cbcvebase.
CVE-2024-30916
published 2024-04-11

CVE-2024-30916: An issue was discovered in eProsima FastDDS v.2.14.0 and before, allows a local attacker to cause a denial of service (DoS) and obtain sensitive information…

PriorityP426high7.1CVSS 3.1
AVLACLPRLUINSUCHINAH
EPSS
0.24%
14.4th percentile
An issue was discovered in eProsima FastDDS v.2.14.0 and before, allows a local attacker to cause a denial of service (DoS) and obtain sensitive information via a crafted max_samples parameter in DurabilityService QoS component.

Affected

2 ranges
VendorProductVersion rangeFixed in
debianfastdds< fastdds 2.14.1+ds-1 (forky)fastdds 2.14.1+ds-1 (forky)
eprosimafast_dds<= 2.14.0

CVSS provenance

nvdv3.17.1HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
osv7.1HIGH
vendor_debian7.1HIGH
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.