CVE-2024-54129: Improper Initialization of `imc` Scheme Leading to `SIGABRT` in ION-DTN BPv7
The NASA’s Interplanetary Overlay Network (ION) is an implementation of Delay/Disruption Tolerant Networking (DTN). A vulnerability exists in the version ION-DTN BPv7 implementation version 4.1.3 when receiving a bundle with an improper reference to the imc scheme with valid Service-Specific Part (SSP) in their Previous Node Block. The vulnerability can cause ION to become unresponsive. This vulnerability is fixed in 4.1.3s.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-54129?
CVE-2024-54129 is classified as a moderate severity vulnerability impacting the NASA ION-DTN BPv7 implementation.
How do I fix CVE-2024-54129?
To fix CVE-2024-54129, upgrade the NASA ION-DTN BPv7 implementation to version 4.1.4 or later.
What systems are affected by CVE-2024-54129?
CVE-2024-54129 affects the NASA ION-DTN BPv7 implementation up to version 4.1.3.
What type of vulnerability is CVE-2024-54129?
CVE-2024-54129 is related to improper reference handling in the imc scheme within the NASA ION-DTN system.
Can CVE-2024-54129 lead to data exposure?
Yes, CVE-2024-54129 may potentially lead to data exposure due to improper processing of bundles.