Debian/cyclonedds: critical 9.8
Eclipse CycloneDDS versions prior to 0.8.0 improperly handle invalid structures, which may allow an attacker to write arbitrary values in the XML parser.
Action: Upgrade cyclonedds to 0.8.1-2 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.8.1-2 | - |
Fixed versions
| 0.8.1-2 |
Sources
- osv: DEBIAN-CVE-2021-38443#Debian:13/cyclonedds
- https://security-tracker.debian.org/tracker/CVE-2021-38443
published · modified · JSON