CVE-2024-30915: Medium severity eprosima opendds vulnerability
An issue was discovered in OpenDDS commit b1c534032bb62ad4ae32609778de6b8d6c823a66, allows a local attacker to cause a denial of service and obtain sensitive information via the maxsamples parameter within the DataReaderQoS component.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2024-30915?
CVE-2024-30915 has a severity rating that may allow local attackers to compromise the system by causing a denial of service and potentially accessing sensitive information.
How do I fix CVE-2024-30915?
To mitigate CVE-2024-30915, users should update to a patched version of OpenDDS that addresses the vulnerabilities related to the max_samples parameter.
What type of attack does CVE-2024-30915 involve?
CVE-2024-30915 involves a local denial of service attack that can also lead to exposure of sensitive information.
Which component is affected by CVE-2024-30915?
CVE-2024-30915 specifically affects the DataReaderQoS component within OpenDDS.
Can CVE-2024-30915 be exploited remotely?
No, CVE-2024-30915 requires local access to exploit the vulnerability.