First published: Mon Aug 23 2021(Updated: )
A stack buffer overflow in /ddsi/q_bitset.h of Eclipse IOT Cyclone DDS Project v0.1.0 causes the DDS subscriber server to crash.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Eclipse Cyclone Data Distribution Service | =0.1.0 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2020-18734 is a stack buffer overflow vulnerability in /ddsi/q_bitset.h of Eclipse IOT Cyclone DDS Project v0.1.0.
CVE-2020-18734 has a severity rating of 7.5 (high).
CVE-2020-18734 causes the DDS subscriber server of Eclipse Cyclone Data Distribution Service v0.1.0 to crash.
Yes, please refer to the GitHub issue #476 for information on the fix for CVE-2020-18734.
Yes, you can find references for CVE-2020-18734 at the following links: 1. GitHub: https://github.com/eclipse-cyclonedds/cyclonedds 2. GitHub issue #476: https://github.com/eclipse-cyclonedds/cyclonedds/issues/476 3. Eclipse Cyclone DDS project: https://projects.eclipse.org/projects/iot.cyclonedds