CVE-2021-38445 — OCI OpenDDS Secure Improper Handling of Length Parameter Inconsistency

CVE-2021-38445

OCI OpenDDS Secure Improper Handling of Length Parameter Inconsistency PUBLISHED

Description (CNA)

OCI OpenDDS versions prior to 3.18.1 do not handle a length parameter consistent with the actual length of the associated data, which may allow an attacker to remotely execute arbitrary code.

Affected (CNA)

Vendor / product	Versions
OCI / OpenDDS	affected unspecified before 3.18.1

CWE

CWE-130

References

https://www.cisa.gov/uscert/ics/advisories/icsa-21-315-02
https://opendds.org/

ADP enrichment

CVE

No English description supplied.

https://www.cisa.gov/uscert/ics/advisories/icsa-21-315-02
https://opendds.org/

CISA-ADP

No English description supplied.

No references supplied.