| Package | Affected versions | Patched versions |
|---|---|---|
| core-moos | < 10.4.0 | 10.4.0 |
MOOS core-moos through 10.4.0 fails to validate that serialized string lengths are non-negative in CMOOSMsg::operator>>. Unauthenticated attackers can send a crafted message with a negative length value to the MOOSDB port, causing an unhandled exception that terminates the database process.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free