UBUNTU-CVE-2019-13445

See a problem?
Please try reporting it to the source first.

Source

https://ubuntu.com/security/CVE-2019-13445

Import Source

https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2019/UBUNTU-CVE-2019-13445.json

JSON Data

https://api.test.osv.dev/v1/vulns/UBUNTU-CVE-2019-13445

Related

CVE-2019-13445

Published

2019-12-30T18:15:00Z

Modified

2025-01-13T10:21:57Z

Severity

9.8 (Critical) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS Calculator

Summary

[none]

Details

An issue was discovered in the ROS communications-related packages (aka ros_comm or ros-melodic-ros-comm) through 1.14.3. parseOptions() in tools/rosbag/src/record.cpp has an integer overflow when a crafted split option can be entered on the command line.

References

Affected packages

Ubuntu:Pro:16.04:LTS / ros-ros-comm

Package

Name: ros-ros-comm
Purl: pkg:deb/ubuntu/ros-ros-comm@1.11.16-3?arch=source&distro=esm-apps/xenial

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

1.*

1.11.16-2

1.11.16-3

Ecosystem specific

{
    "ubuntu_priority": "medium"
}

Ubuntu:Pro:18.04:LTS / ros-ros-comm

Package

Name: ros-ros-comm
Purl: pkg:deb/ubuntu/ros-ros-comm@1.13.5+ds1-3?arch=source&distro=esm-apps/bionic

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

1.*

1.12.6-2

1.13.3+ds1-1

1.13.5+ds1-1

1.13.5+ds1-2

1.13.5+ds1-3

Ecosystem specific

{
    "ubuntu_priority": "medium"
}

Ubuntu:20.04:LTS / ros-ros-comm

Package

Name: ros-ros-comm
Purl: pkg:deb/ubuntu/ros-ros-comm@1.14.3+ds1-11?arch=source&distro=focal

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.14.3+ds1-11

Affected versions

1.*

1.14.3+ds1-5build2

1.14.3+ds1-8

1.14.3+ds1-10

Ecosystem specific

{
    "ubuntu_priority": "medium",
    "availability": "No subscription required",
    "binaries": [
        {
            "binary_name": "cl-roscpp-msg",
            "binary_version": "1.14.3+ds1-11"
        },
        {
            "binary_name": "cl-topic-tools",
            "binary_version": "1.14.3+ds1-11"
        },
        {
            "binary_name": "libmessage-filters-dev",
            "binary_version": "1.14.3+ds1-11"
        },
        {
            "binary_name": "libmessage-filters1d",
            "binary_version": "1.14.3+ds1-11"
        },
        {
            "binary_name": "libmessage-filters1d-dbgsym",
            "binary_version": "1.14.3+ds1-11"
        },
        {
            "binary_name": "librosbag-dev",
            "binary_version": "1.14.3+ds1-11"
        },
        {
            "binary_name": "librosbag-storage-dev",
            "binary_version": "1.14.3+ds1-11"
        },
        {
            "binary_name": "librosbag-storage3d",
            "binary_version": "1.14.3+ds1-11"
        },
        {
            "binary_name": "librosbag-storage3d-dbgsym",
            "binary_version": "1.14.3+ds1-11"
        },
        {
            "binary_name": "librosbag3d",
            "binary_version": "1.14.3+ds1-11"
        },
        {
            "binary_name": "librosbag3d-dbgsym",
            "binary_version": "1.14.3+ds1-11"
        },
        {
            "binary_name": "libroscpp-dev",
            "binary_version": "1.14.3+ds1-11"
        },
        {
            "binary_name": "libroscpp-msg-dev",
            "binary_version": "1.14.3+ds1-11"
        },
        {
            "binary_name": "libroscpp2d",
            "binary_version": "1.14.3+ds1-11"
        },
        {
            "binary_name": "libroscpp2d-dbgsym",
            "binary_version": "1.14.3+ds1-11"
        },
        {
            "binary_name": "libroslz4-1d",
            "binary_version": "1.14.3+ds1-11"
        },
        {
            "binary_name": "libroslz4-1d-dbgsym",
            "binary_version": "1.14.3+ds1-11"
        },
        {
            "binary_name": "libroslz4-dev",
            "binary_version": "1.14.3+ds1-11"
        },
        {
            "binary_name": "librostest-dev",
            "binary_version": "1.14.3+ds1-11"
        },
        {
            "binary_name": "libtopic-tools-dev",
            "binary_version": "1.14.3+ds1-11"
        },
        {
            "binary_name": "libtopic-tools1d",
            "binary_version": "1.14.3+ds1-11"
        },
        {
            "binary_name": "libtopic-tools1d-dbgsym",
            "binary_version": "1.14.3+ds1-11"
        },
        {
            "binary_name": "libxmlrpcpp-dev",
            "binary_version": "1.14.3+ds1-11"
        },
        {
            "binary_name": "libxmlrpcpp2d",
            "binary_version": "1.14.3+ds1-11"
        },
        {
            "binary_name": "libxmlrpcpp2d-dbgsym",
            "binary_version": "1.14.3+ds1-11"
        },
        {
            "binary_name": "python3-message-filters",
            "binary_version": "1.14.3+ds1-11"
        },
        {
            "binary_name": "python3-rosbag",
            "binary_version": "1.14.3+ds1-11"
        },
        {
            "binary_name": "python3-rosbag-dbgsym",
            "binary_version": "1.14.3+ds1-11"
        },
        {
            "binary_name": "python3-roscpp-msg",
            "binary_version": "1.14.3+ds1-11"
        },
        {
            "binary_name": "python3-rosgraph",
            "binary_version": "1.14.3+ds1-11"
        },
        {
            "binary_name": "python3-roslaunch",
            "binary_version": "1.14.3+ds1-11"
        },
        {
            "binary_name": "python3-roslz4",
            "binary_version": "1.14.3+ds1-11"
        },
        {
            "binary_name": "python3-roslz4-dbgsym",
            "binary_version": "1.14.3+ds1-11"
        },
        {
            "binary_name": "python3-rosmaster",
            "binary_version": "1.14.3+ds1-11"
        },
        {
            "binary_name": "python3-rosmsg",
            "binary_version": "1.14.3+ds1-11"
        },
        {
            "binary_name": "python3-rosnode",
            "binary_version": "1.14.3+ds1-11"
        },
        {
            "binary_name": "python3-rosparam",
            "binary_version": "1.14.3+ds1-11"
        },
        {
            "binary_name": "python3-rospy",
            "binary_version": "1.14.3+ds1-11"
        },
        {
            "binary_name": "python3-rosservice",
            "binary_version": "1.14.3+ds1-11"
        },
        {
            "binary_name": "python3-rostest",
            "binary_version": "1.14.3+ds1-11"
        },
        {
            "binary_name": "python3-rostopic",
            "binary_version": "1.14.3+ds1-11"
        },
        {
            "binary_name": "python3-roswtf",
            "binary_version": "1.14.3+ds1-11"
        },
        {
            "binary_name": "python3-topic-tools",
            "binary_version": "1.14.3+ds1-11"
        },
        {
            "binary_name": "ros-roscpp-msg",
            "binary_version": "1.14.3+ds1-11"
        },
        {
            "binary_name": "ros-topic-tools-srvs",
            "binary_version": "1.14.3+ds1-11"
        },
        {
            "binary_name": "rosout",
            "binary_version": "1.14.3+ds1-11"
        },
        {
            "binary_name": "rosout-dbgsym",
            "binary_version": "1.14.3+ds1-11"
        },
        {
            "binary_name": "topic-tools",
            "binary_version": "1.14.3+ds1-11"
        },
        {
            "binary_name": "topic-tools-dbgsym",
            "binary_version": "1.14.3+ds1-11"
        }
    ]
}