vulnerability

Ubuntu: USN-6306-1 (CVE-2023-39948): Fast DDS vulnerabilities

Severity
8
CVSS
(AV:N/AC:L/Au:N/C:N/I:N/A:C)
Published
08/11/2023
Added
08/28/2023
Modified
02/20/2025

Description

eprosima Fast DDS is a C++ implementation of the Data Distribution Service standard of the Object Management Group. Prior to versions 2.10.0 and 2.6.5, the `BadParamException` thrown by Fast CDR is not caught in Fast DDS. This can remotely crash any Fast DDS process. Versions 2.10.0 and 2.6.5 contain a patch for this issue.

Solution(s)

ubuntu-pro-upgrade-fastdds-toolsubuntu-pro-upgrade-libfastrtps2-5ubuntu-pro-upgrade-libfastrtps2-9
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.