RTI Connext Professional vulnerabilities

An out-of-bounds read vulnerability in RTI Connext Professional Core Libraries allows buffer overread. This affects versions from 7.4.0 before 7.7.0, from 7.0.0 before 7.3.1.3, from 6.1.0 before 6.1.*, from 6.0.0 before 6.0.*, from 5.3.0 before 5.3.*, and from 5.0.0 before 5.2.*.

A classic buffer overflow vulnerability has been found in RTI Connext Professional (Web Integration Service) due to copying data without checking input size. An attacker can exploit this flaw to cause filter failure, potentially leading to uncontrolled system behavior.

Missing authentication for a critical function in RTI Connext Professional (Security Plugins) allows identity spoofing. The vulnerability affects versions from 5.3.0 to 7.4.0 before 7.7.0.

Missing authentication for a critical function in RTI Connext Professional (Security Plugins) allows spoofing the source of data. The vulnerability affects versions from 5.3.0 up to 7.7.0 (excluding patched releases).

An out-of-bounds write vulnerability has been discovered in RTI Connext Professional, affecting Queueing Service, Core Libraries, and Persistence Service. This issue can lead to buffer overflows in versions from 7.4.0 before 7.7.0, from 7.0.0 before 7.3.1.3, and from 6.1.0 before 6.1.*.

A heap-based buffer overflow vulnerability in RTI Connext Professional Core Libraries allows overflow of variables and tags. This issue affects multiple versions of the product.