CVE-2020-16124

HIGH

ros-comm < 1.15.9 - Unauthenticated Integer Overflow in XML RPC Library

Title source: llm

Description

Integer Overflow or Wraparound vulnerability in the XML RPC library of OpenRobotics ros_comm communications packages allows unauthenticated network traffic to cause unexpected behavior. This issue affects: OpenRobotics ros_comm communications packages Noetic and prior versions. Fixed in https://github.com/ros/ros_comm/pull/2065.

References (1)

Core 1

Core References

Patch, Third Party Advisory x_refsource_confirm

https://github.com/ros/ros_comm/pull/2065

Scores

CVSS v3 7.3

EPSS 0.0090

EPSS Percentile 55.0%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Details

CWE

CWE-190

Status published

Products (1)

ros/ros-comm < 1.15.9

Published Oct 13, 2020

Tracked Since Feb 18, 2026