high7.0
CVE-2021-38445
OCI OpenDDS versions prior to 3.18.1 do not handle a length parameter consistent with the actual length of the associated data, which may allow an attacker to …
Impact
OCI OpenDDS versions prior to 3.18.1 do not handle a length parameter consistent with the actual length of the associated data, which may allow an attacker to remotely execute arbitrary code.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Objectcomputing | Opendds | before 3.18.1 |