PT-2023-4902 · Eprosima+2 · Fastdds+2

Squizz617 · Publicado 2023-08-11 · Atualizado 2023-08-24 · CVE-2023-39949

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions eprosima Fast DDS versions prior to 2.9.1 and 2.6.5

Description The issue is related to improper validation of sequence numbers, which may lead to remotely reachable assertion failure, causing any Fast-DDS process to crash. This can be exploited by a remote attacker to cause a denial of service.

Recommendations For versions prior to 2.9.1, update to version 2.9.1 to resolve the issue. For versions prior to 2.6.5, update to version 2.6.5 to resolve the issue.

Exploit

Correção

Assertion Failure

Enumeração de Fraquezas

CWE-617

Identificadores relacionados

BDU:2023-05395

CVE-2023-39949

DSA-5481-1

GHSA-3JV9-J9X3-95CG

USN-6306-1

Produtos afetados

Fastdds

Linuxmint

Ubuntu

Referências · 27

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/39xxx/CVE-2023-39949.json · Exploit
• https://github.com/eProsima/Fast-DDS/blob/v2.9.0/src/cpp/rtps/messages/MessageReceiver.cpp#L1059 · Nota
• https://github.com/eProsima/Fast-DDS/issues/3236 · Nota
• https://github.com/eProsima/Fast-DDS/security/advisories/GHSA-3jv9-j9x3-95cg · Nota
• https://ubuntu.com/security/CVE-2023-39946 · Aviso do Fabricante
• https://cve.org/CVERecord?id=CVE-2023-39949 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2023-39949 · Aviso do Fabricante
• https://t.me/cibsecurity/68349 · Publicação no Telegram
• https://security-tracker.debian.org/tracker/CVE-2023-39949 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2023-39948 · Aviso do Fabricante
• https://osv.dev/vulnerability/DEBIAN-CVE-2023-39949 · Aviso do Fabricante
• https://ubuntu.com/security/notices/USN-6306-1 · Aviso do Fabricante
• https://rapid7.com/db/vulnerabilities/ubuntu-cve-2023-39949 · Nota
• https://bdu.fstec.ru/vul/2023-05395 · Nota de Segurança
• https://ubuntu.com/security/CVE-2023-39949 · Aviso do Fabricante