Title: ROS2 Foxy Fitzroy ROS_VERSION=2 y ROS_PYTHON_VERSION=3
Description: Vulnerabilidad de desbordamiento de búfer en ROS2 Foxy Fitzroy ROS_VERSION=2 y ROS_PYTHON_VERSION=3 permite a atacantes ejecutar código arbitrario o provocar una denegación de servicio mediante el manejo inadecuado de matrices o cadenas.

MITRE disputed

Buffer Overflow vulnerability in ROS2 Foxy Fitzroy ROS_VERSION=2 and ROS_PYTHON_VERSION=3 allows attackers to run arbitrary code or cause a denial of service via improper handling of arrays or strings. NOTE: this is disputed by multiple third parties who believe there was not reasonable evidence to determine the existence of a vulnerability.

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that there was not reasonable evidence to determine the existence of a vulnerability.

NIST AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NIST CWE-120

OR
     
          *cpe:2.3:a:openrobotics:robot_operating_system:2:foxy:*:*:*:*:*:*

MITRE http://www.openwall.com/lists/oss-security/2024/04/23/2

MITRE http://www.openwall.com/lists/oss-security/2024/04/23/3

MITRE http://www.openwall.com/lists/oss-security/2024/04/23/4

MITRE http://www.openwall.com/lists/oss-security/2024/04/23/5

MITRE https://github.com/16yashpatel/CVE-2023-51199

MITRE http://www.openwall.com/lists/oss-security/2024/04/23/5 [No types assigned]

MITRE http://www.openwall.com/lists/oss-security/2024/04/23/3 [No types assigned]

MITRE http://www.openwall.com/lists/oss-security/2024/04/23/2 [No types assigned]

MITRE http://www.openwall.com/lists/oss-security/2024/04/23/4 [No types assigned]

MITRE disputed

Buffer Overflow vulnerability in ROS2 Foxy Fitzroy ROS_VERSION=2 and ROS_PYTHON_VERSION=3 allows attackers to run arbitrary code or cause a denial of service via improper handling of arrays or strings.

Buffer Overflow vulnerability in ROS2 Foxy Fitzroy ROS_VERSION=2 and ROS_PYTHON_VERSION=3 allows attackers to run arbitrary code or cause a denial of service via improper handling of arrays or strings. NOTE: this is disputed by multiple third parties who believe there was not reasonable evidence to determine the existence of a vulnerability.

NIST AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NIST CWE-120

OR
     *cpe:2.3:a:openrobotics:robot_operating_system:2:foxy:*:*:*:*:*:*

https://github.com/16yashpatel/CVE-2023-51199 No Types Assigned

https://github.com/16yashpatel/CVE-2023-51199 Third Party Advisory

Buffer Overflow vulnerability in ROS2 Foxy Fitzroy ROS_VERSION=2 and ROS_PYTHON_VERSION=3 allows attackers to run arbitrary code or cause a denial of service via improper handling of arrays or strings.

MITRE https://github.com/16yashpatel/CVE-2023-51199 [No types assigned]