What’s Vulnerable › Vulnerabilities
CVE-2024-54129: Improper Initialization of `imc` Scheme Leading to `SIGABRT` in ION-DTN BPv7
- Severity: critical (CVSS 9.2 v4.0)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.4% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2024-12-05 · updated 2026-06-17
- Weakness: CWE-665
Description
The NASA’s Interplanetary Overlay Network (ION) is an implementation of Delay/Disruption Tolerant Networking (DTN). A vulnerability exists in the version ION-DTN BPv7 implementation version 4.1.3 when receiving a bundle with an improper reference to the imc scheme with valid Service-Specific Part (SSP) in their Previous Node Block. The vulnerability can cause ION to become unresponsive. This vulnerability is fixed in 4.1.3s.
Affected products
- nasa-jpl ION-DTN: before 4.1.3s
References
Get alerted when CVE-2024-54129 or the next vulnerability affects your stack