CVE-2021-37146

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2021-37146
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-37146.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2021-37146
Downstream
Published
2021-09-28T13:15:07.253Z
Modified
2026-07-08T06:47:57.464854114Z
Severity
  • 7.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
Summary
[none]
Details

An infinite loop in Open Robotics roscomm XMLRPC server in ROS Melodic through 1.4.11 and ROS Noetic through1.15.11 allows remote attackers to cause a Denial of Service in roscomm via a crafted XMLRPC call.

Database specific 
{
    "unresolved_ranges": [
        {
            "extracted_events": [
                {
                    "last_affected": "1.4.11"
                },
                {
                    "last_affected": "1.4.11"
                }
            ],
            "source": "CPE_RANGE",
            "vendor_product": "ros:ros-comm",
            "cpes": [
                "cpe:2.3:a:ros:ros-comm:*:*:*:*:*:*:*:*"
            ]
        }
    ]
}
References

Affected packages

Git / github.com/ros-gbp/ros_comm-release

Affected ranges

Type
GIT
Repo
https://github.com/ros-gbp/ros_comm-release
Events
Introduced
03899cc12c07c6cd3a295fb4a060a977ebfecef5
Last affected
5ca0fc41f11f396e543e80683c912a609aa8a438
Database specific
Show details 
{
    "extracted_events": [
        {
            "introduced": "1.15.0"
        },
        {
            "last_affected": "1.15.11"
        }
    ],
    "source": "CPE_RANGE",
    "cpe": "cpe:2.3:a:ros:ros-comm:*:*:*:*:*:*:*:*"
}

Affected versions

upstream/1.*
upstream/1.12.15
upstream/1.12.16
upstream/1.12.17
upstream/1.14.10
upstream/1.14.5
upstream/1.14.6
upstream/1.14.7
upstream/1.14.8
upstream/1.14.9
upstream/1.15.0
upstream/1.15.1
upstream/1.15.10
upstream/1.15.11
upstream/1.15.2
upstream/1.15.3
upstream/1.15.4
upstream/1.15.5
upstream/1.15.6
upstream/1.15.7
upstream/1.15.8
upstream/1.15.9

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-37146.json"

Git / github.com/ros/ros_comm

Affected ranges

Type
GIT
Repo
https://github.com/ros/ros_comm
Events
Introduced
8cf0bc0318be3cbc89ffec1e93bc99670e171dd1
Last affected
f5fa3a168760d62e9693f10dcb9adfffc6132d22
Database specific
Show details 
{
    "extracted_events": [
        {
            "introduced": "1.15.0"
        },
        {
            "last_affected": "1.15.11"
        }
    ],
    "source": "CPE_RANGE",
    "cpe": "cpe:2.3:a:ros:ros-comm:*:*:*:*:*:*:*:*"
}

Affected versions

1.*
1.15.0
1.15.1
1.15.10
1.15.11
1.15.2
1.15.3
1.15.4
1.15.5
1.15.6
1.15.7
1.15.8
1.15.9

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-37146.json"