CVSS: 9.2EPSS: 0%CPEs: 1EXPL: 0CVE-2024-54129 – Improper Initialization of `imc` Scheme Leading to `SIGABRT` in ION-DTN BPv7
https://notcve.org/view.php?id=CVE-2024-54129
The NASA’s Interplanetary Overlay Network (ION) is an implementation of Delay/Disruption Tolerant Networking (DTN). A vulnerability exists in the version ION-DTN BPv7 implementation version 4.1.3 when receiving a bundle with an improper reference to the imc scheme with valid Service-Specific Part (SSP) in their Previous Node Block. The vulnerability can cause ION to become unresponsive. This vulnerability is fixed in 4.1.3s. • https://github.com/nasa-jpl/ION-DTN/security/advisories/GHSA-393w-w6jh-pq3j • CWE-665: Improper Initialization •
CVSS: 9.2EPSS: 0%CPEs: 1EXPL: 0CVE-2024-54130 – Segmentation Fault in `forwardBundle` Function of ION-DTN BPv7 When Destination EID is `dtn:none` (public)
https://notcve.org/view.php?id=CVE-2024-54130
The NASA’s Interplanetary Overlay Network (ION) is an implementation of Delay/Disruption Tolerant Networking (DTN). A segmentation fault occurs with ION-DTN BPv7 software version 4.1.3 when a bundle with a Destination Endpoint ID (EID) set to dtn:none is received. This causes the node to become unresponsive to incoming bundles, leading to a Denial of Service (DoS) condition. This vulnerability is fixed in 4.1.3s. • https://github.com/nasa-jpl/ION-DTN/security/advisories/GHSA-7pj7-hfwv-q3v6 • CWE-476: NULL Pointer Dereference •