Likely permanent: GitHub doesn’t review this ecosystem
GHSA-v5r6-8mvh-cp98
FastDDS, RMW - FastDDS on ros 2 iron · published in eprosima/fast-dds
Facts
- Severity
- Critical · CVSS score 9.6CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
- Affected versions (FastDDS, RMW - FastDDS)
- (FastDDS) 2.10.2-2, (RMW - FastDDS) 7.1.1-2As entered by the maintainer. Not reviewed. Scanners can’t read this range. How to fix it
- Fixed in (FastDDS, RMW - FastDDS)
- (FastDDS) 2.10.3
- Affected versions (FastDDS, RMW - FastDDS)
- (FastDDS) 2.6.6-1, (RMW - FastDDS) 6.2.3.1As entered by the maintainer. Not reviewed. Scanners can’t read this range. How to fix it
- Fixed in (FastDDS, RMW - FastDDS)
- (FastDDS) 2.6.7
- Affected versions (FastDDS, RMW - FastDDS)
- (FastDDS) 2.3.6-6, (RMW - FastDDS) 5.0.2-1As entered by the maintainer. Not reviewed. Scanners can’t read this range. How to fix it
- Fixed in (FastDDS, RMW - FastDDS)
- None, ROS 2 GALACTIC reached end-of-life
- Affected versions (FastDDS, RMW - FastDDS)
- (FastDDS) 2.1.4-1, (RMW - FastDDS) 1.3.2-1As entered by the maintainer. Not reviewed. Scanners can’t read this range. How to fix it
- Fixed in (FastDDS, RMW - FastDDS)
- None, ROS 2 FOXY reached end-of-life
- CVE
- CVE-2023-50257 · published
- GitHub Advisory Database
- Not reviewed
- OSV.dev
- Not present
- Other CVEs pointing here
- None found in the CVE List
If you use FastDDS, RMW - FastDDS (FastDDS) 2.10.2-2, (RMW - FastDDS) 7.1.1-2
The fixed-version field says “(FastDDS) 2.10.3”. Check the advisory for which version fixes it. Dependabot, npm audit and OSV-Scanner probably never will.
Timeline
2024-02-19 16:06 UTC
Published by the maintainers
Cites CVE-2023-50257
2026-10-31 12:45 UTC
First seen by Limbowatch
not reviewed · not in OSV
Not expected
Reviewed by GitHub
GitHub doesn’t review this ecosystem
Machine-readable record: feed/GHSA-v5r6-8mvh-cp98.json