p2r3 Bareiron Buffer Overflow Vulnerability Leading to Denial-of-Service

A buffer overflow vulnerability has been identified in p2r3 Bareiron, specifically in commit 8e4d4020d. This vulnerability allows unauthenticated remote attackers to cause a denial-of-service by sending a packet to the server. The issue arises because the 'handlePacket' function does not properly validate the length of user-controlled packets before they are processed, leading to memory being overwritten and the server crashing.

Impact

Exploitation of this vulnerability causes a server crash, creating a denial-of-service condition.

Reproduction

The vulnerability can be reproduced by sending a packet with a length that exceeds the capacity of the 'recv_buffer' in the 'handlePacket' function. This can be done by manipulating the packet length to overwrite adjacent memory, which ultimately leads to a server crash.