cve/2024/CVE-2024-54130.md
2025-09-29 16:08:36 +00:00

19 lines
978 B
Markdown
Raw Blame History

This file contains ambiguous Unicode characters

This file contains Unicode characters that might be confused with other characters. If you think that this is intentional, you can safely ignore this warning. Use the Escape button to reveal them.

### [CVE-2024-54130](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-54130)
![](https://img.shields.io/static/v1?label=Product&message=ION-DTN&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=%3D%20%3C%204.1.3s%20&color=brighgreen)
![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-476%3A%20NULL%20Pointer%20Dereference&color=brighgreen)
### Description
The NASAs Interplanetary Overlay Network (ION) is an implementation of Delay/Disruption Tolerant Networking (DTN). A segmentation fault occurs with ION-DTN BPv7 software version 4.1.3 when a bundle with a Destination Endpoint ID (EID) set to dtn:none is received. This causes the node to become unresponsive to incoming bundles, leading to a Denial of Service (DoS) condition. This vulnerability is fixed in 4.1.3s.
### POC
#### Reference
No PoCs from references.
#### Github
- https://github.com/ANG13T/aerospace-cve-list
- https://github.com/StephanHav/StephanHav