CNNVD-202512-4139 Information

CNNVD ID

CNNVD-202512-4139

CVE-2025-67111

  • CNNVD Published: 2025-12-23

Description (Chinese)

Object Computing OpenDDS是美国Object Computing公司的一个用于 C++ 和 Java 应用程序的开源中间件框架。 Object Computing OpenDDS 3.33.0之前版本存在安全漏洞,该漏洞源于RTPS协议实现存在整数溢出,可能导致拒绝服务攻击。

Description (English)

The Object Promoting OpenDDS is an open-source intermediate framework for C++ and Java applications of the United States of America. There was a security loophole in the pre-project building OpenDDS 3.3.3.0 that resulted from an integer spill of the RTPS agreement, which could lead to a denial of service attack.

Hazard Level

High

Vulnerability Type

其他

Affected Vendor

Object Computing

Published

2025-12-23

Last Modified

2026-02-24

References

https://gist.github.com/lkloliver/fcc5da83b4cba137ce95177a9afc4126 https://github.com/lkloliver/poc/blob/main/POC_OpenDDS.md https://access.redhat.com/security/cve/cve-2025-67111

Patch

https://opendds.org/downloads.html

Share on: