CVE-2020-16124CWE-190

Integer overflow in ROS communications library

High · published October 13, 2020

CVSS v3.1
7.3
EPSS
1%
Percentile
59.7
In the wild
Unconfirmed
What it is

Integer Overflow or Wraparound vulnerability in the XML RPC library of OpenRobotics ros_comm communications packages allows unauthenticated network traffic to cause unexpected behavior. This issue affects: OpenRobotics ros_comm communications packages Noetic and prior versions. Fixed in https://github.com/ros/ros_comm/pull/2065.

The record
Technical detail
CVSS v3.1
7.3 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.00913 · 59.7th percentile
Weakness
CWE-190 · Integer Overflow or Wraparound
Published
2020-10-13T14:50Z
EPSS history
Timeline
  • 13 OCT 14:50Z
    Integer overflow in ROS communications library
    cvelistv5