CVE-2023-52427

In OpenDDS through 3.27, there is a segmentation fault for a DataWriter with a large value of resource_limits.max_samples. NOTE: the vendor's position is that the product is not designed to handle a max_samples value that is too large for the amount of memory on the system.
References
Link Resource
https://github.com/OpenDDS/OpenDDS/issues/4388 Exploit Issue Tracking
https://github.com/OpenDDS/OpenDDS/issues/4388 Exploit Issue Tracking
Configurations

Configuration 1 (hide)

cpe:2.3:a:objectcomputing:opendds:*:*:*:*:*:*:*:*

History

21 Nov 2024, 08:39

Type Values Removed Values Added
References () https://github.com/OpenDDS/OpenDDS/issues/4388 - Exploit, Issue Tracking () https://github.com/OpenDDS/OpenDDS/issues/4388 - Exploit, Issue Tracking

12 Feb 2024, 21:39

Type Values Removed Values Added
References () https://github.com/OpenDDS/OpenDDS/issues/4388 - () https://github.com/OpenDDS/OpenDDS/issues/4388 - Exploit, Issue Tracking
CPE cpe:2.3:a:objectcomputing:opendds:*:*:*:*:*:*:*:*
CVSS v2 : unknown
v3 : unknown
v2 : unknown
v3 : 7.5
First Time Objectcomputing
Objectcomputing opendds
CWE CWE-770

11 Feb 2024, 04:15

Type Values Removed Values Added
New CVE

Information

Published : 2024-02-11 04:15

Updated : 2024-11-21 08:39


NVD link : CVE-2023-52427

Mitre link : CVE-2023-52427

CVE.ORG link : CVE-2023-52427


JSON object : View

Products Affected

objectcomputing

  • opendds
CWE
CWE-770

Allocation of Resources Without Limits or Throttling