| Package | Affected versions | Patched versions |
|---|---|---|
| fast dds | = 2.14.0≥ 2.10.0, < 2.10.4≥ 2.13.0, < 2.13.5< 2.6.8 | 2.10.42.13.52.6.8 |
FastDDS is a C++ implementation of the DDS (Data Distribution Service) standard of the OMG (Object Management Group). Prior to versions 2.14.1, 2.13.5, 2.10.4, and 2.6.8, when a publisher serves malformed `RTPS` packet, heap buffer overflow occurs on the subscriber. This can remotely crash any Fast-DDS process, potentially leading to a DOS attack. Versions 2.14.1, 2.13.5, 2.10.4, and 2.6.8 contain a patch for the issue.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free