{
  "cveId": "CVE-2023-39949",
  "url": "https://patchblox.com/security/cve/CVE-2023-39949",
  "summary": "CVE-2023-39949 is fixed in 3 products on 1 platform, first by fastdds-tools 2.5.0\u002Bds-3ubuntu0.1~esm1, released August 11, 2023. It is not reported as exploited. Patch Radar priority: High.",
  "title": "fastdds-tools: eprosima Fast DDS is a C\u002B\u002B implementation of the Data Distribution Service standard of the Object Management Group",
  "description": "eprosima Fast DDS is a C\u002B\u002B implementation of the Data Distribution Service standard of the Object Management Group. Prior to versions 2.9.1 and 2.6.5, improper validation of sequence numbers may lead to remotely reachable assertion failure. This can remotely crash any Fast-DDS process. Versions 2.9.1 and 2.6.5 contain a patch for this issue.",
  "published": "2023-08-11T07:15:00Z",
  "severity": "Medium",
  "cvss": 7.5,
  "cvssVector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
  "epss": 0.01038,
  "epssPercentile": 0.64184,
  "priority": "High",
  "priorityTier": 3,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "fastdds",
      "release": "Debian 12.15 (bookworm)",
      "fixedVersion": "2.9.1\u002Bds-1\u002Bdeb12u1",
      "fix": "DEBIAN-CVE-2023-39949",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2023-39949",
      "released": "2023-08-11T14:15:13Z"
    },
    {
      "platform": "linux",
      "product": "fastdds",
      "release": "Debian 13.5 (trixie)",
      "fixedVersion": "2.10.1\u002Bds-2",
      "fix": "DEBIAN-CVE-2023-39949",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2023-39949",
      "released": "2023-08-11T14:15:13Z"
    },
    {
      "platform": "linux",
      "product": "fastdds-tools",
      "release": "Ubuntu 22.04.1 LTS (jammy)",
      "fixedVersion": "2.5.0\u002Bds-3ubuntu0.1~esm1",
      "fix": "fastdds-tools 2.5.0\u002Bds-3ubuntu0.1~esm1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-jammy-fastdds-tools-2.5.0-ds-3ubuntu0.1-esm1",
      "released": "2023-08-11T07:15:00Z"
    },
    {
      "platform": "linux",
      "product": "libfastrtps2.5",
      "release": "Ubuntu 22.04.1 LTS (jammy)",
      "fixedVersion": "2.5.0\u002Bds-3ubuntu0.1~esm1",
      "fix": "libfastrtps2.5 2.5.0\u002Bds-3ubuntu0.1~esm1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-jammy-libfastrtps2.5-2.5.0-ds-3ubuntu0.1-esm1",
      "released": "2023-08-11T07:15:00Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-09T01:18:40Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}