Analysis
Analysis and contextual insights are available on OpenCVE Cloud.
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | |||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| nasa-jpl | ION-DTN | unaffected |
|
No data.
No data.
No data available yet.
No solution or workaround provided in the CVE record.
Additional remediation guidance may be available on OpenCVE Cloud.
Tracking
Sign in to view the affected projects.
No advisories yet.
Mon, 09 Nov 2026 19:00:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| References |
Mon, 09 Nov 2026 18:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | NASA JPL ION-DTN 2.1.0 through 4.2.0 contains a heap buffer under-allocation vulnerability in the Asynchronous Message Service daemon (amsd) that allows a rogue or misconfigured peer to trigger an out-of-bounds write by sending crafted Meta-AMS (MAMS) configuration management messages that are processed without cryptographic authentication. Attackers can exploit the insufficient buffer size calculation for the internal state-event object to crash the active Configuration Server thread, causing a denial of service and potentially destabilizing subsequent shared-memory allocations in amsd. | |
| Title | ION-DTN 2.1.0-4.2.0 Heap Buffer Under-allocation DoS in amsd | |
| Weaknesses | CWE-122 | |
| References |
| |
| Metrics |
cvssV3_1
|
Subscriptions
No data.
MITRE
Status: PUBLISHED
Assigner: VulnCheck
Published:
Updated: 2026-11-09T18:45:46.277Z
Reserved: 2026-11-06T18:38:38.543Z
Link: CVE-2026-124000
Vulnrichment
No data.
NVD
Status : Deferred
Published: 2026-11-09T19:16:47.843
Modified: 2026-11-09T19:16:47.963
Link: CVE-2026-124000
Redhat
No data.
OpenCVE Enrichment
Updated: 2026-11-09T19:30:15Z