What is CVE-2024-54130?

CVE-2024-54130 is a vulnerability in Nasa-Jpl Ion-Dtn, classified under NULL Pointer Dereference. Published 2024-12-05.

Is CVE-2024-54130 known to be exploited?

2 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

NULL pointer dereference in Nasa-Jpl Ion-Dtn

CVE-2024-54130

The NASA’s Interplanetary Overlay Network (ION) is an implementation of Delay/Disruption Tolerant Networking (DTN). A segmentation fault occurs with ION-DTN BPv7 software version 4.1.3 when a bundle with a Destination Endpoint ID (EID) set to dtn:none is received. This causes the node to become unresponsive to incoming bundles, leading to a Denial of Service (DoS) condition. This vulnerability is fixed in 4.1.3s.

EPSS: 0.004 (34.7th percentile) — read the EPSS interpretation.

Affected products

Nasa-jpl Ion-dtn — versions < 4.1.3s

Weakness classification (CWE)

CWE-476 — NULL Pointer Dereference

Public proof-of-concept exploits

References

security-advisories@github.com (x_refsource_CONFIRM)

Frequently asked questions

What is CVE-2024-54130?: CVE-2024-54130 is a vulnerability in Nasa-Jpl Ion-Dtn, classified under NULL Pointer Dereference. Published 2024-12-05.
Is CVE-2024-54130 known to be exploited?: 2 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.