The remote Debian 11 / 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5481 advisory.

  - eprosima Fast DDS is a C++ implementation of the Data Distribution Service standard of the Object     Management Group. Prior to versions 2.10.0, 2.9.2, and 2.6.5, a malformed GAP submessage can trigger     assertion failure, crashing FastDDS. Version 2.10.0, 2.9.2, and 2.6.5 contain a patch for this issue.
    (CVE-2023-39534)

  - eprosima Fast DDS is a C++ implementation of the Data Distribution Service standard of the Object     Management Group. Prior to versions 2.11.0, 2.10.2, 2.9.2, and 2.6.5, a data submessage sent to PDP port     raises unhandled `BadParamException` in fastcdr, which in turn crashes fastdds. Versions 2.11.0, 2.10.2,     2.9.2, and 2.6.5 contain a patch for this issue. (CVE-2023-39945)

  - eprosima Fast DDS is a C++ implementation of the Data Distribution Service standard of the Object     Management Group. Prior to versions 2.11.1, 2.10.2, 2.9.2, and 2.6.6, heap can be overflowed by providing     a PID_PROPERTY_LIST parameter that contains a CDR string with length larger than the size of actual     content. In `eprosima::fastdds::dds::ParameterPropertyList_t::push_back_helper`, `memcpy` is called to     first copy the octet'ized length and then to copy the data into `properties_.data`. At the second memcpy,     both `data` and `size` can be controlled by anyone that sends the CDR string to the discovery multicast     port. This can remotely crash any Fast-DDS process. Versions 2.11.1, 2.10.2, 2.9.2, and 2.6.6 contain a     patch for this issue. (CVE-2023-39946)

  - eprosima Fast DDS is a C++ implementation of the Data Distribution Service standard of the Object     Management Group. Prior to versions 2.11.1, 2.10.2, 2.9.2, and 2.6.6, even after the fix at commit     3492270, malformed `PID_PROPERTY_LIST` parameters cause heap overflow at a different program counter. This     can remotely crash any Fast-DDS process. Versions 2.11.1, 2.10.2, 2.9.2, and 2.6.6 contain a patch for     this issue. (CVE-2023-39947)

  - eprosima Fast DDS is a C++ implementation of the Data Distribution Service standard of the Object     Management Group. Prior to versions 2.10.0 and 2.6.5, the `BadParamException` thrown by Fast CDR is not     caught in Fast DDS. This can remotely crash any Fast DDS process. Versions 2.10.0 and 2.6.5 contain a     patch for this issue. (CVE-2023-39948)

  - eprosima Fast DDS is a C++ implementation of the Data Distribution Service standard of the Object     Management Group. Prior to versions 2.9.1 and 2.6.5, improper validation of sequence numbers may lead to     remotely reachable assertion failure. This can remotely crash any Fast-DDS process. Versions 2.9.1 and     2.6.5 contain a patch for this issue. (CVE-2023-39949)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Debian DSA-5481-1 : fastdds - security update

high Nessus Plugin ID 180015

Version 1.1

Version 1.0

Version 1.1 Aug 23, 2023, 4:09 PM CVSSv3 score source (set to "CVE-2023-39949") CVSSv2 severity (based on CVE-2023-39949, severity increased from "Medium" to "High") CVSS metrics ("CVSSv2 score" changed from 6.4 to 7.8. "CVSSv2 vector" changed from "CVSS2#AV:N/AC:L/Au:N/C:N/I:P/A:P" to "CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:C". "CVSSv3 score" changed from 9.8 to 7.5. "CVSSv3 vector" changed from "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" to "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H") Plugin Feed: 202308231609
Version 1.0 Aug 22, 2023, 1:59 PM New Plugin Feed: 202308221359