Skip to content
Sign in
6.6 Medium

CVE-2021-38443 Eclipse CycloneDDS versions prior to 0.8.0 improperly handle invalid structures, which may allow an attacker to write…

Description

Eclipse CycloneDDS versions prior to 0.8.0 improperly handle invalid structures, which may allow an attacker to write arbitrary values in the XML parser.

Affected products and versions

Product Affected versions Fixed in
CycloneDDS 0.8 earliest → < 0.8.0 0.8.0

Other CVEs of CycloneDDS

The 2 CVEs of CycloneDDS →
CVE-2021-38441 Eclipse CycloneDDS versions prior to 0.8.0 are vulnerable to a write-what-where condition, which may allow an attacker… 6.6 Medium
Track this CVE