Disconnect Vulnerability in eProsima Fast DDS: Denial of Service Risk
Summary
DEBIAN-CVE-2023-50257: eProsima Fast DDS (formerly Fast RTPS) is a C++ implementation of the Data Distribution Service standard of the Object Management Group. Affects fastdds versions < 2.14.0+ds-2. Fixed in 2.14.0+ds-2. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
eProsima Fast DDS (formerly known as Fast RTPS) is a C++ implementation of the Data Distribution Service (DDS) standard defined by the Object Management Group (OMG). It facilitates real-time data exchange between distributed applications, making it essential for systems requiring high-performance communication. The package is widely used in robotics, IoT, and other applications where reliable data distribution is critical. However, it has been found to have a vulnerability that can be exploited to disrupt communication between nodes.
Vulnerability Detail
The vulnerability arises from the lack of encryption for the data (p[UD]) and guid values used to disconnect nodes in the Fast DDS framework. An attacker can exploit this weakness to forcibly disconnect a Subscriber from a Publisher. This can lead to a Denial of Service (DoS) situation where the Subscriber cannot reconnect, and continuous disconnection packets can prevent any Subscribers from receiving data. This vulnerability has existed since the initial commit of the SecurityManager.cpp code on November 8, 2016, affecting versions prior to 2.13.0, 2.12.2, 2.11.3, 2.10.3, and 2.6.7.
How To Fix
Minimum fixed version
2.14.0+ds-2
This is the first release that contains the fix.
sudo apt-get install --only-upgrade fastddsTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, consider implementing network-level security measures such as firewalls to restrict unauthorized access to the Global Data Space (239.255.0.1:7400). Additionally, monitor network traffic for unusual disconnection patterns that may indicate an ongoing attack.
Conclusion
The disconnect vulnerability in eProsima Fast DDS poses a significant risk to applications relying on this package for data distribution. It is crucial to update to the latest version to mitigate potential attacks. Implementing additional security measures can also help protect against exploitation until the update is applied.
See every vulnerability recorded for fastdds →
FAQ
The disconnect vulnerability can lead to a Denial of Service (DoS) attack, where Subscribers are unable to receive data or reconnect to the Publisher.
Versions prior to 2.13.0, 2.12.2, 2.11.3, 2.10.3, and 2.6.7 are affected by this vulnerability.
You can use Vulert's playground at Vulert Scanner to check if your application is affected by this vulnerability without needing to sign up.
If an immediate update is not possible, implement network security measures to mitigate the risk of exploitation.
Detailed information can be found in the official Debian CVE database at https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2023-50257.json.
References
Related vulnerabilities
Recent vulnerabilities recorded for fastdds.
