CVE-2020-16124highCWE-190

CVE-2020-16124: high-severity vulnerability in openrobotics ros_comm ROS communications…

Integer overflow in ROS communications library

Published · Updated

Follow this CVE+ Monitor ros comm ROS communications packages+ Monitor ros-ros-comm

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

21Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 7.3epss 0.9%
Integer Overflow or Wraparound vulnerability in the XML RPC library of OpenRobotics ros_comm communications packages allows unauthenticated network traffic to cause unexpected behavior. This issue affects: OpenRobotics ros_comm communications packages Noetic and prior versions. Fixed in https://github.com/ros/ros_comm/pull/2065.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Affected products
openrobotics · ros_comm ROS communications packages