MOOS SuicidalSleeper Multicast DoS via Suicide Phrase: Risk & Fix

Key Vulnerability Information Summary Vulnerability Overview Commit Message: (commit , author kost, 2 days ago) Modified Files: and Core Logic: Introduces a "suicide monitoring" mechanism controlled by the parameter. When this parameter is set, listens on a multicast address; if a matching "suicide phrase" is received, it triggers process termination (exit). Scope of Impact Affected Components: MOOS processes (MOOSApp) and the communication layer (SuicidalSleeper) Affected Behaviors: - If is not set, suicide monitoring is disabled ( returns an empty string). - If set, starts a thread to listen on the multicast address; upon receiving the matching phrase, it returns , causing the process to exit. Risk Point: If an attacker can send the specific phrase to the multicast group, they can remotely trigger the MOOS process to terminate, causing a service interruption (DoS). Fix Solution The toggle is controlled via the configuration parameter: - Not set → monitoring is off, no risk. - Once set → listening is enabled; ensure the multicast group is secured to prevent unauthorized entities from sending the phrase. At the code level: reads and passes it to ; decides whether to listen based on . POC / Exploit Code (Key Snippet) ```cpp // MOOSEApp.cpp std::cout << "moos_suicide_phrase=" << moos_suicide_phrase << "\n"; std::cout << "moos_suicide_phrase=" << moos_suicide_phrase << "\n"; std::cout << "moos_suicide_phrase=" << moos_suicide_phrase << "\n"; std::cout << "moos_suicide_phrase=" << moos_suicide_phrase << "\n"; std::cout << "moos_suicide_phrase=" << moos_suicide_phrase << "\n"; std::cout << "moos_suicide_phrase=" << moos_suicide_phrase << "\n"; std::cout << "moos_suicide_phrase=" << moos_suicide_phrase << "\n"; std::cout << "moos_suicide_phrase=" << moos_suicide_phrase << "\n"; std::cout << "moos_suicide_phrase=" << moos_suicide_phrase << "\n"; std::cout << "moos_suicide_phrase=" << moos_suicide_phrase << "\n"; std::cout << "moos_suicide_phrase=" << moos_suicide_phrase << "\n"; std::cout << "moos_suicide_phrase=" << moos_suicide_phrase << "\n"; std::cout << "moos_suicide_phrase=" << moos_suicide_phrase << "\n"; std::cout << "moos_suicide_phrase=" << moos_suicide_phrase << "\n"; std::cout << "moos_suicide_phrase=" << moos_suicide_phrase << "\n"; std::cout << "moos_suicide_phrase=" << moos_suicide_phrase << "\n"; std::cout << "moos_suicide_phrase=" << moos_suicide_phrase << "\n"; std::cout << "moos_suicide_phrase=" << moos_suicide_phrase << "\n"; std::cout << "moos_suicide_phrase=" << moos_suicide_phrase << "\n"; std::cout << "moos_suicide_phrase=" << moos_suicide_phrase << "\n"; std::cout << "moos_suicide_phrase=" << moos_suicide_phrase << "\n"; std::cout << "moos_suicide_phrase=" << moos_suicide_phrase << "\n"; std::cout << "moos_suicide_phrase=" << moos_suicide_phrase << "\n"; std::cout << "moos_suicide_phrase=" << moos_suicide_phrase << "\n"; std::cout << "moos_suicide_phrase=" << moos_suicide_phrase << "\n"; std::cout << "moos_suicide_phrase=" << moos_suicide_phrase << "\n"; std::cout << "moos_suicide_phrase=" << moos_suicide_phrase << "\n"; std::cout << "moos_suicide_phrase=" << moos_suicide_phrase << "\n"; std::cout << "moos_suicide_phrase=" << moos_suicide_phrase << "\n"; std::cout << "moos_suicide_phrase=" << moos_suicide_phrase << "\n"; std::cout << "moos_suicide_phrase=" << moos_suicide_phrase << "\n"; std::cout << "moos_suicide_phrase=" << moos_suicide_phrase << "\n"; std::cout << "moos_suicide_phrase=" << moos_suicide_phrase << "\n"; std::cout << "moos_suicide_phrase=" << moos_suicide_phrase << "\n"; std::cout << "moos_suicide_phrase=" << moos_suicide_phrase << "\n"; std::cout << "moos_suicide_phrase=" << moos_suicide_phrase << "\n"; std::cout << "moos_suicide_phrase=" << moos_suicide_phrase << "\n"; std::cout << "moos_suicide_phrase=" << moos_suicide_phrase << "\n"; std::cout << "moos_suicide_phrase=" << moos_suicide_phrase << "\n"; std::cout << "moos_suicide_phrase=" << moos_suicide_phrase << "\n"; std::cout << "moos_suicide_phrase=" << moos_suicide_phrase << "\n"; std::cout << "moos_suicide_phrase=" << moos_suicide_phrase << "\n"; std::cout << "moos_suicide_phrase=" << moos_suicide_phrase << "\n"; std::cout << "moos_suicide_phrase=" << moos_suicide_phrase << "\n"; std::cout << "moos_suicide_phrase=" << moos_suicide_phrase << "\n"; std::cout << "moos_suicide_phrase=" << moos_suicide_phrase << "\n"; std::cout << "moos_suicide_phrase=" << moos_suicide_phrase << "\n"; std::cout << "moos_suicide_phrase=" << moos_suicide_phrase << "\n"; std::cout << "moos_suicide_phrase=" << moos_suicide_phrase << "\n"; std::cout << "moos_suicide_phrase=" << moos_suicide_phrase << "\n"; std::cout << "moos_suicide_phrase=" << moos_suicide_phrase << "\n"; std::cout << "moos_suicide_phrase=" << moos_suicide_phrase << "\n"; std::cout << "moos_suicide_phrase=" << moos_suicide_phrase << "\n"; std::cout << "moos_suicide_phrase=" << moos_suicide_phrase << "\n"; std::cout << "moos_suicide_phrase=" << moos_suicide_phrase << "\n"; s

Goal Reached Thanks to every supporter — we hit 100%!

MOOS SuicidalSleeper Multicast DoS via Suicide Phrase: Risk & Fix

More from this source