CVE-2024-37860: Buffer Overflow

Published Dec 5, 2024

Updated

Buffer Overflow vulnerability in Open Robotic Operating System 2 ROS2 navigation2- ROS2-humble&& navigation2-humble allows a local attacker to execute arbitrary code via a crafted .yaml file to the nav2amcl process

Affected Software

1 affected component

Open Robotics ROS 2 navigation2 (Humble)

Event History

Dec 5, 2024

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

Description

Data Sourced

via NVD·11:15 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2024-37860?

CVE-2024-37860 is classified as a high-severity vulnerability due to its potential for arbitrary code execution.

How do I fix CVE-2024-37860?

To fix CVE-2024-37860, update the Open Robotic Operating System 2 ROS2 navigation2 to the latest patched version.

Who is affected by CVE-2024-37860?

The vulnerability CVE-2024-37860 affects users of Open Robotics ROS 2 navigation2 (Humble) with the nav2_amcl process.

What type of attack does CVE-2024-37860 enable?

CVE-2024-37860 enables a local attacker to execute arbitrary code on a vulnerable system.

In which process does CVE-2024-37860 manifest?

CVE-2024-37860 manifests in the nav2_amcl process within the Open Robotic Operating System 2 ROS2 navigation2.