Skip to content
Threat Feed
Subscribe

CPE

Cpe:2.3:a:nasa:ion-Dtn:*:*:*:*:*:*:*:*

2 briefs RSS
low advisory

Denial of Service in ION-DTN via Zero-Length Payload

ION-DTN versions prior to 4.2.1-a.1 are vulnerable to a remote denial-of-service attack, allowing unauthenticated attackers to terminate the process by sending a malformed BPv7 bundle.

ION-DTN denial-of-service vulnerability
1t 1c
low advisory

Out-of-Bounds Read in ION-DTN decodeSdnv Function

ION-DTN versions prior to 4.2.0 contain an out-of-bounds read vulnerability in the decodeSdnv function, allowing unauthenticated remote attackers to trigger unauthorized memory access via truncated SDNV values.

ION-DTN
2t 1c