CVE-2024-26369: High severity eProsima FastDDS vulnerability
An issue in the HistoryQosPolicy component of FastDDS v2.12.x, v2.11.x, v2.10.x, and v2.6.x leads to a SIGABRT (signal abort) upon receiving DataWriter's data.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/fastddsto a version that resolves this vulnerability.Fixed in 2.14.0+ds-2 - Upgrade
Upgrade
debian/fastddsto a version that resolves this vulnerability.Fixed in 3.1.2+ds-1Fixed in 3.3.0+ds-3
Event History
Frequently Asked Questions
What is the severity of CVE-2024-26369?
CVE-2024-26369 has a high severity as it leads to a SIGABRT upon data reception in FastDDS.
How do I fix CVE-2024-26369?
To mitigate CVE-2024-26369, upgrade FastDDS to version 2.12.x, 2.11.x, or 2.10.x, as these versions contain a patch.
Which versions of FastDDS are affected by CVE-2024-26369?
CVE-2024-26369 affects FastDDS versions 2.6.x to 2.12.x.
What component is vulnerable in CVE-2024-26369?
The vulnerable component in CVE-2024-26369 is the HistoryQosPolicy in the FastDDS framework.
What type of issue does CVE-2024-26369 represent?
CVE-2024-26369 represents a critical issue that causes program termination due to a SIGABRT signal.