CVE-2024-30917: Medium severity eProsima FastDDS vulnerability
An issue was discovered in eProsima FastDDS v.2.14.0 and before, allows a local attacker to cause a denial of service (DoS) and obtain sensitive information via a crafted historydepth parameter in DurabilityService QoS component.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/fastddsto a version that resolves this vulnerability.Fixed in 2.14.1+ds-1 - Upgrade
Upgrade
debian/fastddsto a version that resolves this vulnerability.Fixed in 3.1.2+ds-1Fixed in 3.3.0+ds-3
Event History
Frequently Asked Questions
What is the severity of CVE-2024-30917?
CVE-2024-30917 is classified as a denial of service vulnerability.
How do I fix CVE-2024-30917?
To mitigate CVE-2024-30917, you should upgrade to eProsima FastDDS version 2.14.1 or later.
What component is affected by CVE-2024-30917?
CVE-2024-30917 affects the DurabilityService QoS component in eProsima FastDDS.
Can CVE-2024-30917 be exploited remotely?
CVE-2024-30917 requires local access, so it cannot be exploited remotely.
What type of attack can CVE-2024-30917 facilitate?
CVE-2024-30917 can lead to a denial of service and exposure of sensitive information.