What is CVE-2024-54129?

CVE-2024-54129 is a vulnerability in Nasa-Jpl Ion-Dtn, classified under Improper Initialization. Published 2024-12-05.

Is CVE-2024-54129 known to be exploited?

2 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Vulnerability in Nasa-Jpl Ion-Dtn

CVE-2024-54129

The NASA’s Interplanetary Overlay Network (ION) is an implementation of Delay/Disruption Tolerant Networking (DTN). A vulnerability exists in the version ION-DTN BPv7 implementation version 4.1.3 when receiving a bundle with an improper reference to the imc scheme with valid Service-Specific Part (SSP) in their Previous Node Block. The vulnerability can cause ION to become unresponsive. This vulnerability is fixed in 4.1.3s.

Vulnerability class: Dirty Pipe (CVE-2022-0847)

EPSS: 0.004 (34.7th percentile) — read the EPSS interpretation.

Affected products

Nasa-jpl Ion-dtn — versions < 4.1.3s

Weakness classification (CWE)

CWE-665 — Improper Initialization

Public proof-of-concept exploits

References

security-advisories@github.com (x_refsource_CONFIRM)

Frequently asked questions

What is CVE-2024-54129?: CVE-2024-54129 is a vulnerability in Nasa-Jpl Ion-Dtn, classified under Improper Initialization. Published 2024-12-05.
Is CVE-2024-54129 known to be exploited?: 2 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.