CVE-2023-50716: Invalid DATA_FRAG Submessage causes a bad-free error
eProsima Fast DDS (formerly Fast RTPS) is a C++ implementation of the Data Distribution Service standard of the Object Management Group. Prior to versions 2.13.0, 2.12.2, 2.11.3, 2.10.3, and 2.6.7, an invalid DATAFRAG Submessage causes a bad-free error, and the Fast-DDS process can be remotely terminated. If an invalid DataFrag packet is sent, the Inlineqos, SerializedPayload member of object ch will attempt to release memory without initialization, resulting in a 'bad-free' error. Versions 2.13.0, 2.12.2, 2.11.3, 2.10.2, and 2.6.7 fix this issue.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2023-50716?
CVE-2023-50716 has been assigned a high severity due to its potential to cause a bad-free error in the Fast-DDS process.
How do I fix CVE-2023-50716?
To mitigate CVE-2023-50716, upgrade Fast DDS to version 2.13.0, 2.12.2, 2.11.3, 2.10.3, or 2.6.7 or later.
What versions of eProsima Fast DDS are affected by CVE-2023-50716?
CVE-2023-50716 affects eProsima Fast DDS versions prior to 2.6.7 and between 2.10.2 to 2.13.0, excluding those versions.
What is the impact of CVE-2023-50716 on eProsima Fast DDS users?
The impact of CVE-2023-50716 can lead to unexpected termination of the Fast-DDS process due to memory management issues.
Is there a patch available for CVE-2023-50716?
Yes, a patch for CVE-2023-50716 is available in the updated versions of Fast DDS.