Test ID:	1.3.6.1.4.1.25623.1.1.12.2023.6306.1
Category:	Ubuntu Local Security Checks
Title:	Ubuntu: Security Advisory (USN-6306-1)
Summary:	The remote host is missing an update for the 'fastdds' package(s) announced via the USN-6306-1 advisory.
Description:	Summary: The remote host is missing an update for the 'fastdds' package(s) announced via the USN-6306-1 advisory. Vulnerability Insight: It was discovered that Fast DDS incorrectly handled certain inputs. A remote attacker could possibly use this issue to cause a denial of service and information exposure. This issue only affected Ubuntu 22.04 LTS. (CVE-2021-38425) It was discovered that Fast DDS incorrectly handled certain inputs. An attacker could possibly use this issue to cause a crash. (CVE-2023-39534, CVE-2023-39945, CVE-2023-39946, CVE-2023-39947, CVE-2023-39948, CVE-2023-39949) Affected Software/OS: 'fastdds' package(s) on Ubuntu 22.04, Ubuntu 23.04. Solution: Please install the updated package(s). CVSS Score: 6.4 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:N/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2021-38425 https://github.com/eProsima/Fast-DDS https://www.cisa.gov/uscert/ics/advisories/icsa-21-315-02 Common Vulnerability Exposure (CVE) ID: CVE-2023-39534 Debian Security Information: DSA-5481 (Google Search) https://www.debian.org/security/2023/dsa-5481 https://bombshell.gtisc.gatech.edu/ddsfuzz/pcap/fastdds-assert-230509.pcap https://github.com/eProsima/Fast-DDS/blob/v2.9.1/include/fastdds/rtps/common/SequenceNumber.h#L238-L252 https://github.com/eProsima/Fast-DDS/blob/v2.9.1/src/cpp/rtps/reader/StatefulReader.cpp#L863 https://github.com/eProsima/Fast-DDS/security/advisories/GHSA-fcr6-x23w-94wp Common Vulnerability Exposure (CVE) ID: CVE-2023-39945 https://bombshell.gtisc.gatech.edu/ddsfuzz/pcap/fastdds-exception-20230509-02.pcap https://github.com/eProsima/Fast-CDR/blob/v1.0.26/src/cpp/Cdr.cpp#L72-L79 https://github.com/eProsima/Fast-DDS/security/advisories/GHSA-2rq6-8j7x-frr9 Common Vulnerability Exposure (CVE) ID: CVE-2023-39946 https://github.com/eProsima/Fast-DDS/commit/349227005827e8a67a0406b823138b5068cc47dc https://github.com/eProsima/Fast-DDS/security/advisories/GHSA-j297-rg6j-m7hx Common Vulnerability Exposure (CVE) ID: CVE-2023-39947 https://github.com/eProsima/Fast-DDS/security/advisories/GHSA-mf55-5747-c4pv Common Vulnerability Exposure (CVE) ID: CVE-2023-39948 https://github.com/eProsima/Fast-DDS/files/11117197/fastdds-assert.pcap.zip https://github.com/eProsima/Fast-DDS/issues/3422 https://github.com/eProsima/Fast-DDS/security/advisories/GHSA-x9pj-vrgf-f68f Common Vulnerability Exposure (CVE) ID: CVE-2023-39949 https://github.com/eProsima/Fast-DDS/blob/v2.9.0/src/cpp/rtps/messages/MessageReceiver.cpp#L1059 https://github.com/eProsima/Fast-DDS/issues/3236 https://github.com/eProsima/Fast-DDS/security/advisories/GHSA-3jv9-j9x3-95cg
Copyright	Copyright (C) 2023 Greenbone AG

This is only one of 146377 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.