CVE-2024-44853.yaml

CVE-ID: CVE-2024-41653
PROGRAM: ros-planning navigation2
PACKAGE: nav2_controller
VERSION: ['humble','iron']
BUG-TYPE: null-pointer dereference
DESCRIPTION: Open Robotics Robotic Operating Sytstem 2 (ROS2) and Nav2 humble versions were discovered to contain a null-pointer dereference via the nav2_controller process.
DETAIL: This vulnerability is triggerd because here's a lack of checking whether `action_server_` is a null-pointer