PT-2024-13889 · Eprosima+1 · Eprosima Fast Dds+1

Desglaneurs · Published 2024-02-19 · Updated 2026-01-02 · CVE-2023-50257

Positive Technologies (AI Summary)

CVSS v3.1

9.6

Critical

Base vector

AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions eProsima Fast DDS versions prior to 2.13.0 eProsima Fast DDS versions prior to 2.12.2 eProsima Fast DDS versions prior to 2.11.3 eProsima Fast DDS versions prior to 2.10.3 eProsima Fast DDS versions prior to 2.6.7

Description A vulnerability has been discovered in eProsima Fast DDS where a malicious attacker can forcibly disconnect a Subscriber and deny a Subscriber attempting to connect. This is due to the issue where the data (p[UD]) and guid values used to disconnect between nodes are not encrypted. If the attacker sends the packet for disconnecting, which is data (p[UD]), to the Global Data Space (239.255.0.1:7400) using the said Publisher ID, all the Subscribers (Listeners) connected to the Publisher (Talker) will not receive any data and their connection will be disconnected. Moreover, if this disconnection packet is sent continuously, the Subscribers (Listeners) trying to connect will not be able to do so.

Recommendations For versions prior to 2.13.0, update to version 2.13.0 or later. For versions prior to 2.12.2, update to version 2.12.2 or later. For versions prior to 2.11.3, update to version 2.11.3 or later. For versions prior to 2.10.3, update to version 2.10.3 or later. For versions prior to 2.6.7, update to version 2.6.7 or later. As a temporary workaround, consider restricting access to the Global Data Space (239.255.0.1:7400) to minimize the risk of exploitation. Avoid using the p[UD] data and guid values in the affected API endpoint until the issue is resolved.

Exploit

Fix

Improper Access Control

Weakness Enumeration

CWE-284

Related Identifiers

CVE-2023-50257

GHSA-V5R6-8MVH-CP98

Affected Products

Debian

Eprosima Fast Dds

References · 17

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/50xxx/CVE-2023-50257.json · Exploit
• https://github.com/eProsima/Fast-DDS/security/advisories/GHSA-v5r6-8mvh-cp98 · Patch
• https://github.com/eProsima/Fast-DDS/commit/072cbc9d6a71d869a5cbed1873c0cdd6cf67cda4 · Patch
• https://github.com/eProsima/Fast-DDS/commit/e1869863c06db7fbb366ae53760fbe6e754be026 · Patch
• https://github.com/eProsima/Fast-DDS/commit/f2e5ceae8fbea0a6c9445a366faaca0b98a8ef86 · Patch
• https://github.com/eProsima/Fast-DDS/commit/f07a0213e655202188840b864be4438ae1067a13 · Patch
• https://ubuntu.com/security/CVE-2023-50257 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2023-50257 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2023-50257 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-50257 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2023-50257 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-50257 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2023-50257 · Security Note
• https://t.me/cvenotify/71913 · Telegram Post
• https://t.me/cveNotify/147491 · Telegram Post