Unscored CVE-2019-13566 EUVD-2019-5021GHSA-mx4r-hcj3-mm8c

An issue was discovered in the ROS communications-related packages (aka ros_comm or ros-melodic-ros-comm) through 1.14.3. A buffer overflow…

Published Nov 22, 2019 · Updated Aug 4, 2024 · Assigned by mitre

Package: ros-ros-comm Package: ros-ros-comm Ecosystem: Debian Ecosystem: Ubuntu

Description

An issue was discovered in the ROS communications-related packages (aka ros_comm or ros-melodic-ros-comm) through 1.14.3. A buffer overflow allows attackers to cause a denial of service and possibly execute arbitrary code via an IP address with a long hostname.

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Debian

Security tracker ↗

Release	Package	Fixed in	Advisory
Debian 14	ros-ros-comm	1.14.3+ds1-10	—
Debian 13	ros-ros-comm	1.14.3+ds1-10	—
Debian 12	ros-ros-comm	1.14.3+ds1-10	—

Ubuntu