CVE-2023-42459CWE-415CWE-416CWE-590

Malformed DATA submessage leads to bad-free error in Fast-DDS

High · published October 16, 2023

CVSS v3.1
8.6
EPSS
1%
Percentile
62.6
In the wild
Unconfirmed
What it is

Fast DDS is a C++ implementation of the DDS (Data Distribution Service) standard of the OMG (Object Management Group). In affected versions specific DATA submessages can be sent to a discovery locator which may trigger a free error. This can remotely crash any Fast-DDS process. The call to free() could potentially leave the pointer in the attackers control which could lead to a double free. This issue has been addressed in versions 2.12.0, 2.11.3, 2.10.3, and 2.6.7. Users are advised to upgrade. There are no known workarounds for this vulnerability.

The record
Technical detail
CVSS v3.1
8.6 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H
CVSS v4.0
Not supplied
EPSS
0.01003 · 62.6th percentile
Weaknesses
CWE-415 · Double Free; CWE-416 · Use After Free; CWE-590 · Free of Memory not on the Heap
Published
2023-10-16T20:56Z
EPSS history
Timeline
  • 16 OCT 20:56Z
    Malformed DATA submessage leads to bad-free error in Fast-DDS
    cvelistv5