CVE-2025-46673

NASA CryptoLib before 1.3.2 does not check whether the SA is in an operational state before use, possibly leading to a bypass of the Space Data Link Security protocol SDLS...

CVE-2025-46672

Summary : CVE-2025-46672 affects NASA CryptoLib up to v1.3.1 (before 1.3.2). The root cause is that the OTAR crypto function return status is not checked, which could allow incorrect handling of OTAR results and potentially enable spacecraft hijacking. Impact : the issue is described as a securit...

CVE-2025-46675

CVE-2025-46675 affects NASA CryptoLib prior to 1.3.2. The root cause is that the key state is not checked before use, which could enable spacecraft hijacking. Public sources across multiple advisories note the affected versions are before 1.3.2, with remediation to upgrade to 1.3.2 or later; PT S...

CVE-2025-46675

In NASA CryptoLib before 1.3.2, the key state is not checked before use, potentially leading to spacecraft hijacking...

PT-2025-17972 · Nasa · Nasa Cryptolib

Name of the Vulnerable Software and Affected Versions: NASA CryptoLib versions prior to 1.3.2 Description: The issue is related to the key state not being checked before use in NASA CryptoLib, potentially leading to spacecraft hijacking. Recommendations: For NASA CryptoLib versions prior to 1.3.2...

CVE-2025-46674

NASA CryptoLib before 1.3.2 uses Extended Procedures that are a Work in Progress not intended for use during flight, potentially leading to a keystream oracle...

CVE-2025-46672

NASA CryptoLib before 1.3.2 does not check the OTAR crypto function returned status, potentially leading to spacecraft hijacking...

CVE-2025-46675

In NASA CryptoLib before 1.3.2, the key state is not checked before use, potentially leading to spacecraft hijacking...

CVE-2025-46673

Summary: CVE-2025-46673 affects NASA CryptoLib prior to 1.3.2. The library does not check whether the SA is in an operational state before use, which could allow bypassing the Space Data Link Security (SDLS) protocol. Affected software: NASA CryptoLib up to version 1.3.1 (pre-1.3.2). Impact (per ...

CVE-2025-46672

NASA CryptoLib before 1.3.2 does not check the OTAR crypto function returned status, potentially leading to spacecraft hijacking...

CVE-2025-46675

In NASA CryptoLib before 1.3.2, the key state is not checked before use, potentially leading to spacecraft hijacking...

CVE-2025-46673

NASA CryptoLib before 1.3.2 does not check whether the SA is in an operational state before use, possibly leading to a bypass of the Space Data Link Security protocol SDLS...

CVE-2025-46672

NASA CryptoLib before 1.3.2 does not check the OTAR crypto function returned status, potentially leading to spacecraft hijacking...

PT-2025-17970

Name of the Vulnerable Software and Affected Versions NASA CryptoLib versions prior to 1.3.2 Description The issue is related to NASA CryptoLib not checking whether the SA is in an operational state before use. This could possibly lead to a bypass of the Space Data Link Security protocol SDLS...

CVE-2025-46673

NASA CryptoLib before 1.3.2 does not check whether the SA is in an operational state before use, possibly leading to a bypass of the Space Data Link Security protocol SDLS...

Malicious code in code-nasa-gov (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-3385 Malicious code in code-nasa-gov (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in nasa-oss (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a3a9d37ef677c53402e3bce88d26fce433b1d75ac2dceb101ee7a5dd9f47ad50 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3108 Malicious code in nasa-oss (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a3a9d37ef677c53402e3bce88d26fce433b1d75ac2dceb101ee7a5dd9f47ad50 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CryptoLib 数字错误漏洞

CryptoLib is a NASA open source application. It is used to provide a software-only solution using the CCSDS space data link security protocol. A numeric error vulnerability exists in CryptoLib 1.3.3 and prior versions that stems from incomplete validation of the fl field in the...