds-1
2.10.1+ds-1
2.10.1+ds-2
2.10.1+ds-3
2.11.2+ds-1
2.11.2+ds-2
2.11.2+ds-3
2.11.2+ds-4
2.11.2+ds-5
2.11.2+ds-6
2.11.2+ds-6.1~exp1
2.11.2+ds-6.1
2.14.0+ds-1
2.14.0+ds-2
2.14.0+ds-3
2.14.0+ds-4
2.14.1+ds-1
2.14.2+ds-1
2.14.3+ds-1
3.*
3.0.0+ds-1
3.0.0+ds-2
3.0.0+ds-3
3.0.1+ds-1
Debian:12 / fastdds
Package
- Name
- fastdds
- Purl
- pkg:deb/debian/fastdds?arch=source
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affected
Affected versions
2.*
2.9.1+ds-1
2.9.1+ds-1+deb12u1
2.9.1+ds-1+deb12u2
2.10.1+ds-1
2.10.1+ds-2
2.10.1+ds-3
2.11.2+ds-1
2.11.2+ds-2
2.11.2+ds-3
2.11.2+ds-4
2.11.2+ds-5
2.11.2+ds-6
2.11.2+ds-6.1~exp1
2.11.2+ds-6.1
2.14.0+ds-1
2.14.0+ds-2
2.14.0+ds-3
2.14.0+ds-4
2.14.1+ds-1
2.14.2+ds-1
2.14.3+ds-1
3.*
3.0.0+ds-1
3.0.0+ds-2
3.0.0+ds-3
3.0.1+ds-1
Debian:13 / fastdds
Package
- Name
- fastdds
- Purl
- pkg:deb/debian/fastdds?arch=source
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed2.14.0+ds-2
Git / github.com/eprosima/fast-dds
Affected ranges
- Type
- GIT
- Repo
- https://github.com/eprosima/fast-dds
- Events
-
Introduced0 Unknown introduced commit / All previous commits are affectedFixed
Affected versions
2.*
2.0.0-beta
2.0.0-rc
Other
Discovery-Time_Data_Typing
v0.*
v0.5.2
v1.*
v1.0.0
v1.0.0.a
v1.0.6
v1.1.0
v1.2.0
v1.3.0
v1.3.1
v1.4.0
v1.5.0
v1.6.0
v1.7.0
v1.7.1
v1.7.2
v1.8.0
v1.8.0-2
v1.8.1
v1.9.0
v1.9.0-beta
v1.9.0-beta-2
v2.*
v2.1.0
v2.10.0-rc1
v2.10.1-rc1
v2.2.0
v2.3.0-1
v2.3.0-api