CVE-2024-54130: falha crítica em nasa-jpl ION-DTN
Segmentation Fault in `forwardBundle` Function of ION-DTN BPv7 When Destination EID is `dtn:none` (public)
Publicada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
28Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 9.2epss 0.4%
The NASA’s Interplanetary Overlay Network (ION) is an implementation of Delay/Disruption Tolerant Networking (DTN). A segmentation fault occurs with ION-DTN BPv7 software version 4.1.3 when a bundle with a Destination Endpoint ID (EID) set to dtn:none is received. This causes the node to become unresponsive to incoming bundles, leading to a Denial of Service (DoS) condition. This vulnerability is fixed in 4.1.3s.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H
Produtos afetados
nasa-jpl · ION-DTNCVEs relacionadas — nasa-jpl ION-DTN
No mesmo produto, das mais perigosas para as menos.
CVE-2026-84484HIGHION-DTN before 4.2.0 Out-of-Bounds Read via decodeSdnvEPSS 0.9%CVE-2026-75584HIGHION-DTN < 4.2.1-a.1 Denial of Service via canonicalizePayloadBlock() AssertionEPSS 0.6%CVE-2024-54129CRITICALImproper Initialization of `imc` Scheme Leading to `SIGABRT` in ION-DTN BPv7EPSS 0.4%CVE-2025-61910HIGHNASA ION-DTN BPv7 4.1.3s Uncontrolled Memory Allocation that leads to Denial-of-ServiceEPSS 0.4%