目標達成 すべての支援者に感謝 — 100%達成しました！

目標: 1000 CNY · 調達済み: 1000 CNY

100.0%
コーヒーを一杯おごる

NASA 厂商漏洞列表 / CVE 中文分析 34

NASA 厂商相关 34 条 CVE 漏洞，含 AI 中文分析、POC、CVSS 评分与受影响产品。

NASA（美国国家航空航天局）主导航天探索与科学研究，其开源软件广泛用于太空任务数据处理。截至最新统计已收录 34 条 CVE，历史漏洞多集中于输入验证不足导致的远程代码执行及跨站脚本攻击，部分涉及权限绕过。值得关注的是其关键基础设施组件常面临供应链风险，且因涉及国家安全，漏洞披露流程严格，近期修复重点在于强化加密通信与访问控制机制，以应对日益复杂的网络威胁环境。

件 24 件の結果 / 34フィルターをクリア
上位製品 NASA: CryptoLib cFS openmct CFITSIO fprime
CVE IDタイトルCVSS深刻度公開日
CVE-2026-22697 CryptoLib Has Heap Buffer Overflow Vulnerability in KMC Base64 Decode Handling (KMC JSON base64ciphertext/base64cleartext) — CryptoLibCWE-122 7.5 High2026-01-10
CVE-2026-22027 CryptoLib Vulnerable to Heap Buffer Overflow in MariaDB SA Hexstring Conversion — CryptoLibCWE-122 9.8 -2026-01-10
CVE-2026-22026 CryptoLib Unbounded Memory Allocation in KMC HTTP Response Handler Allows Resource Exhaustion — CryptoLibCWE-789 7.5 -2026-01-10
CVE-2026-22025 CryptoLib Memory Leak on HTTP Error Response in KMC Client — CryptoLibCWE-401--2026-01-10
CVE-2026-22024 CryptoLib Memory Leak in KMC Encrypt Function Leads to Resource Exhaustion — CryptoLibCWE-401 7.5 -2026-01-10
CVE-2026-22023 CryptoLib Has Out-of-Bounds Read in KMC AEAD Encrypt Metadata Parsing via Flawed strtok Pattern — CryptoLibCWE-125 9.1 -2026-01-10
CVE-2026-21900 CryptoLib Has Out-of-Bounds Read in KMC Encrypt Metadata Parsing via Flawed strtok Pattern — CryptoLibCWE-125 9.1 -2026-01-10
CVE-2026-21899 CryptoLib has an out-of-bounds read and crash vulnerability when decoding an empty Base64url string — CryptoLibCWE-125 4.7 Medium2026-01-10
CVE-2026-21898 CryptoLib Has Out-of-bounds Read in Crypto_AOS_ProcessSecurity — CryptoLibCWE-125 8.2 High2026-01-10
CVE-2026-21897 CryptoLib Has Out-of-Bounds Write in Crypto_Config_Add_Gvcid_Managed_Parameters — CryptoLibCWE-787 7.3 High2026-01-10
CVE-2025-64096 CryptoLib vulnerable to Stack Buffer Overflow in Crypto_Key_Update due to missing TLV length check — CryptoLibCWE-121 9.8AICriticalAI2025-10-30
CVE-2025-59534 CryptoLib command Injection vulnerability in initialize_kerberos_keytab_file_login() — CryptoLibCWE-78 7.3 High2025-09-23
CVE-2025-54878 Heap Buffer Overflow in NASA CryptoLib 1.4.0 `Crypto_TC_Check_IV_Setup` — CryptoLibCWE-122 8.6 High2025-08-11
CVE-2025-46675 CryptoLib 安全漏洞 — CryptoLibCWE-913 3.5 Low2025-04-27
CVE-2025-46674 CryptoLib 安全漏洞 — CryptoLibCWE-489 3.5 Low2025-04-27
CVE-2025-46672 CryptoLib 安全漏洞 — CryptoLibCWE-252 3.5 Low2025-04-27
CVE-2025-46673 CryptoLib 安全漏洞 — CryptoLibCWE-913 4.9 Medium2025-04-27
CVE-2025-30356 Heap Buffer Overflow via Incomplete Length Check in `Crypto_TC_ApplySecurity` — CryptoLibCWE-191 9.8AICriticalAI2025-04-01
CVE-2025-30216 CryptoLib Has Heap Overflow in Crypto_TM_ProcessSecurity due to Unchecked Secondary Header Length — CryptoLibCWE-122 9.4 Critical2025-03-25
CVE-2025-29913 CryptoLib's Crypto_TC_Prep_AAD Has Buffer Overflow Due to Integer Underflow — CryptoLibCWE-125 9.8 -2025-03-17
CVE-2025-29912 CryptoLib Has Heap Buffer Overflow Due to Unsigned Integer Underflow in Crypto_TC_ProcessSecurity — CryptoLibCWE-122 9.8 -2025-03-17
CVE-2025-29911 CryptoLib Has Heap Buffer Overflow in Crypto_AOS_ProcessSecurity Function — CryptoLibCWE-122 9.8 -2025-03-17
CVE-2025-29910 CryptoLib's crypto_handle_incrementing_nontransmitted_counter Function has Memory Leak — CryptoLibCWE-401 7.5 -2025-03-17
CVE-2025-29909 CryptoLib's Crypto_TC_ApplySecurity() Has a Heap Buffer Overflow Vulnerability — CryptoLibCWE-191 9.8 -2025-03-17

本页汇总了 NASA 厂商截至目前公开的全部 34 条 CVE 漏洞。每条漏洞均包含 CVSS 评分、CWE 弱点分类、受影响产品与参考链接，并附带 AI 生成的中文分析以便快速判断风险。