{"id":"CVE-2021-37146","details":"An infinite loop in Open Robotics ros_comm XMLRPC server in ROS Melodic through 1.4.11 and ROS Noetic through1.15.11 allows remote attackers to cause a Denial of Service in ros_comm via a crafted XMLRPC call.","modified":"2026-07-08T06:47:57.464854114Z","published":"2021-09-28T13:15:07.253Z","database_specific":{"unresolved_ranges":[{"extracted_events":[{"last_affected":"1.4.11"},{"last_affected":"1.4.11"}],"source":"CPE_RANGE","vendor_product":"ros:ros-comm","cpes":["cpe:2.3:a:ros:ros-comm:*:*:*:*:*:*:*:*"]}]},"references":[{"type":"ADVISORY","url":"https://discourse.ros.org/t/new-packages-for-melodic-2021-09-27/22446"},{"type":"ADVISORY","url":"https://discourse.ros.org/t/new-packages-for-noetic-2021-09-27/22447"},{"type":"ADVISORY","url":"https://github.com/ros/ros_comm"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/ros-gbp/ros_comm-release","events":[{"introduced":"03899cc12c07c6cd3a295fb4a060a977ebfecef5"},{"last_affected":"5ca0fc41f11f396e543e80683c912a609aa8a438"}],"database_specific":{"extracted_events":[{"introduced":"1.15.0"},{"last_affected":"1.15.11"}],"source":"CPE_RANGE","cpe":"cpe:2.3:a:ros:ros-comm:*:*:*:*:*:*:*:*"}}],"versions":["upstream/1.15.11","upstream/1.15.10","upstream/1.12.17","upstream/1.14.10","upstream/1.15.9","upstream/1.12.16","upstream/1.14.9","upstream/1.14.8","upstream/1.12.15","upstream/1.14.7","upstream/1.15.8","upstream/1.14.6","upstream/1.15.7","upstream/1.15.6","upstream/1.15.5","upstream/1.14.5","upstream/1.15.4","upstream/1.15.3","upstream/1.15.2","upstream/1.15.1","upstream/1.15.0"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-37146.json"}},{"ranges":[{"type":"GIT","repo":"https://github.com/ros/ros_comm","events":[{"introduced":"8cf0bc0318be3cbc89ffec1e93bc99670e171dd1"},{"last_affected":"f5fa3a168760d62e9693f10dcb9adfffc6132d22"}],"database_specific":{"cpe":"cpe:2.3:a:ros:ros-comm:*:*:*:*:*:*:*:*","extracted_events":[{"introduced":"1.15.0"},{"last_affected":"1.15.11"}],"source":"CPE_RANGE"}}],"versions":["1.15.11","1.15.10","1.15.9","1.15.8","1.15.7","1.15.6","1.15.5","1.15.4","1.15.3","1.15.2","1.15.1","1.15.0"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-37146.json"}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}]}