Description
MOOS core-moos through 10.4.0 contains a buffer overflow vulnerability in CMOOSSerialPort::GetTelegram() that writes a NUL terminator one byte past the serial telegram stack buffer. Attackers controlling the serial line can send a full-length telegram to trigger the off-by-one write, corrupting the stack and potentially enabling code execution.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
themoos core-moos
Default version status: unaffected
0 to ≤ 10.4.0affected
References
- https://github.com/themoos/core-moos/pull/73 ↗
- https://github.com/themoos/core-moos/commit/befb04df2039d0080715ea35f56268092db4ec0f ↗
- https://github.com/themoos/core-moos ↗
- https://github.com/themoos/core-moos/blob/ec9c77c68fcbdef8f5e4c60fe243acd223433f0c/Core/libMOOS/Utils/MOOSSerialPort.cpp#L595 ↗
- https://www.vulncheck.com/advisories/moos-core-moos-through-10.4.0-off-by-one-buffer-overflow-in-serial-telegram-handling ↗