Skip to content
CVE PROGRAM SOURCE RECORD8.7 High

CVE-2026-75584

ION-DTN < 4.2.1-a.1 Denial of Service via canonicalizePayloadBlock() Assertion

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
VulnCheck

Description

ION-DTN before 4.2.1-a.1 contains a denial of service vulnerability that allows unauthenticated remote attackers to crash the ION process by sending a BPv7 bundle with a zero-length payload. The canonicalizePayloadBlock() function in bpsec_util.c passes bundle->payload.length to zco_clone() without validating it against zero, causing a failed CHKZERO assertion that triggers sm_Abort() and terminates the process with SIGABRT before any HMAC verification occurs, requiring no valid key or credential to exploit.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

nasa-jpl ION-DTN

Default version status: unaffected

  • 0 to ≤ 4.2.0affected
  • 4.2.1-a.1unaffected
pkg:github/nasa-jpl/ION-DTN

References