CVE-2023-50716: Invalid DATA_FRAG Submessage causes a bad-free error
First published: Wed Mar 06 2024(Updated: )
eProsima Fast DDS (formerly Fast RTPS) is a C++ implementation of the Data Distribution Service standard of the Object Management Group. Prior to versions 2.13.0, 2.12.2, 2.11.3, 2.10.3, and 2.6.7, an invalid DATA_FRAG Submessage causes a bad-free error, and the Fast-DDS process can be remotely terminated. If an invalid Data_Frag packet is sent, the `Inline_qos, SerializedPayload` member of object `ch` will attempt to release memory without initialization, resulting in a 'bad-free' error. Versions 2.13.0, 2.12.2, 2.11.3, 2.10.2, and 2.6.7 fix this issue.
Credit: security-advisories@github.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Eclipse | <2.6.7>=2.10.2<2.13.0 | |
| Eclipse | <2.6.7 | |
| Eclipse | >=2.10.0<2.10.3 | |
| Eclipse | >=2.11.0<2.11.3 | |
| Eclipse | >=2.12.0<2.12.2 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is the severity of CVE-2023-50716?
CVE-2023-50716 has been assigned a high severity due to its potential to cause a bad-free error in the Fast-DDS process.
How do I fix CVE-2023-50716?
To mitigate CVE-2023-50716, upgrade Fast DDS to version 2.13.0, 2.12.2, 2.11.3, 2.10.3, or 2.6.7 or later.
What versions of eProsima Fast DDS are affected by CVE-2023-50716?
CVE-2023-50716 affects eProsima Fast DDS versions prior to 2.6.7 and between 2.10.2 to 2.13.0, excluding those versions.
What is the impact of CVE-2023-50716 on eProsima Fast DDS users?
The impact of CVE-2023-50716 can lead to unexpected termination of the Fast-DDS process due to memory management issues.
Is there a patch available for CVE-2023-50716?
Yes, a patch for CVE-2023-50716 is available in the updated versions of Fast DDS.
- agent/title
- agent/references
- agent/weakness
- agent/description
- agent/type
- agent/first-publish-date
- agent/author
- collector/mitre-cve
- source/MITRE
- agent/source
- agent/guess-ai
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- agent/tags
- agent/severity
- agent/last-modified-date
- agent/softwarecombine
- agent/event
- collector/nvd-api
- source/NVD
- vendor/eprosima
- canonical/eclipse
- version/eclipse/2.10.0
- version/eclipse/2.11.0
- version/eclipse/2.12.0