Description
OCI OpenDDS versions prior to 3.18.1 do not handle a length parameter consistent with the actual length of the associated data, which may allow an attacker to remotely execute arbitrary code.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| OCI | OpenDDS | unspecified – < 3.18.1 | 3.18.1 |
Advisories 1
- ICSA-21-315-02 Multiple Data Distribution Service (DDS) Implementations (Update A) CISA ICS & IT advisories · Feb 1, 2022