Description
RTI Connext DDS Professional and Connext DDS Secure Versions 4.2.x to 6.1.0 are vulnerable to a stack-based buffer overflow, which may allow a local attacker to execute arbitrary code.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| RTI | Connext DDS Professional | 4.2x – ≤ 6.1.0 | — |
| RTI | Connext DDS Secure | 4.2x – ≤ 6.1.0 | — |
Advisories 1
- ICSA-21-315-02 Multiple Data Distribution Service (DDS) Implementations (Update A) CISA ICS & IT advisories · Feb 1, 2022