CVE-2023-52427

Published: Feb 11, 2024Modified: Jun 17, 2026

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

In OpenDDS through 3.27, there is a segmentation fault for a DataWriter with a large value of resource_limits.max_samples. NOTE: the vendor's position is that the product is not designed to handle a max_samples value that is too large for the amount of memory on the system.

Affected (1)

Products: Objectcomputing: Opendds

Objectcomputing

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Objectcomputing Opendds	Up to 3.27

Related CWEs

Allocation of Resources Without Limits or Throttling

The product allocates a reusable resource or group of resources on behalf of an actor without imposing any restrictions on the size or number of resources that can be allocated, in violation of the intended security policy for that actor.

References (2)

https://github.com/OpenDDS/OpenDDS/issues/4388

Source: cve@mitre.org

ExploitIssue Tracking

https://github.com/OpenDDS/OpenDDS/issues/4388

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitIssue Tracking

Timeline

No history available yet.