CVE-2024-30962: Buffer Overflow
Buffer Overflow vulnerability in Open Robotics Robotic Operating System 2 (ROS2) navigation2- ROS2-humble and navigation 2-humble allows a local attacker to execute arbitrary code via the nav2amcl process
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-30962?
CVE-2024-30962 is considered a high severity vulnerability due to the potential for arbitrary code execution.
How do I fix CVE-2024-30962?
To fix CVE-2024-30962, update to the latest version of Open Robotics Robot Operating System 2, specifically versions 2-humble or 2-iron that include the patch.
Who is affected by CVE-2024-30962?
CVE-2024-30962 affects users of Open Robotics Robot Operating System 2, specifically the navigation2 package in versions 2-humble and 2-iron.
What is the attack vector for CVE-2024-30962?
The attack vector for CVE-2024-30962 is local, requiring access to the nav2_amcl process to exploit the buffer overflow.
What are the potential impacts of CVE-2024-30962?
The potential impacts of CVE-2024-30962 include execution of arbitrary code, which can lead to system compromise or disruption of robotic operations.