CVE-2026-67978

Received Received - Intake

Denial of Service in NASA cFS via SBN UDP Interface

Publication date: 2026-08-03

Last updated on: 2026-08-04

Assigner: MITRE

Description

An issue in the SBN UDP interface of NASA cFS v7.0.1 allows attackers to cause a Denial of Service (DoS) via transmitting a crafted SBN frame.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-03

Last Modified

2026-08-04

Generated

2026-08-24

AI Q&A

2026-08-04

EPSS Evaluated

2026-08-22

NVD

CVE-2026-67978

EUVD

EUVD-2026-52505

Affected Vendors & Products

Vendor	Product	Version / Range
nasa	cfs	7.0.1

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-400	The product does not properly control the allocation and maintenance of a limited resource.
CWE-20	The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

Attack-Flow Graph

Executive Summary

This vulnerability is a Denial of Service (DoS) issue in the SBN UDP interface of NASA cFS v7.0.1. Attackers can exploit it by sending a specially crafted SBN frame, which causes the system to crash or become unavailable.

Detection Guidance

Detection of this vulnerability requires monitoring for unexpected SBN UDP traffic or malformed frames. Check network interfaces for unusual SBN protocol activity using packet capture tools like tcpdump or Wireshark. Inspect cFS logs for errors related to SBN frame parsing or DoS events.

Impact Analysis

If you use NASA cFS v7.0.1, this vulnerability could allow attackers to disrupt your system operations by causing a DoS. This may lead to service unavailability, data processing delays, or system crashes.

Compliance Impact

The vulnerability causes a Denial of Service (DoS) via crafted SBN frames in NASA cFS v7.0.1, which could disrupt system availability. This may impact compliance with standards requiring high availability, such as HIPAA for healthcare systems or GDPR for data processing continuity, by potentially leading to service unavailability.

Mitigation Strategies

Implement network monitoring to detect unusual SBN UDP traffic patterns. Restrict UDP port access to only trusted sources. Update NASA cFS to the latest patched version if available.

Hi! I’m here to help you understand CVE-2026-67978. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70