A critical buffer over-read vulnerability in the MOOS core-moos library allows unauthenticated remote attackers to trigger out-of-bounds memory access, posing a significant risk to data confidentiality.

The vulnerability exists within the CMOOSCommPkt class, where improper deserialization of a four-byte packet leads to an out-of-bounds memory read. An unauthenticated attacker can trigger this flaw by sending a specially crafted packet to the MOOSDB service port.

Successful exploitation allows an attacker to read sensitive memory contents, which may include credentials, cryptographic keys, or other proprietary data handled by the MOOSDB process. Given the CVSS score of 8.2, this represents a high-severity risk that could lead to unauthorized information disclosure and potential system compromise.

Immediate Action: Update the MOOS core-moos library to the latest version provided by the vendor to incorporate the necessary bounds checking during packet deserialization.

Proactive Monitoring: Monitor network traffic directed at the MOOSDB port for malformed packets or unusual connection patterns that deviate from expected communication protocols.

Compensating Controls: Deploy a network-level intrusion detection or prevention system to filter traffic to the MOOSDB service, specifically blocking packets that do not conform to the expected length requirements.

Public Exploit Available: Unknown

This vulnerability presents a significant risk due to the ease of remote access and the potential for memory disclosure. Administrators should prioritize identifying instances of the affected software within their environment and apply the latest security updates immediately to prevent unauthorized access to system memory.