What happened
Buffer Copy without Checking Size of Input ('Classic Buffer Overflow'), Stack-based Buffer Overflow vulnerability in RTI Connext Professional (Core Libraries) allows Overflow Variables and Tags. This issue affects Connext Professional: from 7.4.0 before 7.5.0, from 7.0.0 before 7.3.0.7, from 6.1.0 before 6.1.2.23, from 6.0.0 before 6.0.1.42, from 5.3.0 before 5.3.*, from 5.2.0 before 5.2.*, from 4.5c before 5.1.*.
Affected versions
Connext Professional: 7.4.0 through before 7.5.0 (custom); 7.0.0 through before 7.3.0.7 (custom); 6.1.0 through before 6.1.2.23 (custom); 6.0.0 through before 6.0.1.42 (custom); 5.3.0 through before 5.3.* (custom); 5.2.0 through before 5.2.* (custom); 4.5c through before 5.1.* (custom) Fixed: See vendor advisory.
Why it matters
Review the vendor advisory and exposure of the affected product to determine operational impact.
Detection & mitigation
- Apply vendor-provided updates or mitigations.
- Review affected product exposure and access logs.
Public PoC references
No public PoC reference has passed the current publication threshold.