CVE-2024-54130CWE-476

Segmentation Fault in `forwardBundle` Function of ION-DTN BPv7 When Destination EID is `dtn:none` (public)

Critical · published December 5, 2024

CVSS v4.0
9.2
EPSS
0%
Percentile
37.2
In the wild
Unconfirmed
What it is

The NASA’s Interplanetary Overlay Network (ION) is an implementation of Delay/Disruption Tolerant Networking (DTN). A segmentation fault occurs with ION-DTN BPv7 software version 4.1.3 when a bundle with a Destination Endpoint ID (EID) set to dtn:none is received. This causes the node to become unresponsive to incoming bundles, leading to a Denial of Service (DoS) condition. This vulnerability is fixed in 4.1.3s.

The record
Technical detail
CVSS v4.0
9.2 · CRITICAL
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H
EPSS
0.00440 · 37.2th percentile
Weakness
CWE-476 · NULL Pointer Dereference
Published
2024-12-05T15:10Z
EPSS history
Timeline
  • 05 DEC 15:10Z
    Segmentation Fault in `forwardBundle` Function of ION-DTN BPv7 When Destination EID is `dtn:none` (public)
    cvelistv5