Openrobotics

openrobotics

32 CVEs • 1 product

Products (1)

Click to collapse

Toggle

Robot Operating System

robot_operating_system

CVEs (32)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2024-38925 1Openrobotics 1Robot Operating System Dec 17, 2024 Dec 6, 2024 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Open Robotics Robotic Operating System 2 (ROS2) and Nav2 humble versions were discovered to contain a use-after-free via the nav2_amcl process. This vulnerability is triggered via remotely sending a request for change th...Show more Open Robotics Robotic Operating System 2 (ROS2) and Nav2 humble versions were discovered to contain a use-after-free via the nav2_amcl process. This vulnerability is triggered via remotely sending a request for change the value of dynamic-parameter`/amcl z_max` .Show less
CVE-2024-38924 1Openrobotics 1Robot Operating System Dec 17, 2024 Dec 6, 2024 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Open Robotics Robotic Operating System 2 (ROS2) and Nav2 humble versions were discovered to contain a use-after-free via the nav2_amcl process. This vulnerability is triggered via remotely sending a request to change the...Show more Open Robotics Robotic Operating System 2 (ROS2) and Nav2 humble versions were discovered to contain a use-after-free via the nav2_amcl process. This vulnerability is triggered via remotely sending a request to change the value of dynamic-parameter`/amcl laser_model_type` .Show less
CVE-2024-38923 1Openrobotics 1Robot Operating System Dec 17, 2024 Dec 6, 2024 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Open Robotics Robotic Operating System 2 (ROS2) and Nav2 humble versions were discovered to contain a use-after-free via the nav2_amcl process. This vulnerability is triggered via remotely sending a request to change the...Show more Open Robotics Robotic Operating System 2 (ROS2) and Nav2 humble versions were discovered to contain a use-after-free via the nav2_amcl process. This vulnerability is triggered via remotely sending a request to change the value of dynamic-parameter`/amcl odom_frame_id` .Show less
CVE-2024-38922 1Openrobotics 1Robot Operating System Dec 17, 2024 Dec 6, 2024 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Open Robotics Robotic Operating System 2 (ROS2) and Nav2 humble version was discovered to contain a heap overflow in the nav2_amcl process. This vulnerability is triggered via sending a crafted message to the component /...Show more Open Robotics Robotic Operating System 2 (ROS2) and Nav2 humble version was discovered to contain a heap overflow in the nav2_amcl process. This vulnerability is triggered via sending a crafted message to the component /initialpose.Show less
CVE-2024-38921 1Openrobotics 1Robot Operating System Dec 17, 2024 Dec 6, 2024 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Open Robotics Robotic Operating System 2 (ROS2) and Nav2 humble versions were discovered to contain a use-after-free via the nav2_amcl process. This vulnerability is triggered via remotely sending a request for change th...Show more Open Robotics Robotic Operating System 2 (ROS2) and Nav2 humble versions were discovered to contain a use-after-free via the nav2_amcl process. This vulnerability is triggered via remotely sending a request for change the value of dynamic-parameter`/amcl z_rand ` .Show less
CVE-2024-30962 1Openrobotics 1Robot Operating System Jan 9, 2025 Dec 5, 2024 N/A· v4 7.8 HIGH· v3 N/A· v2 Buffer Overflow vulnerability in Open Robotics Robotic Operating System 2 (ROS2) navigation2- ROS2-humble and navigation 2-humble allows a local attacker to execute arbitrary code via the nav2_amcl process
CVE-2024-30961 1Openrobotics 1Robot Operating System Dec 18, 2024 Dec 5, 2024 N/A· v4 7.8 HIGH· v3 N/A· v2 Insecure Permissions vulnerability in Open Robotics Robotic Operating System 2 (ROS2) navigation2- ROS2-humble and navigation 2-humble allows a local attacker to execute arbitrary code via the error-thrown mechanism in n...Show more Insecure Permissions vulnerability in Open Robotics Robotic Operating System 2 (ROS2) navigation2- ROS2-humble and navigation 2-humble allows a local attacker to execute arbitrary code via the error-thrown mechanism in nav2_bt_navigator.Show less
CVE-2024-25199 2Opennav Openrobotics 2Nav2 Robot Operating System Apr 2, 2025 Feb 20, 2024 N/A· v4 8.1 HIGH· v3 N/A· v2 Inappropriate pointer order of map_sub_ and map_free(map_) (amcl_node.cpp) in Open Robotics Robotic Operating Sytstem 2 (ROS2) and Nav2 humble versions leads to a use-after-free.
CVE-2024-25198 2Opennav Openrobotics 2Nav2 Robot Operating System Apr 2, 2025 Feb 20, 2024 N/A· v4 9.1 CRITICAL· v3 N/A· v2 Inappropriate pointer order of laser_scan_filter_.reset() and tf_listener_.reset() (amcl_node.cpp) in Open Robotics Robotic Operating Sytstem 2 (ROS2) and Nav2 humble versions leads to a use-after-free.
CVE-2024-25197 2Opennav Openrobotics 2Nav2 Robot Operating System Apr 2, 2025 Feb 20, 2024 N/A· v4 6.5 MEDIUM· v3 N/A· v2 Open Robotics Robotic Operating Sytstem 2 (ROS2) and Nav2 humble versions were discovered to contain a NULL pointer dereference via the isCurrent() function at /src/layered_costmap.cpp.
CVE-2024-25196 2Opennav Openrobotics 2Nav2 Robot Operating System Apr 2, 2025 Feb 20, 2024 N/A· v4 3.3 LOW· v3 N/A· v2 Open Robotics Robotic Operating Sytstem 2 (ROS2) and Nav2 humble versions were discovered to contain a buffer overflow via the nav2_controller process. This vulnerability is triggerd via sending a crafted .yaml file.
CVE-2020-10289 1Openrobotics 1Robot Operating System Nov 21, 2024 Aug 20, 2020 N/A· v4 8.8 HIGH· v3 6.5 MEDIUM· v2 Use of unsafe yaml load. Allows instantiation of arbitrary objects. The flaw itself is caused by an unsafe parsing of YAML values which happens whenever an action message is processed to be sent, and allows for the creat...Show more Use of unsafe yaml load. Allows instantiation of arbitrary objects. The flaw itself is caused by an unsafe parsing of YAML values which happens whenever an action message is processed to be sent, and allows for the creation of Python objects. Through this flaw in the ROS core package of actionlib, an attacker with local or remote access can make the ROS Master, execute arbitrary code in Python form. Consider yaml.safe_load() instead. Located first in actionlib/tools/library.py:132. See links for more info on the bug.Show less