CVE-2023-39949CWE-617

Improper validation of sequence numbers leading to remotely reachable assertion failure

High · published August 11, 2023

CVSS v3.1
7.5
EPSS
1%
Percentile
63.6
In the wild
Unconfirmed
What it is

eprosima Fast DDS is a C++ implementation of the Data Distribution Service standard of the Object Management Group. Prior to versions 2.9.1 and 2.6.5, improper validation of sequence numbers may lead to remotely reachable assertion failure. This can remotely crash any Fast-DDS process. Versions 2.9.1 and 2.6.5 contain a patch for this issue.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.01038 · 63.6th percentile
Weakness
CWE-617 · Reachable Assertion
Published
2023-08-11T13:55Z
EPSS history
Timeline
  • 11 AUG 13:55Z
    Improper validation of sequence numbers leading to remotely reachable assertion failure
    cvelistv5