Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.

CVE-2023-42459 Details

Description

Fast DDS is a C++ implementation of the DDS (Data Distribution Service) standard of the OMG (Object Management Group). In affected versions specific DATA submessages can be sent to a discovery locator which may trigger a free error. This can remotely crash any Fast-DDS process. The call to free() could potentially leave the pointer in the attackers control which could lead to a double free. This issue has been addressed in versions 2.12.0, 2.11.3, 2.10.3, and 2.6.7. Users are advised to upgrade. There are no known workarounds for this vulnerability.

Metrics

CVSS 3.x Severity and Vector Strings:

NIST: [email protected]CVSS-B:7.5 HIGHVector:CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CNA: [email protected]CVSS-B:8.6 HIGHVector:CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URL	Source(s)	Tag(s)
https://github.com/eProsima/Fast-DDS/issues/3207	CVE	ExploitIssue Tracking
https://github.com/eProsima/Fast-DDS/pull/3824	CVE	Patch
https://github.com/eProsima/Fast-DDS/security/advisories/GHSA-gq8g-fj58-22gm	CVE	Vendor Advisory
https://www.debian.org/security/2023/dsa-5568	CVE	Mailing List
https://github.com/eProsima/Fast-DDS/issues/3207	[email protected]	ExploitIssue Tracking
https://github.com/eProsima/Fast-DDS/pull/3824	[email protected]	Patch
https://github.com/eProsima/Fast-DDS/security/advisories/GHSA-gq8g-fj58-22gm	[email protected]	Vendor Advisory
https://www.debian.org/security/2023/dsa-5568	[email protected]	Mailing List

see all 8 references

Weakness Enumeration

CWE-ID	CWE Name	Source
CWE-415	Double Free	[email protected]
CWE-415	Double Free	[email protected]
CWE-416	Use After Free	[email protected]
CWE-590	Free of Memory not on the Heap	[email protected]

Affected Products

Product	Versions
eprosima fast dds	< 2.6.7 >= 2.10.0, < 2.10.3 >= 2.11.0, <= 2.11.1
CPE cpe:2.3:a:eprosima:fast_dds:::::::: Remediation No remediation found in references.

Change History

8 change records found show changes

Date	Action	Recorded By
Jun 17, 2026	CVE Modified	CISA-ADP
Jun 17, 2026	CVE Modified	[email protected]
Apr 11, 2025	Modified Analysis	[email protected]
Feb 13, 2025	CVE Modified	[email protected]
Nov 21, 2024	CVE Modified	CVE
May 14, 2024	CVE Modified	[email protected]
Nov 28, 2023	CVE Modified	[email protected]
Oct 23, 2023	Initial Analysis	[email protected]