PT-2022-10723
CVE-2021-38429
·
Published
2022-05-05
·
Updated
2022-05-13
Description by
CVSS 3.1
9.1
CriticalMetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
Name of the Vulnerable Software and Affected Versions
OCI OpenDDS versions prior to 3.18.1
Description
The issue arises when an attacker sends a specially crafted packet to flood target devices with unwanted traffic. This may result in a denial-of-service condition and information exposure.
Recommendations
For versions prior to 3.18.1, update to version 3.18.1 or later to resolve the issue. As a temporary workaround, consider implementing traffic filtering measures to restrict unwanted packets until a patch is applied. Restrict access to the network to minimize the risk of exploitation.
Found an issue in the description? Have something to add? Feel free to write us 👾