Skip to content
CVE PROGRAM SOURCE RECORD9.2 Critical

CVE-2024-54129

Improper Initialization of `imc` Scheme Leading to `SIGABRT` in ION-DTN BPv7

Description

The NASA’s Interplanetary Overlay Network (ION) is an implementation of Delay/Disruption Tolerant Networking (DTN). A vulnerability exists in the version ION-DTN BPv7 implementation version 4.1.3 when receiving a bundle with an improper reference to the imc scheme with valid Service-Specific Part (SSP) in their Previous Node Block. The vulnerability can cause ION to become unresponsive. This vulnerability is fixed in 4.1.3s.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

nasa-jpl ION-DTN

  • < 4.1.3saffected

References