High severity7.5NVD Advisory· Published Aug 11, 2023· Updated Jun 17, 2026

CVE-2023-39949

Description

eprosima Fast DDS is a C++ implementation of the Data Distribution Service standard of the Object Management Group. Prior to versions 2.9.1 and 2.6.5, improper validation of sequence numbers may lead to remotely reachable assertion failure. This can remotely crash any Fast-DDS process. Versions 2.9.1 and 2.6.5 contain a patch for this issue.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Eprosima/FastDDS4 versions
cpe:2.3:a:eprosima:fast_dds:*:*:*:*:*:*:*:*+ 3 more
- cpe:2.3:a:eprosima:fast_dds:*:*:*:*:*:*:*:*range: >=2.6.0,<2.6.5
- cpe:2.3:a:eprosima:fast_dds:2.9.0:*:*:*:*:*:*:*
- (no CPE)range: <2.9.1, <2.6.5
- (no CPE)range: >= 2.7.0, < 2.9.1
Debian/linux2 versions
cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*
- cpe:2.3:o:debian:debian_linux:12.0:*:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

github.com/eProsima/Fast-DDS/blob/v2.9.0/src/cpp/rtps/messages/MessageReceiver.cppnvdThird Party Advisory
github.com/eProsima/Fast-DDS/issues/3236nvdThird Party Advisory
github.com/eProsima/Fast-DDS/security/advisories/GHSA-3jv9-j9x3-95cgnvdThird Party Advisory
www.debian.org/security/2023/dsa-5481nvdThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.488
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000