PT-2019-13350 · Ros · Ros Comm

Danielwangksuo · Published 2019-12-30 · Updated 2020-08-24 · CVE-2019-13465

Positive Technologies (AI Summary)

CVSS v3.1

8.6

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions ros comm versions through 1.14.3

Description An issue was discovered in the ROS communications-related packages. The problem lies in the remove() function in clients/roscpp/src/libros/spinner.cpp, where ROS ASSERT MSG only works when ROS ASSERT ENABLED is defined. If ROS ASSERT ENABLED is not defined, the iterator loop may run out of the scope of the array, potentially causing denial of service for other components that depend on the communication-related functions of this package.

Recommendations For versions through 1.14.3, consider defining ROS ASSERT ENABLED to prevent the iterator loop from running out of scope and causing denial of service. As a temporary workaround, review the remove() function in clients/roscpp/src/libros/spinner.cpp to ensure it does not cause issues when ROS ASSERT ENABLED is not defined.

Fix

Related Identifiers

CVE-2019-13465

Affected Products

Ros Comm

References · 10

• https://cve.org/CVERecord?id=CVE-2019-13465 · Security Note
• https://ubuntu.com/security/CVE-2019-13465 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-13465 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2019-13465 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2019-13465 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2019-13465 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2019-13465 · Vendor Advisory
• https://github.com/ros/ros_comm/issues/1748 · Note
• https://github.com/ros/ros_comm/issues/1752 · Note
• https://github.com/ros/ros_comm/pull/1763 · Note