Skip to content
OpenAdvisories
Critical · 9.2 CVE-2024-54129 EUVD-2024-52304

Improper Initialization of `imc` Scheme Leading to `SIGABRT` in ION-DTN BPv7

Published Dec 5, 2024 · Updated Dec 9, 2024 · Assigned by GitHub_M

Description

The NASA’s Interplanetary Overlay Network (ION) is an implementation of Delay/Disruption Tolerant Networking (DTN). A vulnerability exists in the version ION-DTN BPv7 implementation version 4.1.3 when receiving a bundle with an improper reference to the imc scheme with valid Service-Specific Part (SSP) in their Previous Node Block. The vulnerability can cause ION to become unresponsive. This vulnerability is fixed in 4.1.3s.

Affected products

VendorProductAffectedFixed
nasa-jpl ION-DTN < 4.1.3s —

References