MEDIUM🇵🇱 Wersja polska

CVE-2021-38429

CVSS 6.6v3.1pub. 2022-05-05upd. 2024-11-21

OCI OpenDDS versions prior to 3.18.1 are vulnerable when an attacker sends a specially crafted packet to flood target devices with unwanted traffic, which may result in a denial-of-service condition and information exposure.

CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H

  • Objectcomputing Opendds

    APP
    Objectcomputing
    < 3.18.1
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
References

Related vulnerabilities

CVE-2025-67111HIGH7.5ten sam produkt

An integer overflow in the RTPS protocol implementation of OpenDDS DDS before v3.33.0 allows attackers to caus...

CVE-2023-52427HIGH7.5ten sam produkt

In OpenDDS through 3.27, there is a segmentation fault for a DataWriter with a large value of resource_limits....

CVE-2023-37915HIGH7.5ten sam produkt

OpenDDS is an open source C++ implementation of the Object Management Group (OMG) Data Distribution Service (D...

CVE-2021-38445HIGH7.0ten sam produkt

OCI OpenDDS versions prior to 3.18.1 do not handle a length parameter consistent with the actual length of the...

CVE-2021-38447HIGH8.6ten sam produkt

OCI OpenDDS versions prior to 3.18.1 are vulnerable when an attacker sends a specially crafted packet to flood...