CVE-2021-38445

OCI OpenDDS versions prior to 3.18.1 do not handle a length parameter consistent with the actual length of the associated data, which may allow an attacker to remotely execute arbitrary code.

Date published : 2022-05-05

https://opendds.org/

https://www.cisa.gov/uscert/ics/advisories/icsa-21-315-02