ros2_humble vulnerabilities

4 known vulnerabilities in ros2_humble from Open Robotics. 4 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.3 High severity

  ros2_navigation2: Improper Control of Generation of Code

  CVE-2024-37860Dec 5, 2024Open Robotics

  Buffer Overflow vulnerability in Open Robotic Operating System 2 ROS2 navigation2- ROS2-humble&& navigation2-humble allows a local attacker to execute arbitrary code via a crafted .yaml file to the nav2_amcl process

• 7.8 High severity

  ros2_navigation2: Improper Control of Generation of Code

  CVE-2024-30964Dec 5, 2024Open Robotics

  Insecure Permissions vulnerability in Open Robotics Robotic Operating System 2 (ROS2) navigation2- ROS2-humble and navigation 2-humble allows a local attacker to execute arbitrary code via the initial_pose_sub thread created by nav2_bt_navigator

• 7.8 High severity

  ros2_navigation2: Improper Control of Generation of Code

  CVE-2024-30963Dec 5, 2024Open Robotics

  Buffer Overflow vulnerability in Open Robotics Robotic Operating System 2 (ROS2) navigation2- ROS2-humble and navigation 2-humble allows a local attacker to execute arbitrary code via a crafted script.

• 7.8 High severity

  ros2_navigation2: Buffer Copy without Checking Size of Input

  CVE-2024-30962Dec 5, 2024Open Robotics

  Buffer Overflow vulnerability in Open Robotics Robotic Operating System 2 (ROS2) navigation2- ROS2-humble and navigation 2-humble allows a local attacker to execute arbitrary code via the nav2_amcl process