An issue was discovered in eProsima FastDDS v.2.14.0 and before, allows a local attacker to cause a denial of service (DoS) and obtain sensitive information via a crafted history_depth parameter in DurabilityService QoS component.
The product does not properly handle when the expected number of values for parameters, fields, or arguments is not provided in input, or if those values are undefined.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Fast_dds | Eprosima | * | 2.14.0 (including) |
| Fastdds | Ubuntu | mantic | * |
| Fastdds | Ubuntu | oracular | * |