763 matches found
CVE-2025-46674
NASA CryptoLib before 1.3.2 uses Extended Procedures that are a Work in Progress not intended for use during flight, potentially leading to a keystream oracle...
CVE-2025-46672
NASA CryptoLib before 1.3.2 does not check the OTAR crypto function returned status, potentially leading to spacecraft hijacking...
CVE-2025-46675: Improper Control of Dynamically-Managed Code Resources
In NASA CryptoLib before 1.3.2, the key state is not checked before use, potentially leading to spacecraft hijacking...
CVE-2025-46674: Active Debug Code
NASA CryptoLib before 1.3.2 uses Extended Procedures that are a Work in Progress not intended for use during flight, potentially leading to a keystream oracle...
CVE-2025-46673: Improper Control of Dynamically-Managed Code Resources
NASA CryptoLib before 1.3.2 does not check whether the SA is in an operational state before use, possibly leading to a bypass of the Space Data Link Security protocol SDLS...
CVE-2025-46672: Unchecked Return Value
NASA CryptoLib before 1.3.2 does not check the OTAR crypto function returned status, potentially leading to spacecraft hijacking...
CVE-2025-46674
NASA CryptoLib before 1.3.2 uses Extended Procedures that are a Work in Progress not intended for use during flight, potentially leading to a keystream oracle...
CVE-2025-46675
In NASA CryptoLib before 1.3.2, the key state is not checked before use, potentially leading to spacecraft hijacking...
CVE-2025-46675
In NASA CryptoLib before 1.3.2, the key state is not checked before use, potentially leading to spacecraft hijacking...
CVE-2025-46672
NASA CryptoLib before 1.3.2 does not check the OTAR crypto function returned status, potentially leading to spacecraft hijacking...
PT-2025-17972 · Nasa · Nasa Cryptolib
Name of the Vulnerable Software and Affected Versions: NASA CryptoLib versions prior to 1.3.2 Description: The issue is related to the key state not being checked before use in NASA CryptoLib, potentially leading to spacecraft hijacking. Recommendations: For NASA CryptoLib versions prior to 1.3.2...
Malicious code in code-nasa-gov (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-3385 Malicious code in code-nasa-gov (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in nasa-oss (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a3a9d37ef677c53402e3bce88d26fce433b1d75ac2dceb101ee7a5dd9f47ad50 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-3108 Malicious code in nasa-oss (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a3a9d37ef677c53402e3bce88d26fce433b1d75ac2dceb101ee7a5dd9f47ad50 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CryptoLib 数字错误漏洞
CryptoLib is a NASA open source application. It is used to provide a software-only solution using the CCSDS space data link security protocol. A numeric error vulnerability exists in CryptoLib 1.3.3 and prior versions that stems from incomplete validation of the fl field in the...
CVE-2025-25371
NASA cFS Core Flight System Aquila is vulnerable to path traversal in the OSAL module, allowing the override of any arbitrary file on the system...
CVE-2025-25373
The Memory Management Module of NASA cFS Core Flight System Aquila has insecure permissions, which can be exploited to gain an RCE on the platform...
CVE-2025-25374
In NASA cFS Core Flight System Aquila, it is possible to put the onboard software in a state that will prevent the launch of any external application, causing a platform denial of service...