606 matches found
Linux Distros Unpatched Vulnerability : CVE-2018-3846
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the ffgphd and ffgtkn functions in NASA CFITSIO 3.42, specially crafted images parsed via the library can cause a stack-based buffer overflow overwriting...
Linux Distros Unpatched Vulnerability : CVE-2018-3849
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the ffghtb function in NASA CFITSIO 3.42, specially crafted images parsed via the library can cause a stack-based buffer overflow overwriting arbitrary data...
Holiverse Makes NASA’s Latest Achievements Accessible to Everyone
People around the world learned about the latest advancements in the American space industry! This was made possible…...
CVE-2024-54130
The NASA’s Interplanetary Overlay Network ION is an implementation of Delay/Disruption Tolerant Networking DTN. A segmentation fault occurs with ION-DTN BPv7 software version 4.1.3 when a bundle with a Destination Endpoint ID EID set to dtn:none is received. This causes the node to become...
CVE-2024-54129
The NASA’s Interplanetary Overlay Network ION is an implementation of Delay/Disruption Tolerant Networking DTN. A vulnerability exists in the version ION-DTN BPv7 implementation version 4.1.3 when receiving a bundle with an improper reference to the imc scheme with valid Service-Specific Part SSP...
CVE-2024-54129 Improper Initialization of `imc` Scheme Leading to `SIGABRT` in ION-DTN BPv7
The NASA’s Interplanetary Overlay Network ION is an implementation of Delay/Disruption Tolerant Networking DTN. A vulnerability exists in the version ION-DTN BPv7 implementation version 4.1.3 when receiving a bundle with an improper reference to the imc scheme with valid Service-Specific Part SSP...
CVE-2024-54129
The CVE-2024-54129 entry concerns NASA’s Interplanetary Overlay Network (ION) - DTN BPv7, version 4.1.3. The flaw occurs when receiving a bundle with an improper reference to the imc scheme that contains a valid Service-Specific Part (SSP) in the Previous Node Block, which can cause ION to become...
CVE-2024-54130
CVE-2024-54130 affects NASA’s ION-DTN BPv7 (BPv7) where receiving a bundle with Destination EID dtn:none on version 4.1.3 triggers a segmentation fault, causing the node to become unresponsive to incoming bundles and resulting in a Denial of Service (DoS). The issue is documented as fixed in vers...
CVE-2024-54130 Segmentation Fault in `forwardBundle` Function of ION-DTN BPv7 When Destination EID is `dtn:none` (public)
The NASA’s Interplanetary Overlay Network ION is an implementation of Delay/Disruption Tolerant Networking DTN. A segmentation fault occurs with ION-DTN BPv7 software version 4.1.3 when a bundle with a Destination Endpoint ID EID set to dtn:none is received. This causes the node to become...
CVE-2024-44912
NASA CryptoLib v1.3.0 was discovered to contain an Out-of-Bounds read via the TM subsystem cryptotm.c...
CVE-2024-44910
NASA CryptoLib v1.3.0 was discovered to contain an Out-of-Bounds read via the AOS subsystem cryptoaos.c...
CVE-2024-44911
NASA CryptoLib v1.3.0 was discovered to contain an Out-of-Bounds read via the TC subsystem cryptotc.c...
CVE-2024-44910
NASA CryptoLib v1.3.0 contains an Out-of-Bounds read in the AOS subsystem (crypto_aos.c). The vulnerability is described across multiple feeds, with CVSSv3.1 metrics indicating Network attack vector, low attack complexity, no privileges required, and a HIGH impact on availability. No specific rem...
CVE-2024-44910
NASA CryptoLib v1.3.0 was discovered to contain an Out-of-Bounds read via the AOS subsystem cryptoaos.c...
CVE-2024-44911
NASA CryptoLib v1.3.0 was discovered to contain an Out-of-Bounds read via the TC subsystem cryptotc.c...
CVE-2024-44912
NASA CryptoLib v1.3.0 was discovered to contain an Out-of-Bounds read via the TM subsystem cryptotm.c...
CVE-2024-44911
NASA CryptoLib v1.3.0 is affected by an Out‑of‑Bounds read in the TC subsystem (crypto_tc.c). The CVSS data shows NETWORK attack vector, LOW complexity, NONE prerequisites, with no user interaction, and a HIGH availability impact (I and A are notable; C and I are None, C=A). No exploitation detai...
CVE-2024-44912
NASA CryptoLib v1.3.0 was discovered to contain an Out-of-Bounds read via the TM subsystem cryptotm.c...