VYPR
← All advisories
High severity8.2NVD Advisory· Published May 14, 2024· Updated Jun 17, 2026

CVE-2024-30258

CVE-2024-30258

Description

FastDDS is a C++ implementation of the DDS (Data Distribution Service) standard of the OMG (Object Management Group). Prior to versions 2.14.1, 2.13.5, 2.10.4, and 2.6.8, when a publisher serves a malformed RTPS packet, the subscriber crashes when creating pthread. This can remotely crash any Fast-DDS process, potentially leading to a DOS attack. Versions 2.14.1, 2.13.5, 2.10.4, and 2.6.8 contain a patch for the issue.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

4
  • Eprosima/FastDDS4 versions
    cpe:2.3:a:eprosima:fast_dds:*:*:*:*:*:*:*:*+ 3 more
    • cpe:2.3:a:eprosima:fast_dds:*:*:*:*:*:*:*:*range: <2.6.8
    • cpe:2.3:a:eprosima:fast_dds:2.14.0:*:*:*:*:*:*:*
    • (no CPE)range: <2.14.1, <2.13.5, <2.10.4, <2.6.8
    • (no CPE)range: = 2.14.0

Patches

Vulnerability mechanics

References

3

News mentions

0

No linked articles in our index yet.