ION Vulnerability Alert: Improper Reference in Bundle Receive Can Cause System Unresponsiveness
CVE-2024-54129

Currently unrated

Key Information:

Vendor

Nasa-jpl

Status
Ion-dtn
Vendor
CVE Published:
5 December 2024

What is CVE-2024-54129?

The NASA’s Interplanetary Overlay Network (ION) is an implementation of Delay/Disruption Tolerant Networking (DTN). A vulnerability exists in the version ION-DTN BPv7 implementation version 4.1.3 when receiving a bundle with an improper reference to the imc scheme with valid Service-Specific Part (SSP) in their Previous Node Block. The vulnerability can cause ION to become unresponsive. This vulnerability is fixed in 4.1.3s.

Affected Version(s)

ION-DTN < 4.1.3s

References

https://github.com/nasa-jpl/ION-DTN/security/advisories/G...
x_refsource_CONFIRM

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2024-54129 : ION Vulnerability Alert: Improper Reference in Bundle Receive Can Cause System Unresponsiveness