HIGHVulnerability
CVE-2026-75584
ION-DTN before 4.2.1-a.1 contains a denial of service vulnerability that allows unauthenticated remote attackers to crash the ION process by sending a BPv7 bundle with a zero-length payload. The canonicalizePayloadBlock() function in bpsec_util.c passes bundle->payload.length to zco_clone() without validating it against zero, causing a failed CHKZERO assertion that triggers sm_Abort() and terminates the process with SIGABRT before any HMAC verification occurs, requiring no valid key or credential to exploit.
Properties
- severity
- HIGH
- score
- 7.5
- cve_id
- CVE-2026-75584
- signal_observed_at
- 2026-09-18T21:50:45+00:00
- vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- published_at
- 2026-09-10T14:17:07.467
- last_modified
- 2026-09-18T18:17:13.063
Related Entities (2)
DESCRIBED_BY (1)
→[Source]NVD
HAS_WEAKNESS (1)
→[Weakness]Reachable Assertion
Explore deeper with Ninja Signal's threat intelligence graph