CVSS: 4.8

CVE-2025-15150

CVE-2025-15150 Stack Buffer Overflow in Px4

 📅 PUBLISHED: 2025-12-28 19:02 UTC 🔄 UPDATED: 2026-09-23 20:34 UTC 

[ ZERO-DAY / UNPATCHED ] [ DEFENSE PATCH ↓ ]

💣 PoC: None

👁️

🎯 EPSS: 0.24%

👁️

VULNERABLE: UNKNOWN / CHECK VENDOR

CVSS SEVERITY SCALE

9.0–10.0 CRITICAL

7.0–8.9 HIGH

4.0–6.9 MEDIUM

0.1–3.9 LOW

0.0 NONE

4.8

THREAT LEVEL

INTEL SOURCES NVD CVEProject OSV.dev EPSS HOW WE SCORE →

■ tracking this CVE ✓ independent patch confirmation ⧗ same-origin mirror (GHSA) ⚠ active exploitation verification policy →

Executive Summary

CVE-2025-15150 is a stack-based buffer overflow vulnerability in the PX4-Autopilot project, affecting versions up to and including 1.16.0. The flaw resides in the MavlinkLogHandler::state_listing and MavlinkLogHandler::log_entry_from_id functions within src/modules/mavlink/mavlink_log_handler.cpp. An attacker with local access can trigger a stack-based buffer overflow, potentially leading to arbitrary code execution or denial of service. The vulnerability has a low EPSS score (0.0%) and no public exploit code is available. A patch has been identified in the PX4 repository.

⚡ AUTOMATE YOUR CVE INTELLIGENCE

This record — and 170,000+ others — are available via the ValtersIT API. One endpoint replaces five: NVD + GitHub CVE + CISA KEV + EPSS + Nuclei + Exploit-DB, unified.

›Patch confidence — UNVERIFIED to CONFIRMED, cross-referenced NVD + RHSA + Debian

›Exploit & PoC — poc_status, poc_url, has_exploit. Not in NVD.

›Shodan dorks — ready-made queries to find exposed vulnerable systems

›Detection rules — YARA · Wazuh · Elastic (all plans) · Sigma (Pro)

›pending_fields — know exactly which of 7 fields NVD hasn't processed yet

›Free backfill — data incomplete when you paid? Re-check within 30 days = 0 credits

PAYG €0.08/lookup Standard €19/mo (was €29) · 5k credits Pro €65/mo (was €99) · 20k credits FOUNDING PRICE · LOCKED FOR LIFE · ENDS 31 DEC 2026

[ FROM €19/MO ]

Free sandbox key available
No signup required

CVSS Breakdown & Threat Level

The CVSS score is listed as 0.0, which is likely a placeholder. Based on the vulnerability characteristics (local access, stack-based buffer overflow), a reasonable CVSS v3.1 vector would be:

Attack Vector (AV): Local (L)
Attack Complexity (AC): Low (L)
Privileges Required (PR): Low (L)
User Interaction (UI): None (N)
Scope (S): Unchanged (U)
Confidentiality (C): High (H)
Integrity (I): High (H)
Availability (A): High (H)

Estimated CVSS Score: 7.8 (High)

Threat Level: High. While local access is required, the impact on confidentiality, integrity, and availability is severe. The vulnerability could allow an attacker to execute arbitrary code in the context of the PX4 process, potentially compromising the entire drone or autonomous system.

Deep Dive & Mechanics

The vulnerability is a classic stack-based buffer overflow in the MAVLink log handler. The functions MavlinkLogHandler::state_listing and MavlinkLogHandler::log_entry_from_id process MAVLink messages related to log file listing and retrieval. When handling specially crafted MAVLink messages, these functions fail to properly validate the size of input data before copying it into a fixed-size stack buffer. This allows an attacker to overwrite the stack, including the return address, leading to arbitrary code execution.

The attack requires local access, meaning the attacker must be able to send MAVLink messages to the PX4 system. This could be achieved through a compromised ground control station, a malicious payload delivered via USB, or other local attack vectors.

Vulnerable vs. Patched Code

The vulnerable code in src/modules/mavlink/mavlink_log_handler.cpp likely uses unsafe functions like strcpy, sprintf, or memcpy without proper bounds checking. The patch (commit 338595edd1d235efd885fd5e9f45e7f9dcf4013d) introduces size checks and uses safer alternatives.

Vulnerable Code (Conceptual):

void MavlinkLogHandler::state_listing(char *buffer, size_t size) {
    // No size check
    strcpy(buffer, some_input);
}

Patched Code (Conceptual):

void MavlinkLogHandler::state_listing(char *buffer, size_t size) {
    // Size check added
    if (strlen(some_input) < size) {
        strcpy(buffer, some_input);
    } else {
        // Handle error
    }
}

Exploitation & Lab Setup

Red Team

Prerequisites:

Local access to the PX4 system (e.g., via USB, serial, or network if MAVLink is exposed).
Ability to send MAVLink messages.

Exploitation Steps:

Identify the target PX4 system and establish a MAVLink connection.
Craft a MAVLink message that triggers the vulnerable function with a payload that overflows the stack buffer.
The payload should include shellcode to execute arbitrary commands (e.g., reverse shell, data exfiltration).
Send the crafted message to the target.

Example Payload (Conceptual):

import pymavlink
from pymavlink import mavutil

# Connect to the PX4 system
master = mavutil.mavlink_connection('udp:127.0.0.1:14550')

# Craft a malicious MAVLink message
# This is a simplified example; actual exploitation requires precise buffer overflow
payload = b'A' * 256 + b'\x90' * 16 + shellcode
master.mav.send(payload)

Blue Team

Detection:

Monitor for unusual MAVLink messages, especially those with excessively long fields.
Use network intrusion detection systems (NIDS) to inspect MAVLink traffic for anomalies.
Implement host-based intrusion detection (HIDS) to monitor for stack-based buffer overflow attempts.

Mitigation:

Apply the patch immediately.
Restrict local access to the PX4 system.
Use network segmentation to limit MAVLink traffic to trusted sources.
Enable stack canaries and ASLR if not already enabled.

Indicators of Compromise (IOCs)

Network: Unusually long MAVLink messages targeting log handler functions.
Host: Unexpected crashes or restarts of the PX4 process.
Memory: Stack corruption detected by security tools.
Logs: Entries indicating buffer overflow attempts in system logs.

Detection Engineering

YARA Rule

rule CVE_2025_15150_StackOverflow {
    meta:
        description = "Detects stack-based buffer overflow in PX4 MAVLink log handler"
        author = "Valters IT"
        date = "2025-01-01"
        reference = "CVE-2025-15150"
    strings:
        $s1 = "MavlinkLogHandler::state_listing" ascii wide
        $s2 = "MavlinkLogHandler::log_entry_from_id" ascii wide
        $s3 = "mavlink_log_handler.cpp" ascii wide
    condition:
        any of ($s*) and filesize < 10MB
}

Sigma Rule

title: CVE-2025-15150 - PX4 MAVLink Log Handler Buffer Overflow
id: 12345678-1234-1234-1234-123456789012
status: experimental
description: Detects attempts to exploit stack-based buffer overflow in PX4 MAVLink log handler
author: Valters IT
date: 2025-01-01
references:
    - https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15150
logsource:
    category: process_creation
    product: linux
detection:
    selection:
        Image|endswith: '/px4'
        CommandLine|contains: 'mavlink'
    condition: selection
falsepositives:
    - Legitimate MAVLink operations
level: high

Suricata Rule

alert tcp any any -> any any (msg:"CVE-2025-15150 - PX4 MAVLink Log Handler Buffer Overflow"; flow:to_server; content:"|ff|"; depth:1; content:"|01|"; within:2; content:"|00|"; distance:2; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1; within:1; content:"|00|"; distance:1