CVE-2024-30915

MEDIUM

OpenDDS - Denial of Service and Information Disclosure via DataReaderQoS max_samples Parameter

Title source: llm

Description

An issue was discovered in OpenDDS commit b1c534032bb62ad4ae32609778de6b8d6c823a66, allows a local attacker to cause a denial of service and obtain sensitive information via the max_samples parameter within the DataReaderQoS component.

References (1)

Core 1

Core References

Exploit, Issue Tracking, Patch

https://github.com/OpenDDS/OpenDDS/issues/4527

Scores

CVSS v3 4.3

EPSS 0.0048

EPSS Percentile 37.3%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

CISA SSVC

Vulnrichment

Exploitation poc

Automatable no

Technical Impact partial

Details

CWE

CWE-400

Status published

Products (1)

objectcomputing/opendds 2024-02-16

Published Apr 11, 2024

Tracked Since Feb 18, 2026