| Package | Affected versions | Patched versions |
|---|---|---|
| cryptolib | < 1.4.3 | 1.4.3 |
CryptoLib provides a software-only solution using the CCSDS Space Data Link Security Protocol - Extended Procedures (SDLS-EP) to secure communications between a spacecraft running the core Flight System (cFS) and a ground station. Prior to version 1.4.3, the Crypto_AOS_ProcessSecurity function reads memory without valid bounds checking when parsing AOS frame hashes. This issue has been patched in version 1.4.3.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free