PT-2025-6249 · Eprosima+1 · Eprosima Fast Dds+1

Santti4Go · Published 2025-02-11 · Updated 2025-02-21 · CVE-2025-24807

Positive Technologies (AI Summary)

CVSS v3.1

7.1

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

Name of the Vulnerable Software and Affected Versions: eprosima Fast DDS versions prior to 2.6.10 eprosima Fast DDS versions prior to 2.10.7 eprosima Fast DDS versions prior to 2.14.5 eprosima Fast DDS versions prior to 3.0.2 eprosima Fast DDS versions prior to 3.1.2 eprosima Fast DDS versions prior to 3.2.0

Description: The issue is related to the validation of PermissionsCA in eprosima Fast DDS. Prior to the specified versions, the PermissionsCA is not fully chain validated, and the expiration date is not validated. The access control plugin only validates the S/MIME signature, which allows an expired PermissionsCA to be considered valid. This can lead to the system crashing when a non-self-signed PermissionsCA with a full chain is used. The impact of this issue is low.

Recommendations: For versions prior to 2.6.10, update to version 2.6.10 or later. For versions prior to 2.10.7, update to version 2.10.7 or later. For versions prior to 2.14.5, update to version 2.14.5 or later. For versions prior to 3.0.2, update to version 3.0.2 or later. For versions prior to 3.1.2, update to version 3.1.2 or later. For versions prior to 3.2.0, update to version 3.2.0 or later.

Exploit

Fix

Insufficient Verification of Data Authenticity

Weakness Enumeration

CWE-345

Related Identifiers

CVE-2025-24807

GHSA-W33G-JMM2-8983

Affected Products

Debian

Eprosima Fast Dds

References · 16

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/24xxx/CVE-2025-24807.json · Exploit
• https://github.com/eProsima/Fast-DDS/security/advisories/GHSA-w33g-jmm2-8983 · Vendor Advisory
• https://github.com/eProsima/Fast-DDS/pull/5530 · Patch
• https://ubuntu.com/security/CVE-2025-24807 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2025-24807 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-24807 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2025-24807 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2025-24807 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2025-24807 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-24807 · Vendor Advisory
• https://github.com/eProsima/Fast-DDS/blob/2.6.9/src/cpp/security/accesscontrol/Permissions.cpp#L390-L396 · Note
• https://github.com/eProsima/Fast-DDS/blob/2.6.9/src/cpp/security/accesscontrol/Permissions.cpp#L412 · Note
• https://github.com/eProsima/Fast-DDS/blob/2.6.9/src/cpp/security/authentication/PKIDH.cpp#L241 · Note
• https://t.me/cvenotify/112022 · Telegram Post
• https://omg.org/spec/DDS-SECURITY/1.1/PDF · Note