PT-2024-22346 · Eprosima+1 · Eprosima Fast Dds+1

Desglaneurs · Published 2024-03-20 · Updated 2025-06-30 · CVE-2024-28231

Positive Technologies (AI Summary)

CVSS v3.1

9.6

Critical

Base vector

AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions eprosima Fast DDS versions prior to 2.14.0 eprosima Fast DDS versions prior to 2.13.4 eprosima Fast DDS versions prior to 2.12.3 eprosima Fast DDS versions prior to 2.10.4 eprosima Fast DDS versions prior to 2.6.8

Description The issue is related to a manipulated DATA Submessage that can cause a heap overflow error in the Fast-DDS process, allowing it to be terminated remotely. The payload size in the DATA Submessage packet is declared as uint32 t. When a negative number is input into this variable, it results in an Integer Overflow, eventually leading to a heap-buffer-overflow and causing the program to terminate.

Recommendations Update to version 2.14.0 or later to resolve the issue. Update to version 2.13.4 or later to resolve the issue. Update to version 2.12.3 or later to resolve the issue. Update to version 2.10.4 or later to resolve the issue. Update to version 2.6.8 or later to resolve the issue. As a temporary workaround, consider validating the payload size variable to prevent negative numbers from being input, until a patch is available.

Exploit

Fix

Memory Corruption

Heap Based Buffer Overflow

Weakness Enumeration

CWE-787

CWE-122

Related Identifiers

CVE-2024-28231

GHSA-9M2J-QW67-PH4W

Affected Products

Debian

Eprosima Fast Dds

References · 13

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/28xxx/CVE-2024-28231.json · Exploit
• https://github.com/eProsima/Fast-DDS/commit/355706386f4af9ce74125eeec3c449b06113112b · Patch
• https://github.com/eProsima/Fast-DDS/security/advisories/GHSA-9m2j-qw67-ph4w · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2024-28231 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-28231 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2024-28231 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2024-28231 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-28231 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2024-28231 · Security Note
• https://osv.dev/vulnerability/CVE-2024-28231 · Vendor Advisory
• https://t.me/cvenotify/74293 · Telegram Post
• https://twitter.com/cracbot/status/1770899643347378406 · Twitter Post
• https://t.me/cvenotify/127097 · Telegram Post