CVE-2023-39949

Katalog CVE

CVSS 7.5 · High EPSS 1,0%

Kerentanan Reachable Assertion pada eprosima fast dds, debian linux. Skor CVSS 3.1 7.5 (High) menurut NVD.

Deskripsi (NVD)

eprosima Fast DDS is a C++ implementation of the Data Distribution Service standard of the Object Management Group. Prior to versions 2.9.1 and 2.6.5, improper validation of sequence numbers may lead to remotely reachable assertion failure. This can remotely crash any Fast-DDS process. Versions 2.9.1 and 2.6.5 contain a patch for this issue.

Rincian

Terbit di NVD

11 Agustus 2023

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

7.5 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-617: Reachable Assertion

EPSS (30 hari)

1,0% peluang dieksploitasi; lebih tinggi dari 63,0% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/eProsima/Fast-DDS/blob/v2.9.0/src/cpp/rtps/messages/MessageReceiver.cpp#L1059 advisory pihak ketiga
• https://github.com/eProsima/Fast-DDS/issues/3236 advisory pihak ketiga
• https://github.com/eProsima/Fast-DDS/security/advisories/GHSA-3jv9-j9x3-95cg advisory pihak ketiga
• https://www.debian.org/security/2023/dsa-5481 advisory pihak ketiga