CVE-2024-30964: Code Injection
Insecure Permissions vulnerability in Open Robotics Robotic Operating System 2 (ROS2) navigation2- ROS2-humble and navigation 2-humble allows a local attacker to execute arbitrary code via the initialposesub thread created by nav2btnavigator
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-30964?
CVE-2024-30964 is considered a critical security vulnerability due to its potential to allow arbitrary code execution.
How do I fix CVE-2024-30964?
To mitigate CVE-2024-30964, it is recommended to update to the latest patched version of Open Robotics Robotic Operating System 2.
What kind of systems are affected by CVE-2024-30964?
CVE-2024-30964 affects the Open Robotics Robotic Operating System 2, specifically versions of navigation2 related to ROS2-humble.
Who can exploit CVE-2024-30964?
CVE-2024-30964 can be exploited by local attackers with access to the affected systems.
What are the implications of CVE-2024-30964?
The implications of CVE-2024-30964 include unauthorized code execution, which can compromise system integrity and security.