CVE-2021-38443
First published: Thu May 05 2022(Updated: )
Credit: ics-cert@hq.dhs.gov
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Eclipse CycloneDDS | <0.8.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is CVE-2021-38443?
CVE-2021-38443 is a vulnerability in Eclipse CycloneDDS versions prior to 0.8.0 that allows an attacker to write arbitrary values in the XML parser.
How severe is CVE-2021-38443?
CVE-2021-38443 has a severity level of critical with a CVSS score of 9.8.
Which software versions are affected by CVE-2021-38443?
Eclipse CycloneDDS versions up to but not including 0.8.0 are affected by CVE-2021-38443.
What is the Common Weakness Enumeration (CWE) for CVE-2021-38443?
The CWE for CVE-2021-38443 is 228.
Where can I find more information about CVE-2021-38443?
You can find more information about CVE-2021-38443 on the Eclipse CycloneDDS project page and the US-CERT advisory page.
- collector/nvd-index
- vendor/eclipse
- canonical/eclipse cyclonedds