CVE-2026-75584

Name of the Vulnerable Software and Affected Versions ION-DTN versions prior to 4.2.1-a.1

Description A denial of service issue allows unauthenticated remote attackers to crash the ION process. This occurs when a BPv7 bundle with a zero-length payload is sent. Specifically, the canonicalizePayloadBlock() function in bpsec util.c passes the bundle->payload.length variable to zco clone() without validating if it is zero. This leads to a failed CHKZERO assertion, which triggers sm Abort() and terminates the process with SIGABRT. This process happens before any HMAC (Hash-based Message Authentication Code, a mechanism for verifying both the data integrity and the authenticity of a message) verification, meaning no valid keys or credentials are required for exploitation.

Recommendations Update ION-DTN to version 4.2.1-a.1 or later.