CyberRota Analysis
AI-GeneratedION-DTN versions prior to 4.2.1-a.1 are vulnerable to a denial of service attack, where unauthenticated remote attackers can crash the ION process by sending a BPv7 bundle with a zero-length payload. This flaw arises from the lack of validation for the payload length in the canonicalizePayloadBlock() function, leading to an assertion failure that results in process termination. Organizations using ION-DTN should prioritize patching this vulnerability to prevent potential service disruptions.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
ION-DTN before 4.2.1-a.1 contains a denial of service vulnerability that allows unauthenticated remote attackers to crash the ION process by sending a BPv7 bundle with a zero-length payload. The canonicalizePayloadBlock() function in bpsec_util.c passes bundle->payload.length to zco_clone() without validating it against zero, causing a failed CHKZERO assertion that triggers sm_Abort() and terminates the process with SIGABRT before any HMAC verification occurs, requiring no valid key or credential to exploit.