CVE-2024-30916

Name of the Vulnerable Software and Affected Versions eProsima FastDDS versions 2.14.0 and earlier

Description An issue allows a local attacker to cause a denial of service (DoS) and obtain sensitive information via a crafted max samples parameter in the DurabilityService QoS component.

Recommendations For versions 2.14.0 and earlier, consider restricting access to the DurabilityService QoS component to minimize the risk of exploitation. As a temporary workaround, avoid using the max samples parameter in the affected component until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.