Vulnerability · Published May 13, 2024 · Assigned by GitHub_M

CVE-2024-30259FastDDS heap buffer overflow when publisher sends malformed packet

High 8.2

In plain English

A high-severity buffer overflow in Fast-DDS from eProsima. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.9% (higher than 59% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)8.2High

Exploit odds (30 days)0.9%top 41.2% of all CVEs

Exploited in the wildNo reportsCISA SSVC: poc

Attack toolingNoneno public tooling known

Official description

FastDDS is a C++ implementation of the DDS (Data Distribution Service) standard of the OMG (Object Management Group). Prior to versions 2.14.1, 2.13.5, 2.10.4, and 2.6.8, when a publisher serves malformed `RTPS` packet, heap buffer overflow occurs on the subscriber. This can remotely crash any Fast-DDS process, potentially leading to a DOS attack. Versions 2.14.1, 2.13.5, 2.10.4, and 2.6.8 contain a patch for the issue.

Affected packages & fixed versions

Ecosystem	Package	Fixed in	Advisory
Debian:12	fastdds	no fix listed	DEBIAN-CVE-2024-30259
Debian:13	fastdds	2.14.1+ds-1	DEBIAN-CVE-2024-30259
Ubuntu:24.04:LTS	fastdds	no fix listed	UBUNTU-CVE-2024-30259

Affected products (as reported)

Vendor	Product	Versions
eProsima	Fast-DDS	= 2.14.0>= 2.13.0, < 2.13.5>= 2.10.0, < 2.10.4< 2.6.8

Weakness: CWE-120, CWE-122 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H

References

https://github.com/eProsima/Fast-DDS/security/advisories/GHSA-qcj9-939p-p662 x_refsource_CONFIRM
https://drive.google.com/file/d/1Y2bGvP3UIOJCLh_XEURLdhrM2Sznlvlp/view?usp=sharing x_refsource_MISC
https://vimeo.com/907641887?share=copy x_refsource_MISC