| Package | Affected versions | Patched versions |
|---|---|---|
| core-moos | < 10.4.0 | 10.4.0 |
MOOS core-moos through 10.4.0 contains a remote process termination vulnerability in the SuicidalSleeper component that uses a hard-coded passphrase for multicast command authorization. Any multicast-reachable peer can enumerate MOOS processes and send termination commands to trigger process shutdown by exploiting the default multicast group and port with the known passphrase.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free