Log in Start free

Vulnerability · Published Oct 16, 2023 · Assigned by GitHub_M

CVE-2023-42459Malformed DATA submessage leads to bad-free error in Fast-DDS

High 8.6

In plain English

A high-severity double free in Fast-DDS from eProsima. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.0% (higher than 63% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)8.6High
Exploit odds (30 days)1.0%top 36.9% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

Fast DDS is a C++ implementation of the DDS (Data Distribution Service) standard of the OMG (Object Management Group). In affected versions specific DATA submessages can be sent to a discovery locator which may trigger a free error. This can remotely crash any Fast-DDS process. The call to free() could potentially leave the pointer in the attackers control which could lead to a double free. This issue has been addressed in versions 2.12.0, 2.11.3, 2.10.3, and 2.6.7. Users are advised to upgrade. There are no known workarounds for this vulnerability.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
Debian:12fastdds2.9.1+ds-1+deb12u2DEBIAN-CVE-2023-42459
Debian:12fastdds2.9.1+ds-1+deb12u2DSA-5568-1
Debian:13fastdds2.11.2+ds-6DEBIAN-CVE-2023-42459
Ubuntu:24.04:LTSfastddsno fix listedUBUNTU-CVE-2023-42459
Ubuntu:25.10fastddsno fix listedUBUNTU-CVE-2023-42459
Ubuntu:26.04:LTSfastddsno fix listedUBUNTU-CVE-2023-42459
Ubuntu:26.10fastddsno fix listedUBUNTU-CVE-2023-42459

Affected products (as reported)

VendorProductVersions
eProsima Fast-DDS >= 2.11.0, <= 2.11.1>= 2.10.0, < 2.10.3< 2.6.7

Weakness: CWE-415, CWE-416, CWE-590 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H

References