A stack-based buffer overflow in the indiserver component of the INDI library allows unauthenticated attackers to trigger critical system failures.

This vulnerability is a stack-based buffer overflow, classified as CWE-121, triggered during the parsing of XML tags within the indiserver. The vulnerability is remotely exploitable by an unauthenticated attacker.

Exploitation of this vulnerability poses a severe risk to the availability of the indiserver, potentially leading to unauthorized system crashes. Given the CVSS score of 7.5, organizations must treat this as a high-priority issue to prevent potential service downtime in telescope control or related instrumentation networks.

Immediate Action: Update the INDI library to the version incorporating the fix found in commit 96bbd7f564bbb128a129019e44eadd40dd49cff9.

Proactive Monitoring: Review server logs for malformed XML requests or unexpected crashes occurring during the command parsing phase.

Compensating Controls: Utilize a firewall to restrict access to the indiserver to authorized IP addresses only, thereby reducing the attack surface for remote exploitation.

Public Exploit Available: Unknown

The availability of a fix via the provided commit necessitates an immediate upgrade for all affected users. Given the high severity and the existence of a proof-of-concept, administrators should prioritize this update to ensure the continued security and stability of their instrumentation infrastructure.