{
  "cveId": "CVE-2023-39948",
  "url": "https://patchblox.com/security/cve/CVE-2023-39948",
  "summary": "CVE-2023-39948 is fixed in 3 products on 1 platform, first by fastdds-tools 2.5.0\u002Bds-3ubuntu0.1~esm1, released August 11, 2023. It is not reported as exploited. Patch Radar priority: High.",
  "title": "fastdds-tools: eprosima Fast DDS is a C\u002B\u002B implementation of the Data Distribution Service standard of the Object Management Group",
  "description": "eprosima Fast DDS is a C\u002B\u002B implementation of the Data Distribution Service standard of the Object Management Group. Prior to versions 2.10.0 and 2.6.5, the \u0060BadParamException\u0060 thrown by Fast CDR is not caught in Fast DDS. This can remotely crash any Fast DDS process. Versions 2.10.0 and 2.6.5 contain a patch for this issue.",
  "published": "2023-08-11T07:15:00Z",
  "severity": "Medium",
  "cvss": 7.5,
  "cvssVector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
  "epss": 0.01038,
  "epssPercentile": 0.64184,
  "priority": "High",
  "priorityTier": 3,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "fastdds",
      "release": "Debian 12.15 (bookworm)",
      "fixedVersion": "2.9.1\u002Bds-1\u002Bdeb12u1",
      "fix": "DEBIAN-CVE-2023-39948",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2023-39948",
      "released": "2023-08-11T14:15:13Z"
    },
    {
      "platform": "linux",
      "product": "fastdds",
      "release": "Debian 13.5 (trixie)",
      "fixedVersion": "2.10.1\u002Bds-2",
      "fix": "DEBIAN-CVE-2023-39948",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2023-39948",
      "released": "2023-08-11T14:15:13Z"
    },
    {
      "platform": "linux",
      "product": "fastdds-tools",
      "release": "Ubuntu 22.04.1 LTS (jammy)",
      "fixedVersion": "2.5.0\u002Bds-3ubuntu0.1~esm1",
      "fix": "fastdds-tools 2.5.0\u002Bds-3ubuntu0.1~esm1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-jammy-fastdds-tools-2.5.0-ds-3ubuntu0.1-esm1",
      "released": "2023-08-11T07:15:00Z"
    },
    {
      "platform": "linux",
      "product": "libfastrtps2.5",
      "release": "Ubuntu 22.04.1 LTS (jammy)",
      "fixedVersion": "2.5.0\u002Bds-3ubuntu0.1~esm1",
      "fix": "libfastrtps2.5 2.5.0\u002Bds-3ubuntu0.1~esm1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-jammy-libfastrtps2.5-2.5.0-ds-3ubuntu0.1-esm1",
      "released": "2023-08-11T07:15:00Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-09T01:18:40Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}