SB2023082222 - Debian update for fastdds

Description

This security bulletin contains information about 6 secuirty vulnerabilities.

1) Reachable Assertion (CVE-ID: CVE-2023-39534)

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to a reachable assertion when processing malformed GAP submessages. A remote attacker can send specially crafted traffic to the system and perform a denial of service (DoS) attack.

2) Uncaught exception (CVE-ID: CVE-2023-39945)

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to an uncaught exception when handling data submessage sent to PDP port in fastcdr. A remote attacker can send specially crafted data to the system and perform a denial of service (DoS) attack.

3) Heap-based buffer overflow (CVE-ID: CVE-2023-39946)

The vulnerability allows a remote attacker to execute arbitrary code on the target system.

The vulnerability exists due to a boundary error in eprosima::fastdds::dds::ParameterPropertyList_t::push_back_helper() function. A remote attacker can send an overly long CDR string to the discovery multicast port, trigger a heap-based buffer overflow and execute arbitrary code on the target system.

4) Heap-based buffer overflow (CVE-ID: CVE-2023-39947)

The vulnerability allows a remote attacker to execute arbitrary code on the target system.

The vulnerability exists due to a boundary error. A remote attacker can send a specially crafted PID_PROPERTY_LIST parameter to the system, trigger a heap-based buffer overflow and execute arbitrary code on the target system.

5) Uncaught Exception (CVE-ID: CVE-2023-39948)

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to an uncaught exception when handling data submessage. A remote attacker can send specially crafted data to the system and perform a denial of service (DoS) attack.

6) Reachable Assertion (CVE-ID: CVE-2023-39949)

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to a reachable assertion caused by improper validation of sequence numbers. A remote attacker can send specially crafted data to the system and perform a denial of service (DoS) attack.

Remediation

Install update from vendor's website.

References

• https://www.debian.org/security/2023/dsa-5481