CVE-2026-85443: Uncontrolled Resource Consumption in themoos core-moos
Description
MOOS core-moos through 10.4.0 contains a denial of service vulnerability in MOOSCommServer::ListenLoop() where the accept thread performs a blocking receive without timeout during the wire-protocol handshake. An attacker can open a TCP connection to the MOOSDB port and send no data, causing the accept thread to block indefinitely while holding the socket-list lock, preventing all subsequent client connections.
CVSS v4.0
Score 8.7high
Affected software
themoos
core-moos
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
CVE-2026-85443 describes a denial of service vulnerability in MOOS core-moos through version 10.4.0. The flaw exists in the MOOSCommServer::ListenLoop() where the accept thread blocks indefinitely on a receive call without timeout during the handshake phase. This allows an unauthenticated attacker to open a TCP connection to the MOOSDB port and send no data, causing the accept thread to hold the socket-list lock indefinitely. This blocks all subsequent client connections, resulting in denial of service.
Potential Impact
An attacker can cause a denial of service by exhausting the accept thread's ability to handle new connections, effectively preventing legitimate clients from connecting to the MOOSDB service. This can disrupt availability of the affected service.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- VulnCheck
- Date Reserved
- 2026-09-03T19:50:58.824Z
- Cvss Version
- 4.0
- State
- PUBLISHED
Threat ID: 6a99fa4cacd9273b4994b27c
Added to database: 09/03/2026, 22:53:00 UTC
Last enriched: 09/14/2026, 23:27:46 UTC
Last updated: 10/16/2026, 18:48:25 UTC
Views: 57
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.