Vendor
An unauthenticated remote attacker can crash the INDI indiserver daemon via a stack-based buffer overflow triggered by malformed XML input containing excessively long tags.