Description
MOOS core-moos through 10.4.0 fails to validate that serialized string lengths are non-negative in CMOOSMsg::operator>>. Unauthenticated attackers can send a crafted message with a negative length value to the MOOSDB port, causing an unhandled exception that terminates the database process.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| themoos | core-moos | ≤ 10.4.0 | — |
References
- Pull Request #74 issue-tracking patch
- Proposed fix commit (pull request not merged) patch
- https://github.com/themoos/core-moos product
- MOOSMsg.cpp (verified sink) technical-description
- VulnCheck Advisory: MOOS core-moos through 10.4.0 MOOSDB Denial of Service via Negative Serialized String Length third-party-advisory