CVE-2019-13566

Severity: critical (CVSS 9.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 3.1% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2019-11-22 · updated 2026-06-17
Weakness: CWE-120

Description

An issue was discovered in the ROS communications-related packages (aka ros_comm or ros-melodic-ros-comm) through 1.14.3. A buffer overflow allows attackers to cause a denial of service and possibly execute arbitrary code via an IP address with a long hostname.

Affected products

openrobotics ros_comm ROS communications packages: through 1.14.3

References

https://github.com/ros/ros_comm/issues/1735
https://github.com/ros/ros_comm/issues/1752
https://github.com/ros/ros_comm/pull/1771
https://github.com/ros/ros_comm/issues/1735
https://github.com/ros/ros_comm/issues/1752
https://github.com/ros/ros_comm/pull/1771

Get alerted when CVE-2019-13566 or the next vulnerability affects your stack