Title: ROS Kinetic Kame
Description: Se descubrió una vulnerabilidad de inyección de shell en ROS (Robot Operating System) Kinetic Kame en ROS_VERSION 1 y ROS_PYTHON_VERSION 3, que permite a atacantes remotos ejecutar código arbitrario, escalar privilegios y obtener información confidencial debido a la forma en que ROS maneja la ejecución de comandos de shell en componentes como intérpretes de comandos o interfaces que procesan entradas externas.

A shell injection vulnerability was discovered in ROS (Robot Operating System) Kinetic Kame in ROS_VERSION 1 and ROS_ PYTHON_VERSION 3, allows remote attackers to execute arbitrary code, escalate privileges, and obtain sensitive information due to the way ROS handles shell command execution in components like command interpreters or interfaces that process external inputs. NOTE: this is disputed by multiple third parties who believe there was not reasonable evidence to determine the existence of a vulnerability.

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that there was not reasonable evidence to determine the existence of a vulnerability.

MITRE http://www.openwall.com/lists/oss-security/2024/04/23/2

MITRE http://www.openwall.com/lists/oss-security/2024/04/23/3

MITRE http://www.openwall.com/lists/oss-security/2024/04/23/4

MITRE http://www.openwall.com/lists/oss-security/2024/04/23/5

MITRE https://github.com/yashpatelphd/CVE-2024-30726

MITRE disputed