CVE-2026-124000: falha de média gravidade em nasa-jpl ION-DTN
ION-DTN 2.1.0-4.2.0 Heap Buffer Under-allocation DoS in amsd
Publicada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 6.9epss 0.5%
NASA JPL ION-DTN 2.1.0 through 4.2.0 contains a heap buffer under-allocation vulnerability in the Asynchronous Message Service daemon (amsd) that allows a rogue or misconfigured peer to trigger an out-of-bounds write by sending crafted Meta-AMS (MAMS) configuration management messages that are processed without cryptographic authentication. Attackers can exploit the insufficient buffer size calculation for the internal state-event object to crash the active Configuration Server thread, causing a denial of service and potentially destabilizing subsequent shared-memory allocations in amsd.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N
Produtos afetados
nasa-jpl · ION-DTNCVEs relacionadas — nasa-jpl ION-DTN
No mesmo produto, das mais perigosas para as menos.
CVE-2026-84484HIGHION-DTN before 4.2.0 Out-of-Bounds Read via decodeSdnvEPSS 0.9%CVE-2026-75584HIGHION-DTN < 4.2.1-a.1 Denial of Service via canonicalizePayloadBlock() AssertionEPSS 0.6%CVE-2026-124001CRITICALION-DTN 2.2.1b-4.2.0 Integer Overflow Heap Corruption via DGREPSS 0.5%CVE-2026-123999HIGHION-DTN 3.6.2-4.2.0 Heap Buffer Overflow via nm_mgr AMP RenderingEPSS 0.5%CVE-2024-54129CRITICALImproper Initialization of `imc` Scheme Leading to `SIGABRT` in ION-DTN BPv7EPSS 0.4%CVE-2024-54130CRITICALSegmentation Fault in `forwardBundle` Function of ION-DTN BPv7 When Destination EID is `dtn:none` (public)EPSS 0.4%