CVE-2023-39948 - OpenCVE

eprosima Fast DDS is a C++ implementation of the Data Distribution Service standard of the Object Management Group. Prior to versions 2.10.0 and 2.6.5, the `BadParamException` thrown by Fast CDR is not caught in Fast DDS. This can remotely crash any Fast DDS process. Versions 2.10.0 and 2.6.5 contain a patch for this issue.

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Vendors	Products
Debian	Debian Linux
Eprosima	Fast Dds

Configuration 1 [-]

OR	cpe:2.3:a:eprosima:fast_dds::::::::
	cpe:2.3:a:eprosima:fast_dds:2.10.0:rc1::::::

Configuration 2 [-]

OR	cpe:2.3:o:debian:debian_linux:11.0:::::::*
	cpe:2.3:o:debian:debian_linux:12.0:::::::*

No data.

References

Link	Providers
https://github.com/eProsima/Fast-DDS/files/11117197/fastdds-assert.pcap.zip
https://github.com/eProsima/Fast-DDS/issues/3422
https://github.com/eProsima/Fast-DDS/security/advisories/GHSA-x9pj-vrgf-f68f
https://www.debian.org/security/2023/dsa-5481

History

No history.

MITRE

Status: PUBLISHED

Assigner: GitHub_M

Published: 2023-08-11T13:51:38.871Z

Updated: 2024-08-02T18:18:10.172Z

Reserved: 2023-08-07T16:27:27.074Z

Link: CVE-2023-39948

Vulnrichment

No data.

NVD

Status : Analyzed

Published: 2023-08-11T14:15:13.693

Modified: 2023-08-21T18:17:43.717

Link: CVE-2023-39948

Redhat

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2023-39948", "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "state": "PUBLISHED", "assignerShortName": "GitHub_M", "dateReserved": "2023-08-07T16:27:27.074Z", "datePublished": "2023-08-11T13:51:38.871Z", "dateUpdated": "2024-08-02T18:18:10.172Z"}, "containers": {"cna": {"title": "Uncaught fastcdr exception (Unexpected CDR type received) crashing fastdds", "problemTypes": [{"descriptions": [{"cweId": "CWE-248", "lang": "en", "description": "CWE-248: Uncaught Exception", "type": "CWE"}]}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1"}}], "references": [{"name": "https://github.com/eProsima/Fast-DDS/security/advisories/GHSA-x9pj-vrgf-f68f", "tags": ["x_refsource_CONFIRM"], "url": "https://github.com/eProsima/Fast-DDS/security/advisories/GHSA-x9pj-vrgf-f68f"}, {"name": "https://github.com/eProsima/Fast-DDS/issues/3422", "tags": ["x_refsource_MISC"], "url": "https://github.com/eProsima/Fast-DDS/issues/3422"}, {"name": "https://github.com/eProsima/Fast-DDS/files/11117197/fastdds-assert.pcap.zip", "tags": ["x_refsource_MISC"], "url": "https://github.com/eProsima/Fast-DDS/files/11117197/fastdds-assert.pcap.zip"}, {"url": "https://www.debian.org/security/2023/dsa-5481"}], "affected": [{"vendor": "eProsima", "product": "Fast-DDS", "versions": [{"version": "< 2.6.5", "status": "affected"}, {"version": ">= 2.7.0, < 2.10.0", "status": "affected"}]}], "providerMetadata": {"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "shortName": "GitHub_M", "dateUpdated": "2023-08-11T13:51:38.871Z"}, "descriptions": [{"lang": "en", "value": "eprosima Fast DDS is a C++ implementation of the Data Distribution Service standard of the Object Management Group. Prior to versions 2.10.0 and 2.6.5, the `BadParamException` thrown by Fast CDR is not caught in Fast DDS. This can remotely crash any Fast DDS process. Versions 2.10.0 and 2.6.5 contain a patch for this issue.\n"}], "source": {"advisory": "GHSA-x9pj-vrgf-f68f", "discovery": "UNKNOWN"}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T18:18:10.172Z"}, "title": "CVE Program Container", "references": [{"name": "https://github.com/eProsima/Fast-DDS/security/advisories/GHSA-x9pj-vrgf-f68f", "tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "https://github.com/eProsima/Fast-DDS/security/advisories/GHSA-x9pj-vrgf-f68f"}, {"name": "https://github.com/eProsima/Fast-DDS/issues/3422", "tags": ["x_refsource_MISC", "x_transferred"], "url": "https://github.com/eProsima/Fast-DDS/issues/3422"}, {"name": "https://github.com/eProsima/Fast-DDS/files/11117197/fastdds-assert.pcap.zip", "tags": ["x_refsource_MISC", "x_transferred"], "url": "https://github.com/eProsima/Fast-DDS/files/11117197/fastdds-assert.pcap.zip"}, {"url": "https://www.debian.org/security/2023/dsa-5481", "tags": ["x_transferred"]}]}]}}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:eprosima:fast_dds:*:*:*:*:*:*:*:*", "matchCriteriaId": "A5F6650B-AD38-4E23-94EC-691A17D787EB", "versionEndExcluding": "2.6.5", "versionStartIncluding": "2.6.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:eprosima:fast_dds:2.10.0:rc1:*:*:*:*:*:*", "matchCriteriaId": "B9255BCA-332A-4107-9A21-95907F1B6F2C", "vulnerable": true}], "negate": false, "operator": "OR"}]}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*", "matchCriteriaId": "FA6FEEC2-9F11-4643-8827-749718254FED", "vulnerable": true}, {"criteria": "cpe:2.3:o:debian:debian_linux:12.0:*:*:*:*:*:*:*", "matchCriteriaId": "46D69DCC-AE4D-4EA5-861C-D60951444C6C", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "eprosima Fast DDS is a C++ implementation of the Data Distribution Service standard of the Object Management Group. Prior to versions 2.10.0 and 2.6.5, the `BadParamException` thrown by Fast CDR is not caught in Fast DDS. This can remotely crash any Fast DDS process. Versions 2.10.0 and 2.6.5 contain a patch for this issue.\n"}, {"lang": "es", "value": "eprosima Fast DDS es una implementaci\u00f3n en C++ del est\u00e1ndar Data Distribution Service del Object Management Group. Antes de las versiones 2.10.0 y 2.6.5, la `BadParamException` lanzada por Fast CDR no es capturada en Fast DDS. Esto puede bloquear remotamente cualquier proceso Fast DDS. Las versiones 2.10.0 y 2.6.5 contienen un parche para este problema.\n"}], "id": "CVE-2023-39948", "lastModified": "2023-08-21T18:17:43.717", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 3.6, "source": "nvd@nist.gov", "type": "Primary"}, {"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 3.6, "source": "security-advisories@github.com", "type": "Secondary"}]}, "published": "2023-08-11T14:15:13.693", "references": [{"source": "security-advisories@github.com", "tags": ["Third Party Advisory"], "url": "https://github.com/eProsima/Fast-DDS/files/11117197/fastdds-assert.pcap.zip"}, {"source": "security-advisories@github.com", "tags": ["Third Party Advisory"], "url": "https://github.com/eProsima/Fast-DDS/issues/3422"}, {"source": "security-advisories@github.com", "tags": ["Third Party Advisory"], "url": "https://github.com/eProsima/Fast-DDS/security/advisories/GHSA-x9pj-vrgf-f68f"}, {"source": "security-advisories@github.com", "tags": ["Third Party Advisory"], "url": "https://www.debian.org/security/2023/dsa-5481"}], "sourceIdentifier": "security-advisories@github.com", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "NVD-CWE-Other"}], "source": "nvd@nist.gov", "type": "Primary"}, {"description": [{"lang": "en", "value": "CWE-248"}], "source": "security-advisories@github.com", "type": "Secondary"}]}