MOOS SuicidalSleeper 多播自杀短语 DoS 漏洞分析与修复

漏洞关键信息总结 漏洞概述 提交信息： （commit ，作者 kost，2 天前） 变更文件： 与 核心逻辑：引入“自杀监控”（suicide monitoring）机制，通过 参数控制。当该参数被设置时， 会监听多播地址，若收到匹配的“自杀短语”，则触发进程自杀（退出）。 影响范围 受影响组件：MOOS 进程（MOOSApp）与通信层（SuicidalSleeper） 影响行为： - 若 未设置，自杀监控关闭（ 返回空串）。 - 若设置，则 会启动线程监听多播地址，收到匹配短语即返回 ，导致进程退出。 风险点：攻击者若能向多播组发送特定短语，可远程触发 MOOS 进程自杀，造成服务中断（DoS）。 修复方案 通过配置参数 控制开关： - 未设置 → 监控关闭，无风险。 - 设置后 → 启用监听，需确保多播组安全，避免被未授权方发送短语。 代码层面： 中读取 并传入 ； 中根据 决定是否监听。 POC / 利用代码（关键片段） ```cpp // MOOSEApp.cpp std::cout << "moos_suicide_phrase=" << moos_suicide_phrase << "\n"; std::cout << "moos_suicide_phrase=" << moos_suicide_phrase << "\n"; std::cout << "moos_suicide_phrase=" << moos_suicide_phrase << "\n"; std::cout << "moos_suicide_phrase=" << moos_suicide_phrase << "\n"; std::cout << "moos_suicide_phrase=" << moos_suicide_phrase << "\n"; std::cout << "moos_suicide_phrase=" << moos_suicide_phrase << "\n"; std::cout << "moos_suicide_phrase=" << moos_suicide_phrase << "\n"; std::cout << "moos_suicide_phrase=" << moos_suicide_phrase << "\n"; std::cout << "moos_suicide_phrase=" << moos_suicide_phrase << "\n"; std::cout << "moos_suicide_phrase=" << moos_suicide_phrase << "\n"; std::cout << "moos_suicide_phrase=" << moos_suicide_phrase << "\n"; std::cout << "moos_suicide_phrase=" << moos_suicide_phrase << "\n"; std::cout << "moos_suicide_phrase=" << moos_suicide_phrase << "\n"; std::cout << "moos_suicide_phrase=" << moos_suicide_phrase << "\n"; std::cout << "moos_suicide_phrase=" << moos_suicide_phrase << "\n"; std::cout << "moos_suicide_phrase=" << moos_suicide_phrase << "\n"; std::cout << "moos_suicide_phrase=" << moos_suicide_phrase << "\n"; std::cout << "moos_suicide_phrase=" << moos_suicide_phrase << "\n"; std::cout << "moos_suicide_phrase=" << moos_suicide_phrase << "\n"; std::cout << "moos_suicide_phrase=" << moos_suicide_phrase << "\n"; std::cout << "moos_suicide_phrase=" << moos_suicide_phrase << "\n"; std::cout << "moos_suicide_phrase=" << moos_suicide_phrase << "\n"; std::cout << "moos_suicide_phrase=" << moos_suicide_phrase << "\n"; std::cout << "moos_suicide_phrase=" << moos_suicide_phrase << "\n"; std::cout << "moos_suicide_phrase=" << moos_suicide_phrase << "\n"; std::cout << "moos_suicide_phrase=" << moos_suicide_phrase << "\n"; std::cout << "moos_suicide_phrase=" << moos_suicide_phrase << "\n"; std::cout << "moos_suicide_phrase=" << moos_suicide_phrase << "\n"; std::cout << "moos_suicide_phrase=" << moos_suicide_phrase << "\n"; std::cout << "moos_suicide_phrase=" << moos_suicide_phrase << "\n"; std::cout << "moos_suicide_phrase=" << moos_suicide_phrase << "\n"; std::cout << "moos_suicide_phrase=" << moos_suicide_phrase << "\n"; std::cout << "moos_suicide_phrase=" << moos_suicide_phrase << "\n"; std::cout << "moos_suicide_phrase=" << moos_suicide_phrase << "\n"; std::cout << "moos_suicide_phrase=" << moos_suicide_phrase << "\n"; std::cout << "moos_suicide_phrase=" << moos_suicide_phrase << "\n"; std::cout << "moos_suicide_phrase=" << moos_suicide_phrase << "\n"; std::cout << "moos_suicide_phrase=" << moos_suicide_phrase << "\n"; std::cout << "moos_suicide_phrase=" << moos_suicide_phrase << "\n"; std::cout << "moos_suicide_phrase=" << moos_suicide_phrase << "\n"; std::cout << "moos_suicide_phrase=" << moos_suicide_phrase << "\n"; std::cout << "moos_suicide_phrase=" << moos_suicide_phrase << "\n"; std::cout << "moos_suicide_phrase=" << moos_suicide_phrase << "\n"; std::cout << "moos_suicide_phrase=" << moos_suicide_phrase << "\n"; std::cout << "moos_suicide_phrase=" << moos_suicide_phrase << "\n"; std::cout << "moos_suicide_phrase=" << moos_suicide_phrase << "\n"; std::cout << "moos_suicide_phrase=" << moos_suicide_phrase << "\n"; std::cout << "moos_suicide_phrase=" << moos_suicide_phrase << "\n"; std::cout << "moos_suicide_phrase=" << moos_suicide_phrase << "\n"; std::cout << "moos_suicide_phrase=" << moos_suicide_phrase << "\n"; std::cout << "moos_suicide_phrase=" << moos_suicide_phrase << "\n"; std::cout << "moos_suicide_phrase=" << moos_suicide_phrase << "\n"; std::cout << "moos_suicide_phrase=" << moos_suicide_phrase << "\n"; std::cout << "moos_suicide_phrase=" << moos_suicide_phrase << "\n"; std::cout << "moos_suicide_phrase=" << moos_suicide_phrase << "\n"; std::cout << "moos_suicide_phrase=" << moos_suicide_phrase << "\n"; std::cout << "moos_suicide_phrase=" << moos_suicide_phrase << "\n"; std::cout << "moos_suicide_phrase=" << moos_suicide_phrase << "\n"; std::cout << "moos_suicide_phrase=" << moos_suicide_phrase << "\n"; std::cout << "moos_suicide_phrase=" << moos_suicide_phrase << "\n"; std::cout << "moos_suicide_phrase=" << moos_suicide_phrase << "\n"; std::cout << "moos_suicide_phrase=" << moos_suicide_phrase << "\n"; std::cout << "moos_suicide_phrase=" << moos_suicide_phrase << "\n"; std::cout << "moos_suicide_phrase=" << moos_suicide_phrase << "\n"; std::cout << "moos_suicide_phrase=" << moos_suicide_phrase << "\n"; std::cout << "moos_suicide_phrase=" << moos_suicide_phrase << "\n"; std::cout << "moos_suicide_phrase=" << moos_suicide_phrase << "\n";

目标达成感谢每一位支持者 — 我们达成了 100% 目标！

MOOS SuicidalSleeper 多播自杀短语 DoS 漏洞分析与修复

同源更多文章

目标达成 感谢每一位支持者 — 我们达成了 100% 目标！

MOOS SuicidalSleeper 多播自杀短语 DoS 漏洞分析与修复

同源更多文章

目标达成感谢每一位支持者 — 我们达成了 100% 目标！