CVE-2021-38443 — Eclipse CycloneDDS Improper Handling of Syntactically Invalid Structure

CVE-2021-38443

Eclipse CycloneDDS Improper Handling of Syntactically Invalid Structure PUBLISHED

Description (CNA)

Eclipse CycloneDDS versions prior to 0.8.0 improperly handle invalid structures, which may allow an attacker to write arbitrary values in the XML parser.

Affected (CNA)

Vendor / product	Versions
Eclipse / CycloneDDS	affected unspecified before 0.8.0

CWE

CWE-228

References

https://www.cisa.gov/uscert/ics/advisories/icsa-21-315-02
https://projects.eclipse.org/projects/iot.cyclonedds

ADP enrichment

CVE

No English description supplied.

https://www.cisa.gov/uscert/ics/advisories/icsa-21-315-02
https://projects.eclipse.org/projects/iot.cyclonedds

CISA-ADP

No English description supplied.

No references supplied.