Cannelloni Buffer Overflow Vulnerability in CAN Frame Parsing

A heap buffer overflow vulnerability has been identified in Cannelloni version 2.0.0. The issue arises in the CAN frame parsing functions 'parseCANFrame' and 'decodeFrame', where remote attackers can send crafted CAN FD frames that lead to a denial-of-service condition by crashing the application, or potentially allow for arbitrary code execution.

Impact

Exploitation of this vulnerability causes a crash, creating a denial-of-service condition. However, the nature of the buffer overflow could also be exploited to execute arbitrary code.

Reproduction

The vulnerability can be reproduced by sending crafted CAN FD frames over the network to a machine running Cannelloni 2.0.0. The frames should be designed to exploit the buffer overflow in the 'parseCANFrame' function within 'parser.cpp'.