Unrated severityNVD Advisory· Published Aug 11, 2023· Updated Feb 13, 2025

Malformed GAP submessage triggers assertion failure

CVE-2023-39534

Description

eprosima Fast DDS is a C++ implementation of the Data Distribution Service standard of the Object Management Group. Prior to versions 2.10.0, 2.9.2, and 2.6.5, a malformed GAP submessage can trigger assertion failure, crashing FastDDS. Version 2.10.0, 2.9.2, and 2.6.5 contain a patch for this issue.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Eprosima/FastDDSllm-create2 versions
<2.6.5 || >=2.9.0 <2.9.2 || >=2.10.0-rc1 <2.10.0+ 1 more
- (no CPE)range: <2.6.5 || >=2.9.0 <2.9.2 || >=2.10.0-rc1 <2.10.0
- (no CPE)range: < 2.6.5

Patches

Vulnerability mechanics

References

bombshell.gtisc.gatech.edu/ddsfuzz/pcap/fastdds-assert-230509.pcapmitrex_refsource_MISC
github.com/eProsima/Fast-DDS/blob/v2.9.1/include/fastdds/rtps/common/SequenceNumber.hmitrex_refsource_MISC
github.com/eProsima/Fast-DDS/blob/v2.9.1/src/cpp/rtps/reader/StatefulReader.cppmitrex_refsource_MISC
github.com/eProsima/Fast-DDS/security/advisories/GHSA-fcr6-x23w-94wpmitrex_refsource_CONFIRM
www.debian.org/security/2023/dsa-5481mitre

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000