关联漏洞
标题：
eProsima Fast DDS 访问控制错误漏洞
(CVE-2023-50257)
描述：eProsima Fast DDS是eProsima公司的OMG（对象管理组）DDS（数据分发服务）标准的 C++ 实现。 eProsima Fast DDS 2.13.0、2.12.2、 2.11.3、2.10.3 和 2.6.7之前版本存在访问控制错误漏洞，该漏洞源于SROS2使用的RTPS数据包中的存在安全问题，攻击者利用该漏洞可以强行断开订阅者的连接并拒绝订阅者的连接。
描述
This repository is for research purposes (2025 Sejong Univ. Capstone Design)
介绍
# ROS2 CVE-2023-50257 Reproduction
## 🔍 Overview
This repository is based on a PoC for CVE-2023-50257 and automates the collection of RTPS packets, parses GUID values, and sends a successful DoS packet.
**CVE-2023-50257** is a known security vulnerability in ROS2 (Robot Operating System 2).
- [https://github.com/eProsima/Fast-DDS/security/advisories/GHSA-v5r6-8mvh-cp98](https://github.com/eProsima/Fast-DDS/security/advisories/GHSA-v5r6-8mvh-cp98)
- [https://github.com/Desglaneurs/BoB_Des_glaneurs/tree/main/CVE-2023-50257](https://github.com/Desglaneurs/BoB_Des_glaneurs/tree/main/CVE-2023-50257)
> ⚠️ **This project is strictly for educational and research purposes. Do not use it in production or against systems you do not own or have permission to test.**
## 🧪 Environment
- OS: Ubuntu 22.04
- ROS2 version: ros2 humble / fastdds(2.6.3) / rmw(6.2.3)
## 🚀 Getting Started
1. Build the Docker image to set up the environment:
```bash
git clone https://github.com/Jminis/CVE-2023-50257.git
docker build -t cve_2023_50257 .
docker network create ros2_net
```
2. In Terminal 1 (listener), run the following command:
```bash
docker run -it --net ros2_net --name talker cve_2023_50257
ros2 run demo_nodes_cpp talker
```
3. In Terminal 2 (talker), run the following command:
```bash
docker run -it --net ros2_net --name talker cve_2023_50257
ros2 run demo_nodes_cpp talker
```
4. In Terminal 3 (host), execute `ex.py`
```bash
pip install scapy
sudo -E python3 ex.py
```
## 📺 Demo
文件快照
[4.0K] /data/pocs/958cf70e962860819a910e4c2dd2cc51911f2e9d
├── [4.0K] DEMO
│ └── [ 11M] TEST.gif
├── [2.0K] Dockerfile
├── [6.0K] ex.py
└── [1.5K] README.md
1 directory, 4 files
备注
1. 建议优先通过来源进行访问。
2. 如果因为来源失效或无法访问，请发送邮箱到 f.jinxu#gmail.com 索取本地快照（把 # 换成 @）。
3. 神龙已为您对POC代码进行快照，为了长期维护，请考虑为本地POC付费，感谢您的支持。