{"id":"CVE-2024-30258","summary":"FastDDS crash when publisher send malformed packet","details":"FastDDS is a C++ implementation of the DDS (Data Distribution Service) standard of the OMG (Object Management Group). Prior to versions 2.14.1, 2.13.5, 2.10.4, and 2.6.8, when a publisher serves a malformed `RTPS` packet, the subscriber crashes when creating `pthread`. This can remotely crash any Fast-DDS process, potentially leading to a DOS attack. Versions 2.14.1, 2.13.5, 2.10.4, and 2.6.8 contain a patch for the issue.\n","aliases":["GHSA-53xw-465j-rxfh"],"modified":"2026-09-14T08:12:55.577999Z","published":"2024-05-13T14:41:52.318Z","database_specific":{"cna_assigner":"GitHub_M","cwe_ids":["CWE-20"],"osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/30xxx/CVE-2024-30258.json"},"references":[{"type":"WEB","url":"https://drive.google.com/file/d/19W5UC52hPnAqVq_boZWO45d1TJ4WoCSh/view?usp=sharing"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/30xxx/CVE-2024-30258.json"},{"type":"ADVISORY","url":"https://github.com/eProsima/Fast-DDS/security/advisories/GHSA-53xw-465j-rxfh"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2024-30258"},{"type":"FIX","url":"https://github.com/eProsima/Fast-DDS/commit/65236f93e9c4ea3ff9a49fba4dfd9e43eb94037b"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/eprosima/fast-dds","events":[{"introduced":"0"},{"fixed":"77cfbe8a3a831ac525dbaf4c741743f65f3316c1"},{"introduced":"463d59ca81c7fd732edf45b982a58c0b54fc1da4"},{"fixed":"55b816d0551738384b0edaaef29ed86430c8e9bc"},{"introduced":"f633573e69e0552f5f0a48d5ed960a0782e2fea8"},{"fixed":"f376f7eb3758ec523fed0519e84e768233668b25"},{"introduced":"4c2016660e7d6a6e94970e1a2b4dcd8e47f21581"},{"fixed":"65236f93e9c4ea3ff9a49fba4dfd9e43eb94037b"}],"database_specific":{"cpe":["cpe:2.3:a:eprosima:fast_dds:*:*:*:*:*:*:*:*","cpe:2.3:a:eprosima:fast_dds:2.14.0:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"0"},{"fixed":"2.6.8"},{"introduced":"2.10.0"},{"fixed":"2.10.4"},{"introduced":"2.13.0"},{"fixed":"2.13.5"},{"introduced":"2.14.0"},{"last_affected":"2.14.0"}],"source":["CPE_RANGE","CPE_STRING","REFERENCES"]}}],"versions":["2.14.0","= 2.14.0","v2.10.1-rc1","v2.10.0-rc1","v2.3.0-1","v2.3.0-api","v2.2.0","v2.1.0","2.0.0-rc","2.0.0-beta","v1.7.2","Discovery-Time_Data_Typing","v1.9.0","v1.9.0-beta-2","v1.9.0-beta","v1.8.0-2","v1.8.0","v1.7.1","v1.7.0","v1.6.0","v1.5.0","v1.4.0","v1.3.0","v1.0.0"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-30258.json","vanir_signatures_modified":"2026-09-14T08:12:55Z","vanir_signatures":[{"source":"https://github.com/eprosima/fast-dds/commit/55b816d0551738384b0edaaef29ed86430c8e9bc","target":{"file":"src/cpp/rtps/participant/RTPSParticipantImpl.cpp","function":"RTPSParticipantImpl::update_attributes"},"deprecated":false,"digest":{"function_hash":"324427933685653720667523570866654147901","length":6264},"id":"CVE-2024-30258-00602aa5","signature_type":"Function","signature_version":"v1"},{"deprecated":false,"digest":{"function_hash":"242182022801325256429813967358559793687","length":365},"id":"CVE-2024-30258-01d6604f","signature_type":"Function","signature_version":"v1","source":"https://github.com/eprosima/fast-dds/commit/65236f93e9c4ea3ff9a49fba4dfd9e43eb94037b","target":{"file":"include/fastdds/rtps/messages/CDRMessage.hpp","function":"CDRMessage::readPropertySeq"}},{"signature_type":"Line","signature_version":"v1","source":"https://github.com/eprosima/fast-dds/commit/65236f93e9c4ea3ff9a49fba4dfd9e43eb94037b","target":{"file":"include/fastdds/rtps/messages/CDRMessage.h"},"deprecated":false,"digest":{"line_hashes":["138431363960578698831157643269849350209","202953979137769814025072037667196394416","64522563809543713068746728859623721108","226713098724485749457536436707249755375","239711052607765599261008427573505231147","336887187227635751907172444112008797293","102880577847477033559200857612742969727","259237941899490372267197073528540958210","80749173776496764784838024979006120949","59212284618819110786796013841479526212"],"threshold":0.9},"id":"CVE-2024-30258-0e131023"},{"deprecated":false,"digest":{"length":764,"function_hash":"217347624671849474259456384404081973754"},"id":"CVE-2024-30258-174cadbd","signature_type":"Function","signature_version":"v1","source":"https://github.com/eprosima/fast-dds/commit/65236f93e9c4ea3ff9a49fba4dfd9e43eb94037b","target":{"file":"test/blackbox/common/BlackboxTestsTransportUDP.cpp","function":"TEST"}},{"signature_version":"v1","source":"https://github.com/eprosima/fast-dds/commit/65236f93e9c4ea3ff9a49fba4dfd9e43eb94037b","target":{"file":"include/fastdds/rtps/messages/CDRMessage.hpp","function":"CDRMessage::readDataHolder"},"deprecated":false,"digest":{"function_hash":"294095008979163530671613818131053145694","length":401},"id":"CVE-2024-30258-4b7840d3","signature_type":"Function"},{"id":"CVE-2024-30258-5a24fab1","signature_type":"Function","signature_version":"v1","source":"https://github.com/eprosima/fast-dds/commit/65236f93e9c4ea3ff9a49fba4dfd9e43eb94037b","target":{"function":"CDRMessage::readBinaryPropertySeq","file":"include/fastdds/rtps/messages/CDRMessage.hpp"},"deprecated":false,"digest":{"function_hash":"262525771898776156920692576089560801038","length":377}},{"target":{"file":"include/fastdds/rtps/messages/CDRMessage.hpp","function":"CDRMessage::readDataHolderSeq"},"deprecated":false,"digest":{"function_hash":"140205806149084880120583991919614964697","length":369},"id":"CVE-2024-30258-5d74fa13","signature_type":"Function","signature_version":"v1","source":"https://github.com/eprosima/fast-dds/commit/65236f93e9c4ea3ff9a49fba4dfd9e43eb94037b"},{"deprecated":false,"digest":{"line_hashes":["262956306831166481237303932868870361372","306604317174497932475465898607727697833","196513365605387483283372719964676140728","294552922959227129118208678759959282933","233002817893507405036982977419080917531","137118083659526854717517586406070424281"],"threshold":0.9},"id":"CVE-2024-30258-63fc6a40","signature_type":"Line","signature_version":"v1","source":"https://github.com/eprosima/fast-dds/commit/55b816d0551738384b0edaaef29ed86430c8e9bc","target":{"file":"src/cpp/rtps/participant/RTPSParticipantImpl.cpp"}},{"source":"https://github.com/eprosima/fast-dds/commit/65236f93e9c4ea3ff9a49fba4dfd9e43eb94037b","target":{"file":"src/cpp/fastdds/core/policy/ParameterSerializer.hpp"},"deprecated":false,"digest":{"line_hashes":["325479319215349449384163022135485467019","25120863698927373074017055353571337052","200987524678677200902251432917657797418","279423547438556605532558726117514485609"],"threshold":0.9},"id":"CVE-2024-30258-775e166c","signature_type":"Line","signature_version":"v1"},{"source":"https://github.com/eprosima/fast-dds/commit/65236f93e9c4ea3ff9a49fba4dfd9e43eb94037b","target":{"file":"test/blackbox/common/BlackboxTestsTransportUDP.cpp"},"deprecated":false,"digest":{"line_hashes":["302740093868187649371599939574774869398","147813681107523957982951592158344177433","176166231610126578066245205943537970375","304776172736442350950471226477838560653"],"threshold":0.9},"id":"CVE-2024-30258-8ac423b2","signature_type":"Line","signature_version":"v1"},{"id":"CVE-2024-30258-aa51cd8c","signature_type":"Line","signature_version":"v1","source":"https://github.com/eprosima/fast-dds/commit/65236f93e9c4ea3ff9a49fba4dfd9e43eb94037b","target":{"file":"include/fastdds/rtps/messages/CDRMessage.hpp"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["271857784299035488259464956757071186887","73296022482285482584878908299217010544","85188748097507926016339222495618604072","69002559561433045457203629814153949187","275915721060480534131567251006596819548","92190120971699358044898027782029611630","88658749811437547186536992671472623386","292831637602902473873803616346242306955","140195439058633418439672991040218265638","208634670785469284743324892911534866156","55665905113037397877614370237923254979","156108024695924386579226422408310803343","224676036227511891091675806814064212601","291899521742134097900648551173001867802","39247120865013837953149494465853046795","52514128739091292538102494387694709256","228854478080581804833689981858370485021","109271306386299959050609475859833646373","309321364623349040104164600549389321927","95045677004188312636709236212124219009","268952949599762472114446797055503676106","15814462955543322166204168470101735429","58019973322377138494068592351082885264","16461734910066012977713804560236438908","54795957008083545732068677394480103400","179366111137823494428619548774719518154","267615018776176732358813777007572362743","42877913366909668869017622568548510448","201939857286996486016665310585889910369","29236328922804235783008603719073072343","291587697640857175894627501016399727675","32508095957561357927192249073274415796","53665743191748187834210624458043206292","57585148026246352718226651354783628845"]}},{"signature_version":"v1","source":"https://github.com/eprosima/fast-dds/commit/65236f93e9c4ea3ff9a49fba4dfd9e43eb94037b","target":{"file":"src/cpp/fastdds/core/policy/ParameterSerializer.hpp","function":"read_content_from_cdr_message"},"deprecated":false,"digest":{"function_hash":"113102812975012812755559896456687111370","length":279},"id":"CVE-2024-30258-d57dca20","signature_type":"Function"}]}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H"}]}