PT-2025-41176 · Nasa · Ion-Dtn+1

Stephanhav · Published 2025-10-07 · Updated 2025-10-07 · CVE-2025-61910

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions NASA’s Interplanetary Overlay Network (ION) version 4.1.3

Description A specially crafted BPv7 bundle with a malformed extension block can lead to a Denial-of-Service (DoS) condition in ION-DTN. The issue stems from uncontrolled memory allocation triggered by processing a byte string within an extension block. Specifically, the vulnerability occurs when parsing the fifth element of a CBOR array within the extension block. The code in bei.c:764 converts an unsigned integer blockLength to a signed integer blkSize, resulting in a negative value that, when converted to a 64-bit unsigned value, causes an attempt to allocate an unrealistic amount of memory. The triggering bundle contains an extension block starting at 0x85070201005bbb0e20b4ea001a000927c0....

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

DoS

Weakness Enumeration

CWE-789

Related Identifiers

CVE-2025-61910

GHSA-XM96-38VJ-H28H

Affected Products

Ion-Dtn

Interplanetary Overlay Network

References · 7

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/61xxx/CVE-2025-61910.json · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-61910 · Security Note
• https://osv.dev/vulnerability/CVE-2025-61910 · Vendor Advisory
• https://github.com/nasa-jpl/ION-DTN/security/advisories/GHSA-xm96-38vj-h28h · Note
• https://github.com/nasa-jpl/ION-DTN/blob/ion-open-source-4.1.3s/bpv7/library/bei.c#L758-L769 · Note
• https://t.me/CVEtracker/34369 · Telegram Post
• https://twitter.com/CVEnew/status/1975656494071705979 · Twitter Post