CVE-2024-54129CWE-665

Improper Initialization of `imc` Scheme Leading to `SIGABRT` in ION-DTN BPv7

Critical · published December 5, 2024

CVSS v4.0
9.2
EPSS
0%
Percentile
37.2
In the wild
Unconfirmed
What it is

The NASA’s Interplanetary Overlay Network (ION) is an implementation of Delay/Disruption Tolerant Networking (DTN). A vulnerability exists in the version ION-DTN BPv7 implementation version 4.1.3 when receiving a bundle with an improper reference to the imc scheme with valid Service-Specific Part (SSP) in their Previous Node Block. The vulnerability can cause ION to become unresponsive. This vulnerability is fixed in 4.1.3s.

The record
Technical detail
CVSS v4.0
9.2 · CRITICAL
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H
EPSS
0.00440 · 37.2th percentile
Weakness
CWE-665 · Improper Initialization
Published
2024-12-05T15:13Z
EPSS history
Timeline
  • 05 DEC 15:13Z
    Improper Initialization of `imc` Scheme Leading to `SIGABRT` in ION-DTN BPv7
    cvelistv5