Skip to content
NewA calmer, faster ZeroHour
Vulnerabilitylow

Re: rosbridge_library Protocol.incoming() quadratic CPU cost in JSON fallback

oss-security ()2
Read at seclists.org
AI summary · glm-5.3Summaries by Vani AI

David Wheeler notes a rosbridge_library quadratic CPU cost flaw was publicly disclosed on oss-security without prior coordination.

In an oss-security reply, David A. Wheeler pointed out that a poster had just publicly disclosed details of a quadratic CPU cost issue in rosbridge_library's Protocol.incoming() JSON fallback path. Wheeler referenced the mailing list's stated norms encouraging public discussion of open-source security flaws. The reply itself contains no fix, CVE, or exploitation details.

Key facts
  • rosbridge_library Protocol.incoming() JSON fallback has quadratic CPU cost
  • Issue was disclosed publicly on oss-security without coordination
Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat
Tags
denial-of-servicedisclosureoss-securityrosrosbridge

From the original article

Posted by David A. Wheeler on Sep 14 Hi, you just disclosed that information publicly. As clearly explained https://oss-security.

oss-security

seclists.org

Read the full article at oss-security

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.