HIGH🇵🇱 Wersja polska

CVE-2020-18734

CVSS 7.5v3.1pub. 2021-08-23upd. 2024-11-21

A stack buffer overflow in /ddsi/q_bitset.h of Eclipse IOT Cyclone DDS Project v0.1.0 causes the DDS subscriber server to crash.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

  • Eclipse Cyclone Data Distribution Service

    APP
    Eclipse
    0.1.0
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
Memory
CWE
References

Related vulnerabilities

CVE-2025-67109CRITICAL10.0PL ✓same product

Eclipse Cyclone DDS — błędna weryfikacja czasu certyfikatu umożliwia eskalację uprawnień

CVE-2024-10838HIGH8.8same product

An integer underflow during deserialization may allow any unauthenticated user to read out of bounds heap memo...

CVE-2020-18735HIGH7.5same product

A heap buffer overflow in /src/dds_stream.c of Eclipse IOT Cyclone DDS Project v0.1.0 causes the DDS subscribe...

CVE-2026-12605CRITICAL9.6PL ✓same vendor

Eclipse GlassFish: CSRF+SSRF w DownloadServlet umożliwia przejęcie domeny

CVE-2026-60007CRITICAL9.1PL ✓same vendor

Eclipse Milo: padding oracle w uwierzytelnianiu OPC-UA umożliwia odzyskanie hasła