CVE-2026-85443: MOOS core-moos through 10.4.0 MOOSDB Accept Loop Denial of Service
MOOS core-moos through 10.4.0 contains a denial of service vulnerability in MOOSCommServer::ListenLoop() where the accept thread performs a blocking receive without timeout during the wire-protocol handshake. An attacker can open a TCP connection to the MOOSDB port and send no data, causing the accept thread to block indefinitely while holding the socket-list lock, preventing all subsequent client connections.
Affected Software
Event History
Frequently Asked Questions
What access does an attacker need to trigger the denial of service?
An attacker only needs network access to the MOOSDB TCP port. No authentication or user interaction is required; opening a connection and sending no handshake data is sufficient.
Which deployments are exposed?
Any MOOS core-moos deployment through version 10.4.0 is exposed if an attacker can reach its MOOSDB port over TCP. The provided information does not identify any configuration prerequisite beyond network reachability.
What is the operational effect of exploitation?
The accept thread can block indefinitely during the wire-protocol handshake while holding the socket-list lock. This prevents subsequent clients from connecting to MOOSDB.
How can administrators identify an active attack or affected condition?
A likely indicator is that new MOOSDB client connections cannot be accepted while an existing TCP connection remains open without supplying handshake data. The provided information does not specify a log message or detection command.