PT-2024-14585 · Opendds · Opendds

Published 2024-02-10 · Updated 2024-08-02 · CVE-2023-52427

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions OpenDDS versions through 3.27

Description The issue arises when a DataWriter is used with a large value of resource limits.max samples, leading to a segmentation fault. The vendor's stance is that the product is not designed to handle max samples values that exceed the system's memory capacity.

Recommendations For OpenDDS versions through 3.27, consider restricting the value of resource limits.max samples to prevent it from exceeding the system's memory capacity, as a temporary workaround to minimize the risk of a segmentation fault. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Allocation of Resources Without Limits

Weakness Enumeration

CWE-770

Related Identifiers

CVE-2023-52427

Affected Products

Opendds

References · 7

• 🔥 https://github.com/OpenDDS/OpenDDS/issues/4388 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2023-52427 · Security Note
• https://osv.dev/vulnerability/CVE-2023-52427 · Vendor Advisory
• https://t.me/cvenotify/85266 · Telegram Post
• https://t.me/cvenotify/70972 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1756568580819169687 · Twitter Post
• https://twitter.com/CVEnew/status/1756533091764449445 · Twitter Post