NA

CVE-2024-30684

Published: 09/04/2024 Updated: 17/05/2024

Vulnerability Summary

An insecure logging vulnerability has been identified within ROS2 Iron Irwini versions ROS_VERSION 2 and ROS_PYTHON_VERSION 3, allows malicious users to access sensitive information via inadequate security measures implemented within the logging mechanisms of ROS2. NOTE: this is disputed by multiple third parties who believe there was not reasonable evidence to determine the existence of a vulnerability.

Vulnerability Trend

Mailing Lists

<!--X-Body-Begin--> <!--X-User-Header--> oss-sec mailing list archives <!--X-User-Header-End--> <!--X-TopPNI--> By Date By Thread </form> <!--X-TopPNI-End--> <!--X-MsgBody--> <!--X-Subject-Header-Begin--> Re: 83 bogus CVEs assigned to Robot Operating System (ROS) <!--X-Subject-Header-End--> <!--X-Head-of-Message--> From: Yash P ...
<!--X-Body-Begin--> <!--X-User-Header--> oss-sec mailing list archives <!--X-User-Header-End--> <!--X-TopPNI--> By Date By Thread </form> <!--X-TopPNI-End--> <!--X-MsgBody--> <!--X-Subject-Header-Begin--> Re: 83 bogus CVEs assigned to Robot Operating System (ROS) <!--X-Subject-Header-End--> <!--X-Head-of-Message--> From: Mark E ...
<!--X-Body-Begin--> <!--X-User-Header--> oss-sec mailing list archives <!--X-User-Header-End--> <!--X-TopPNI--> By Date By Thread </form> <!--X-TopPNI-End--> <!--X-MsgBody--> <!--X-Subject-Header-Begin--> Re: 83 bogus CVEs assigned to Robot Operating System (ROS) <!--X-Subject-Header-End--> <!--X-Head-of-Message--> From: Yash P ...
<!--X-Body-Begin--> <!--X-User-Header--> oss-sec mailing list archives <!--X-User-Header-End--> <!--X-TopPNI--> By Date By Thread </form> <!--X-TopPNI-End--> <!--X-MsgBody--> <!--X-Subject-Header-Begin--> 83 bogus CVEs assigned to Robot Operating System (ROS) <!--X-Subject-Header-End--> <!--X-Head-of-Message--> From: Mark Esler ...

Github Repositories