PT-2024-31281 · Open Robotics · Ros2

Goesm · Published 2024-12-06 · Updated 2024-12-17 · CVE-2024-44852

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Open Robotics Robotic Operating System 2 ROS2 navigation2 version humble

Description A segmentation violation was discovered in the component theta star::ThetaStar::isUnsafeToPlan(). This issue affects the navigation2 package in ROS2.

Recommendations For version humble, consider disabling the theta star::ThetaStar::isUnsafeToPlan() function until a patch is available. Restrict access to the theta star component to minimize the risk of exploitation. Avoid using the isUnsafeToPlan() function in the affected navigation2 package until the issue is resolved.

Exploit

Fix

Weakness Enumeration

CWE-763

Related Identifiers

CVE-2024-44852

Affected Products

Ros2

References · 9

• 🔥 https://github.com/open-navigation/navigation2/issues/4464 · Exploit
• 🔥 https://github.com/GoesM/ROS-CVE-CNVDs · Exploit
• https://osv.dev/vulnerability/CVE-2024-44852 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-44852 · Security Note
• https://github.com/ros-navigation/navigation2/pull/4463 · Note
• https://t.me/cvedetector/12280 · Telegram Post
• https://twitter.com/CVEnew/status/1865163148493492312 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1865208638446428413 · Twitter Post
• https://t.me/cvenotify/103956 · Telegram Post