CVE-2020-16124 — Integer overflow in ROS communications library

CVE-2020-16124

Integer overflow in ROS communications library PUBLISHED

Description (CNA)

Integer Overflow or Wraparound vulnerability in the XML RPC library of OpenRobotics ros_comm communications packages allows unauthenticated network traffic to cause unexpected behavior. This issue affects: OpenRobotics ros_comm communications packages Noetic and prior versions. Fixed in https://github.com/ros/ros_comm/pull/2065.

Affected (CNA)

Vendor / product	Versions
openrobotics / ros_comm ROS communications packages	affected Noetic through Noetic

CWE

CWE-190

References

https://github.com/ros/ros_comm/pull/2065

ADP enrichment

CVE

No English description supplied.

https://github.com/ros/ros_comm/pull/2065