CyberRota Analysis
AI-GeneratedThe vulnerability exists in the Demuxer::addMuxPacket() function of MOOS-IvP versions up to 24.8.1, where it improperly trusts the packet count in mux headers, allowing attackers to specify excessively large counts. This can lead to unbounded memory allocation, resulting in denial of service due to resource exhaustion. Organizations using affected versions should prioritize this issue to prevent potential service disruptions.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
MOOS-IvP through 24.8.1 contains a denial of service vulnerability in the Demuxer::addMuxPacket() function that trusts the packet count declared in mux headers without validation. Attackers can declare arbitrarily large packet counts to trigger unbounded memory allocation, exhausting system resources and causing service unavailability.