Advisories · Technology
RTI Connext Professional.
Every CVE that names RTI Connext Professional among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 6.8 Medium
Out-of-bounds Read vulnerability in RTI Connext Professional (Core Libraries) allows Overread Buffers.
- RTI Connext Professional
- Memory corruption
- CVSS 7.3 High
Integer Overflow or Wraparound, Improper Access Control vulnerability in RTI Connext Professional (Core Libraries) allows Shared Resource Manipulation.
- RTI Connext Professional
- Memory corruption
- Broken access control
- CVSS 9.2 CriticalCritical · CVSS 9+
Use of Externally-Controlled Format String vulnerability in RTI Connext Professional (Core Libraries) allows Format String Injection.
- RTI Connext Professional
- Memory corruption
- CVSS 6.9 Medium
Off-by-one Error, Out-of-bounds Write vulnerability in RTI Connext Professional (Core Libraries) allows Overflow Buffers.
- RTI Connext Professional
- Memory corruption
- CWE-193
- CVSS 8.7 High
Incorrect Calculation vulnerability in RTI Connext Professional (Core Libraries) allows Abuse Existing Functionality.
- RTI Connext Professional
- CWE-682
- CVSS 6.8 Medium
Out-of-bounds Read, Function Call With Incorrect Number of Arguments, Access of Resource Using Incompatible Type ('Type Confusion') vulnerability in RTI Connext Professional (Core Libraries) allows O…
- RTI Connext Professional
- Memory corruption
- CWE-685
- CVSS 8.3 High
Heap-based Buffer Overflow vulnerability in RTI Connext Professional (Core Libraries) allows Overflow Buffers.
- RTI Connext Professional
- Memory corruption
- CVSS 6.8 Medium
Out-of-bounds Read, Function Call With Incorrect Number of Arguments, Access of Resource Using Incompatible Type ('Type Confusion') vulnerability in RTI Connext Professional (Core Libraries) allows O…
- RTI Connext Professional
- Memory corruption
- CWE-685
- CVSS 6.9 Medium
Double Free vulnerability in RTI Connext Professional (Core Libraries) allows File Manipulation.
- RTI Connext Professional
- Memory corruption
- CVSS 7.7 High
Use After Free vulnerability in RTI Connext Professional (Security Plugins) allows File Manipulation.
- RTI Connext Professional
- Memory corruption
- CVSS 10.0 CriticalCritical · CVSS 9+
Stack-based Buffer Overflow vulnerability in RTI Connext Professional (Core Libraries) allows Overflow Buffers.
- RTI Connext Professional
- Memory corruption
- CVSS 4.8 Medium
Out-of-bounds Write vulnerability in RTI Connext Professional (Queueing Service,Core Libraries,Persistence Service) allows Overflow Buffers.
- RTI Connext Professional
- Memory corruption
- CVSS 6.1 Medium
Missing Authentication for Critical Function vulnerability in RTI Connext Professional (Security Plugins) allows Identity Spoofing.
- RTI Connext Professional
- Authentication bypass
- CVSS 8.8 High
Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in RTI Connext Professional (Web Integration Service) allows Filter Failure through Buffer Overflow.
- RTI Connext Professional
- Memory corruption
- CVSS 9.2 CriticalCritical · CVSS 9+
Out-of-bounds Read vulnerability in RTI Connext Professional (Core Libraries) allows Overread Buffers.
- RTI Connext Professional
- Memory corruption
- CVSS 6.0 Medium
Missing Authentication for Critical Function vulnerability in RTI Connext Professional (Security Plugins) allows Fake the Source of Data.
- RTI Connext Professional
- Authentication bypass
- CVSS 9.2 CriticalCritical · CVSS 9+
Heap-based Buffer Overflow vulnerability in RTI Connext Professional (Core Libraries) allows Overflow Variables and Tags.
- RTI Connext Professional
- Memory corruption
- CVSS 8.8 High
Improper Restriction of XML External Entity Reference vulnerability in RTI Connext Professional (Core Libraries) allows Serialized Data External Linking.
- RTI Connext Professional
- XML external entities (XXE)
- CVSS 8.8 High
Improper Restriction of XML External Entity Reference vulnerability in RTI Connext Professional (Recording Service,Routing Service,Queueing Service,Cloud Discovery Service,Observability Collector) al…
- RTI Connext Professional
- XML external entities (XXE)
- CVSS 6.3 Medium
Buffer Over-read vulnerability in RTI Connext Professional (Core Libraries) allows Overread Buffers.
- RTI Connext Professional
- CWE-126
- CVSS 8.3 High
Exposure of Private Personal Information to an Unauthorized Actor vulnerability in RTI Connext Professional (Core Libraries) allows Sniffing Network Traffic.
- RTI Connext Professional
- Information disclosure
- CVSS 5.8 Medium
Use After Free vulnerability in RTI Connext Professional (Security Plugins) allows File Manipulation.
- RTI Connext Professional
- Memory corruption
- CVSS 8.3 High
Untrusted Pointer Dereference vulnerability in RTI Connext Professional (Core Libraries) allows Pointer Manipulation.
- RTI Connext Professional
- Memory corruption
- CVSS 4.8 Medium
Buffer Over-read, Off-by-one Error vulnerability in RTI Connext Professional (Core Libraries) allows File Manipulation, Overread Buffers.
- RTI Connext Professional
- CWE-126
- CWE-193
- CVSS 8.3 High
Untrusted Pointer Dereference vulnerability in RTI Connext Professional (Core Libraries) allows Pointer Manipulation.
- RTI Connext Professional
- Memory corruption
- CVSS 7.7 High
Out-of-bounds Read, Out-of-bounds Write vulnerability in RTI Connext Professional (Recording Service) allows Overflow Buffers, Overread Buffers.
- RTI Connext Professional
- Memory corruption
- CVSS 6.9 Medium
Buffer Copy without Checking Size of Input ('Classic Buffer Overflow'), Stack-based Buffer Overflow vulnerability in RTI Connext Professional (Core Libraries) allows Overflow Variables and Tags.
- RTI Connext Professional
- Memory corruption
- CVSS 6.9 Medium
Heap-based Buffer Overflow vulnerability in RTI Connext Professional (Core Libraries) allows Overflow Variables and Tags.
- RTI Connext Professional
- Memory corruption
- CVSS 8.3 High
Potential stack corruption in Routing Service when using a malicious XML configuration document
- RTI Connext Professional
- Memory corruption
- CVSS 6.9 Medium
Potential stack buffer write overflow in Persistence Service while parsing malicious environment variable on non-Windows systems
- RTI Connext Professional
- Memory corruption
- CVSS 6.9 Medium
Potential stack buffer write overflow in Connext applications while parsing malicious license file
- RTI Connext Professional
- Memory corruption
- CVSS 8.3 High
Potential stack buffer write overflow in Connext applications while parsing malicious XML types document
- RTI Connext Professional
- Memory corruption
- CVSS 6.9 Medium
Potential stack buffer write overflow in Connext applications while parsing malicious XML types document
- RTI Connext Professional
- Memory corruption
- CVSS 8.3 High
Potential stack buffer overflow when parsing an XML type
- RTI Connext Professional
- Memory corruption
- CVSS 8.3 High
Potential stack overflow when using XML configuration file referencing environment variables
- RTI Connext Professional
- Memory corruption
- CVSS 6.9 Medium
Buffer Copy without Checking Size of Input ('Classic Buffer Overflow'), Heap-based Buffer Overflow, Integer Overflow or Wraparound vulnerability in RTI Connext Professional (Security Plugins) allows…
- RTI Connext Professional
- Memory corruption
- CVSS 8.6 High
Potential arbitrary command execution in System Designer while parsing malicious HTTP/REST requests
- RTI Connext Professional
- Command injection
- CVSS 9.1 CriticalCritical · CVSS 9+
Potential arbitrary SQL query execution in Queuing Service while parsing malicious remote commands or configuration files
- RTI Connext Professional
- SQL injection
- CVSS 8.8 High
Potential Network Amplification and Information Exposure in RTI Connext Professional and Connext Micro
- RTI Connext Professional
- RTI Connext Micro
- CWE-406
- CWE-923