CVE-2023-39949

eprosima Fast DDS is a C++ implementation of the Data Distribution Service standard of the Object Management Group. Prior to versions 2.9.1 and 2.6.5, improper validation of sequence numbers may lead to remotely reachable assertion failure. This can remotely crash any Fast-DDS process. Versions 2.9.1 and 2.6.5 contain a patch for this issue.

• CWE-617

• https://github.com/eProsima/Fast-DDS/blob/v2.9.0/src/cpp/rtps/messages/MessageReceiver.cpp#L1059Third Party Advisory
• https://github.com/eProsima/Fast-DDS/issues/3236Third Party Advisory
• https://github.com/eProsima/Fast-DDS/security/advisories/GHSA-3jv9-j9x3-95cgThird Party Advisory
• https://www.debian.org/security/2023/dsa-5481Third Party Advisory
• https://github.com/eProsima/Fast-DDS/blob/v2.9.0/src/cpp/rtps/messages/MessageReceiver.cpp#L1059Third Party Advisory
• https://github.com/eProsima/Fast-DDS/issues/3236Third Party Advisory
• https://github.com/eProsima/Fast-DDS/security/advisories/GHSA-3jv9-j9x3-95cgThird Party Advisory
• https://www.debian.org/security/2023/dsa-5481Third Party Advisory

Published

Aug 11, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-39943In Ashlar-Vellum Cobalt versions prior to v12 SP2 Build (120…8.4
• CVE-2023-39944OS command injection vulnerability in WRC-F1167ACF all versi…8.8
• CVE-2023-39945eprosima Fast DDS is a C++ implementation of the Data Distri…7.5
• CVE-2023-39946eprosima Fast DDS is a C++ implementation of the Data Distri…7.5
• CVE-2023-39947eprosima Fast DDS is a C++ implementation of the Data Distri…7.5
• CVE-2023-39948eprosima Fast DDS is a C++ implementation of the Data Distri…7.5
• CVE-2023-3995Rejected reason: This CVE ID has been rejected or withdrawn …
• CVE-2023-39950efibootguard is a simple UEFI boot loader with support for s…5.2
• CVE-2023-39951OpenTelemetry Java Instrumentation provides OpenTelemetry au…6.5
• CVE-2023-39952Nextcloud Server provides data storage for Nextcloud, an ope…6.5
• CVE-2023-39953user_oidc provides the OIDC connect user backend for Nextclo…4.8
• CVE-2023-39954user_oidc provides the OIDC connect user backend for Nextclo…8.1