CVE-2023-42459: Malformed DATA submessage leads to bad-free error in Fast-DDS
Fast DDS is a C++ implementation of the DDS (Data Distribution Service) standard of the OMG (Object Management Group). In affected versions specific DATA submessages can be sent to a discovery locator which may trigger a free error. This can remotely crash any Fast-DDS process. The call to free() could potentially leave the pointer in the attackers control which could lead to a double free. This issue has been addressed in versions 2.12.0, 2.11.3, 2.10.3, and 2.6.7. Users are advised to upgrade. There are no known workarounds for this vulnerability.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is CVE-2023-42459?
CVE-2023-42459 is a vulnerability in the eprosima Fast DDS library that allows an attacker to remotely crash any Fast-DDS process by sending specific data submessages.
What is the severity of CVE-2023-42459?
CVE-2023-42459 has a severity rating of 8.6 (high).
Which versions of eprosima Fast DDS are affected by CVE-2023-42459?
Versions up to 2.6.7, versions between 2.10.0 and 2.10.3 (inclusive exclusive), and versions 2.11.0 and 2.11.1 (inclusive inclusive) of eprosima Fast DDS are affected by CVE-2023-42459.
How can an attacker exploit CVE-2023-42459?
An attacker can exploit CVE-2023-42459 by sending specific DATA submessages to a discovery locator, which triggers a free error and remotely crashes the Fast-DDS process.
Are there any references for CVE-2023-42459?
Yes, you can find references for CVE-2023-42459 at the following links: [Link 1](https://github.com/eProsima/Fast-DDS/issues/3207), [Link 2](https://github.com/eProsima/Fast-DDS/pull/3824), [Link 3](https://github.com/eProsima/Fast-DDS/security/advisories/GHSA-gq8g-fj58-22gm).