CVE-2024-54129 CRITICAL

CVE-2024-54129: Improper Initialization of `imc` Scheme Leading to `SIGABRT` in ION-DTN BPv7

Vendor Nasa-Jpl
Product ION-DTN
Weakness CWE-665
Published December 5, 2024
Last update December 9, 2024
View on NVD All CVEs

CVSS base score

9.2/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction None
Confidentiality —
Integrity —

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H

What the vulnerability does

01Description

The NASA’s Interplanetary Overlay Network (ION) is an implementation of Delay/Disruption Tolerant Networking (DTN). A vulnerability exists in the version ION-DTN BPv7 implementation version 4.1.3 when receiving a bundle with an improper reference to the imc scheme with valid Service-Specific Part (SSP) in their Previous Node Block. The vulnerability can cause ION to become unresponsive. This vulnerability is fixed in 4.1.3s.

Key dates

02Disclosure timeline

December 5, 2024 CVE published
December 9, 2024 Record updated