Vulnerabilities (CVE)

Filtered by vendor Ros Subscribe
Filtered by product Ros-comm
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2020-16124 1 Ros 1 Ros-comm 2020-10-22 7.5 HIGH 9.8 CRITICAL
Integer Overflow or Wraparound vulnerability in the XML RPC library of OpenRobotics ros_comm communications packages allows unauthenticated network traffic to cause unexpected behavior. This issue affects: OpenRobotics ros_comm communications packages Noetic and prior versions. Fixed in https://github.com/ros/ros_comm/pull/2065.
CVE-2019-13445 1 Ros 1 Ros-comm 2020-01-09 7.5 HIGH 9.8 CRITICAL
An issue was discovered in the ROS communications-related packages (aka ros_comm or ros-melodic-ros-comm) through 1.14.3. parseOptions() in tools/rosbag/src/record.cpp has an integer overflow when a crafted split option can be entered on the command line.
CVE-2019-13566 1 Ros 1 Ros-comm 2020-01-08 7.5 HIGH 9.8 CRITICAL
An issue was discovered in the ROS communications-related packages (aka ros_comm or ros-melodic-ros-comm) through 1.14.3. A buffer overflow allows attackers to cause a denial of service and possibly execute arbitrary code via an IP address with a long hostname.