Vulnerability Description
eprosima Fast DDS is a C++ implementation of the Data Distribution Service standard of the Object Management Group. Prior to versions 2.10.0, 2.9.2, and 2.6.5, a malformed GAP submessage can trigger assertion failure, crashing FastDDS. Version 2.10.0, 2.9.2, and 2.6.5 contain a patch for this issue.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Eprosima | Fast Dds | >= 2.6.0, < 2.6.5 |
| Debian | Debian Linux | 11.0 |
Related Weaknesses (CWE)
References
- https://bombshell.gtisc.gatech.edu/ddsfuzz/pcap/fastdds-assert-230509.pcapThird Party Advisory
- https://github.com/eProsima/Fast-DDS/blob/v2.9.1/include/fastdds/rtps/common/SeqThird Party Advisory
- https://github.com/eProsima/Fast-DDS/blob/v2.9.1/src/cpp/rtps/reader/StatefulReaThird Party Advisory
- https://github.com/eProsima/Fast-DDS/security/advisories/GHSA-fcr6-x23w-94wpThird Party Advisory
- https://www.debian.org/security/2023/dsa-5481Third Party Advisory
- https://bombshell.gtisc.gatech.edu/ddsfuzz/pcap/fastdds-assert-230509.pcapThird Party Advisory
- https://github.com/eProsima/Fast-DDS/blob/v2.9.1/include/fastdds/rtps/common/SeqThird Party Advisory
- https://github.com/eProsima/Fast-DDS/blob/v2.9.1/src/cpp/rtps/reader/StatefulReaThird Party Advisory
- https://github.com/eProsima/Fast-DDS/security/advisories/GHSA-fcr6-x23w-94wpThird Party Advisory
- https://www.debian.org/security/2023/dsa-5481Third Party Advisory
FAQ
What is CVE-2023-39534?
CVE-2023-39534 is a vulnerability with a CVSS score of 7.5 (HIGH). eprosima Fast DDS is a C++ implementation of the Data Distribution Service standard of the Object Management Group. Prior to versions 2.10.0, 2.9.2, and 2.6.5, a malformed GAP submessage can trigger a...
How severe is CVE-2023-39534?
CVE-2023-39534 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2023-39534?
Check the references section above for vendor advisories and patch information. Affected products include: Eprosima Fast Dds, Debian Debian Linux.