CVE-2023-37915

OpenDDS is an open source C++ implementation of the Object Management Group (OMG) Data Distribution Service (DDS). OpenDDS crashes while parsing a malformed `PID_PROPERTY_LIST` in a DATA submessage during participant discovery. Attackers can remotely crash OpenDDS processes by sending a DATA submessage containing the malformed parameter to the known multicast port. This issue has been addressed in version 3.25. Users are advised to upgrade. There are no known workarounds for this vulnerability.

• CWE-20

• https://github.com/OpenDDS/OpenDDS/releases/tag/DDS-3.25Release Notes
• https://github.com/OpenDDS/OpenDDS/security/advisories/GHSA-v5pp-7prc-5xq9Exploit, Vendor Advisory
• https://github.com/OpenDDS/OpenDDS/releases/tag/DDS-3.25Release Notes
• https://github.com/OpenDDS/OpenDDS/security/advisories/GHSA-v5pp-7prc-5xq9Exploit, Vendor Advisory

Published

Jul 21, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-3791A vulnerability was found in IBOS OA 4.5.5 and classified as…9.8
• CVE-2023-37910XWiki Platform is a generic wiki platform offering runtime s…8.1
• CVE-2023-37911XWiki Platform is a generic wiki platform offering runtime s…6.5
• CVE-2023-37912XWiki Rendering is a generic Rendering system that converts …8.8
• CVE-2023-37913XWiki Platform is a generic wiki platform offering runtime s…8.8
• CVE-2023-37914XWiki Platform is a generic wiki platform offering runtime s…8.8
• CVE-2023-37916KubePi is an opensource kubernetes management panel. The end…7.5
• CVE-2023-37917KubePi is an opensource kubernetes management panel. A norma…8.8
• CVE-2023-37918Dapr is a portable, event-driven, runtime for building distr…7.5
• CVE-2023-37919Cal.com is open-source scheduling software. A vulnerability …5.4
• CVE-2023-3792A vulnerability was found in Beijing Netcon NS-ASG 6.3. It h…6.5
• CVE-2023-37920Certifi is a curated collection of Root Certificates for val…9.8