ION-DTNのDGRにヒープ破壊の脆弱性、修正版あり
Summary
NASA JPLのION-DTNのDGR通信層に、ヒープを壊されてサービス停止やコード実行に至る恐れのある脆弱性が見つかりました。DGRを使う環境は修正版へ更新し、IPCや独自の通信方式で使う場合を優先して確認してください。
AI summary
Produced by SecPulse using an external AI model; it may contain mistakes. Check the original description and references below before acting on it.
NASA JPLのION-DTNのDGR通信層に、ヒープを壊されてサービス停止やコード実行に至る恐れのある脆弱性が見つかりました。DGRを使う環境は修正版へ更新し、IPCや独自の通信方式で使う場合を優先して確認してください。
Affected packages
| Package | Affected → Fixed | |
|---|---|---|
| nasa-jplION-DTN |
2.2.1b – 4.2.0→ Not listed |
Not listed |
This record does not list fixed versions. Check the article or the vendor advisory in the references for whether and where it is fixed.
Original description The description as published by the source.
NASA JPL ION-DTN 2.2.1b through 4.2.0 contains an integer overflow vulnerability in the Datagram Retransmission (DGR) convergence layer that allows attackers to corrupt heap memory by sending a maliciously crafted 64-bit svcDataLength value that wraps a 32-bit allocation size calculation. Attackers can exploit the dgr_receive API's unchecked memcpy operation using synthetic datagrams or DGR traffic over internal IPC or custom transports to trigger an out-of-bounds write, leading to denial of service or potential remote code execution.
Source: CVE.org (CVE Program・cvelistV5) NVD GitHub Advisory
References
- advisory github.com
- advisory vulncheck.com
- advisory github.com
- advisory nvd.nist.gov
- package github.com
- patch github.com