HIGHVulnerability

CVE-2026-75584

ION-DTN before 4.2.1-a.1 contains a denial of service vulnerability that allows unauthenticated remote attackers to crash the ION process by sending a BPv7 bundle with a zero-length payload. The canonicalizePayloadBlock() function in bpsec_util.c passes bundle->payload.length to zco_clone() without validating it against zero, causing a failed CHKZERO assertion that triggers sm_Abort() and terminates the process with SIGABRT before any HMAC verification occurs, requiring no valid key or credential to exploit.

Properties

severity
HIGH
score
7.5
cve_id
CVE-2026-75584
signal_observed_at
2026-09-18T21:50:45+00:00
vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
published_at
2026-09-10T14:17:07.467
last_modified
2026-09-18T18:17:13.063

Related Entities (2)

DESCRIBED_BY (1)

[Source]NVD

HAS_WEAKNESS (1)

[Weakness]Reachable Assertion

Explore deeper with Ninja Signal's threat intelligence graph

CVE-2026-75584 — Ninja Signal Threat Intelligence | Ninja Signal