SB2023082452 - Ubuntu update for fastdds
Published: August 24, 2023
Breakdown by Severity
- Low
- Medium
- High
- Critical
Description
This security bulletin contains information about 7 secuirty vulnerabilities.
1) Resource management error (CVE-ID: CVE-2021-38425)
The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.
The vulnerability exists due to improper management of internal resources within the application. A remote attacker can send specially crafted packets to the system and perform a denial of service (DoS) attack.
2) Reachable Assertion (CVE-ID: CVE-2023-39534)
The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.
The vulnerability exists due to a reachable assertion when processing malformed GAP submessages. A remote attacker can send specially crafted traffic to the system and perform a denial of service (DoS) attack.
3) Uncaught exception (CVE-ID: CVE-2023-39945)
The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.
The vulnerability exists due to an uncaught exception when handling data submessage sent to PDP port in fastcdr. A remote attacker can send specially crafted data to the system and perform a denial of service (DoS) attack.
4) Heap-based buffer overflow (CVE-ID: CVE-2023-39946)
The vulnerability allows a remote attacker to execute arbitrary code on the target system.
The vulnerability exists due to a boundary error in eprosima::fastdds::dds::ParameterPropertyList_t::push_back_helper() function. A remote attacker can send an overly long CDR string to the discovery multicast port, trigger a heap-based buffer overflow and execute arbitrary code on the target system.
5) Heap-based buffer overflow (CVE-ID: CVE-2023-39947)
The vulnerability allows a remote attacker to execute arbitrary code on the target system.
The vulnerability exists due to a boundary error. A remote attacker can send a specially crafted PID_PROPERTY_LIST parameter to the system, trigger a heap-based buffer overflow and execute arbitrary code on the target system.
6) Uncaught Exception (CVE-ID: CVE-2023-39948)
The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.
The vulnerability exists due to an uncaught exception when handling data submessage. A remote attacker can send specially crafted data to the system and perform a denial of service (DoS) attack.7) Reachable Assertion (CVE-ID: CVE-2023-39949)
The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.
The vulnerability exists due to a reachable assertion caused by improper validation of sequence numbers. A remote attacker can send specially crafted data to the system and perform a denial of service (DoS) attack.
Remediation
Install update from vendor's website.