MEDIUM🇵🇱 Wersja polska

CVE-2024-30915

CVSS 4.3v3.1pub. 2024-04-11upd. 2025-06-17

An issue was discovered in OpenDDS commit b1c534032bb62ad4ae32609778de6b8d6c823a66, allows a local attacker to cause a denial of service and obtain sensitive information via the max_samples parameter within the DataReaderQoS component.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

  • Objectcomputing Opendds

    APP
    Objectcomputing
    2024-02-16
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
DoS
CWE
References

Related vulnerabilities

CVE-2025-67111HIGH7.5ten sam produkt

An integer overflow in the RTPS protocol implementation of OpenDDS DDS before v3.33.0 allows attackers to caus...

CVE-2023-52427HIGH7.5ten sam produkt

In OpenDDS through 3.27, there is a segmentation fault for a DataWriter with a large value of resource_limits....

CVE-2023-37915HIGH7.5ten sam produkt

OpenDDS is an open source C++ implementation of the Object Management Group (OMG) Data Distribution Service (D...

CVE-2021-38445HIGH7.0ten sam produkt

OCI OpenDDS versions prior to 3.18.1 do not handle a length parameter consistent with the actual length of the...

CVE-2021-38447HIGH8.6ten sam produkt

OCI OpenDDS versions prior to 3.18.1 are vulnerable when an attacker sends a specially crafted packet to flood...