ION-DTN 2.1.0-4.2.0 Heap Buffer Under-allocation DoS in amsd
Affected packages
| Package | Affected → Fixed | |
|---|---|---|
| nasa-jplION-DTN |
2.1.0 – 4.2.0→ Not listed |
Not listed |
This record does not list fixed versions. Check the article or the vendor advisory in the references for whether and where it is fixed.
Original description The description as published by the source.
NASA JPL ION-DTN 2.1.0 through 4.2.0 contains a heap buffer under-allocation vulnerability in the Asynchronous Message Service daemon (amsd) that allows a rogue or misconfigured peer to trigger an out-of-bounds write by sending crafted Meta-AMS (MAMS) configuration management messages that are processed without cryptographic authentication. Attackers can exploit the insufficient buffer size calculation for the internal state-event object to crash the active Configuration Server thread, causing a denial of service and potentially destabilizing subsequent shared-memory allocations in amsd.
Source: CVE.org (CVE Program・cvelistV5) NVD GitHub Advisory
References
- advisory GitHub Security Advisory (GHSA-gmhw-vmwr-wrxh)
- advisory vulncheck.com
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- package github.com
- patch github.com