SB2023082452 - Ubuntu update for fastdds

Description

This security bulletin contains information about 7 vulnerabilities.

1) Resource management error (CVE-ID: CVE-2021-38425)

CWE-ID: CWE-399 - Resource Management Errors

CVSSv4: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Green

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to improper management of internal resources within the application. A remote attacker can send specially crafted packets to the system and perform a denial of service (DoS) attack.

2) Reachable Assertion (CVE-ID: CVE-2023-39534)

CWE-ID: CWE-617 - Reachable Assertion

CVSSv4: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Green

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to a reachable assertion when processing malformed GAP submessages. A remote attacker can send specially crafted traffic to the system and perform a denial of service (DoS) attack.

3) Uncaught exception (CVE-ID: CVE-2023-39945)

CWE-ID: CWE-248 - Uncaught Exception

CVSSv4: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Green

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to an uncaught exception when handling data submessage sent to PDP port in fastcdr. A remote attacker can send specially crafted data to the system and perform a denial of service (DoS) attack.

4) Heap-based buffer overflow (CVE-ID: CVE-2023-39946)

CWE-ID: CWE-122 - Heap-based Buffer Overflow

CVSSv4: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Amber

The vulnerability allows a remote attacker to execute arbitrary code on the target system.

The vulnerability exists due to a boundary error in eprosima::fastdds::dds::ParameterPropertyList_t::push_back_helper() function. A remote attacker can send an overly long CDR string to the discovery multicast port, trigger a heap-based buffer overflow and execute arbitrary code on the target system.

5) Heap-based buffer overflow (CVE-ID: CVE-2023-39947)

CWE-ID: CWE-122 - Heap-based Buffer Overflow

CVSSv4: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Amber

The vulnerability allows a remote attacker to execute arbitrary code on the target system.

The vulnerability exists due to a boundary error. A remote attacker can send a specially crafted PID_PROPERTY_LIST parameter to the system, trigger a heap-based buffer overflow and execute arbitrary code on the target system.

6) Uncaught Exception (CVE-ID: CVE-2023-39948)

CWE-ID: CWE-248 - Uncaught Exception

CVSSv4: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Green

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to an uncaught exception when handling data submessage. A remote attacker can send specially crafted data to the system and perform a denial of service (DoS) attack.

7) Reachable Assertion (CVE-ID: CVE-2023-39949)

CWE-ID: CWE-617 - Reachable Assertion

CVSSv4: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Green

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to a reachable assertion caused by improper validation of sequence numbers. A remote attacker can send specially crafted data to the system and perform a denial of service (DoS) attack.

Remediation

Install update from vendor's website.

References

• https://ubuntu.com/security/notices/USN-6306-1