CVE-2020-16124: Integer overflow in ROS communications library
Integer Overflow or Wraparound vulnerability in the XML RPC library of OpenRobotics roscomm communications packages allows unauthenticated network traffic to cause unexpected behavior. This issue affects: OpenRobotics roscomm communications packages Noetic and prior versions. Fixed in https://github.com/ros/roscomm/pull/2065.
Affected Software
Remediation
Patch Available
Information
Event History
Frequently Asked Questions
What is CVE-2020-16124?
CVE-2020-16124 is an Integer Overflow or Wraparound vulnerability in the XML RPC library of OpenRobotics ros_comm communications packages.
What is the severity of CVE-2020-16124?
The severity of CVE-2020-16124 is critical with a CVSS score of 9.8.
How does CVE-2020-16124 affect OpenRobotics ros_comm communications packages?
CVE-2020-16124 allows unauthenticated network traffic to cause unexpected behavior in OpenRobotics ros_comm communications packages Noetic and prior versions.
Which version of OpenRobotics ros_comm is affected by CVE-2020-16124?
OpenRobotics ros_comm version up to, but excluding, 1.15.9 is affected by CVE-2020-16124.
Has CVE-2020-16124 been fixed?
Yes, CVE-2020-16124 has been fixed in OpenRobotics ros_comm. Refer to the following link for more details: [https://github.com/ros/ros_comm/pull/2065](https://github.com/ros/ros_comm/pull/2065).