« Volver al listado

CVE-2026-43988

Estado: AplazadaAlta (7.5)—

Vanetza is an open-source implementation of the ETSI C-ITS protocol suite. In 26.02 and earlier, a denial-of-service vulnerability was identified in the ASN.1/OER parsing pipeline of Vanetza. When processing malformed network packets containing corrupted ASN.1/OER structures (e.g., invalid length fields or malformed certificate encoding), the ASN.1 wrapper (asn1c_wrapper.cpp) raises a std::runtime_error. This exception is not caught at the parsing boundary and propagates to std::terminate, resulting in process termination. This vulnerability is fixed with commit 62dfe58a8342512b6e1947d75821402ada524f1a.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

🎯 Técnicas ATT&CK

Cómo se explota esta vulnerabilidad y qué consigue el atacante, en el lenguaje de MITRE ATT&CK.

Vulnerabilidad remota (AV:N, PR:N, UI:N) en parser de red; envío de paquetes ASN.1/OER malformados causa crash por excepción no capturada, logrando DoS de aplicación.

Inferido por nuestro agente de análisis a partir de la descripción oficial, el vector CVSS y la CWE, y comprobado por un supervisor. Puede contener errores.

🛡️ Mitigaciones ATT&CK que cubren estas técnicas

Filter Network TrafficVulnerability ScanningPrivileged Account ManagementNetwork SegmentationLimit Access to Resource Over NetworkApplication Isolation and Sandboxing

Tecnologías afectadas (1)

⚠ Inferidas por IA a partir de la descripción — NVD aún no ha analizado esta CVE; no son CPE verificados.

Vanetza — VanetzaAI

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2026-43988",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2026-43988",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "yes"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2026-05-27T13:03:22.385833Z"
        }
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Secondary",
        "source": "security-advisories@github.com",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 7.5,
          "attackVector": "NETWORK",
          "baseSeverity": "HIGH",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
          "integrityImpact": "NONE",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "NONE"
        },
        "impactScore": 3.6,
        "exploitabilityScore": 3.9
      }
    ]
  },
  "affected": [
    {
      "source": "security-advisories@github.com",
      "affectedData": [
        {
          "vendor": "riebl",
          "product": "vanetza",
          "versions": [
            {
              "status": "affected",
              "version": "< 62dfe58a8342512b6e1947d75821402ada524f1a"
            },
            {
              "status": "affected",
              "version": "<= 26.02"
            }
          ]
        }
      ]
    }
  ],
  "published": "2026-05-26T22:16:42.303",
  "references": [
    {
      "url": "https://github.com/riebl/vanetza/commit/62dfe58a8342512b6e1947d75821402ada524f1a",
      "source": "security-advisories@github.com"
    },
    {
      "url": "https://github.com/riebl/vanetza/security/advisories/GHSA-j6cj-rp87-mfrx",
      "source": "security-advisories@github.com"
    },
    {
      "url": "https://github.com/riebl/vanetza/security/advisories/GHSA-j6cj-rp87-mfrx",
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
    }
  ],
  "vulnStatus": "Deferred",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "security-advisories@github.com",
      "description": [
        {
          "lang": "en",
          "value": "CWE-248"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Vanetza is an open-source implementation of the ETSI C-ITS protocol suite. In 26.02 and earlier, a denial-of-service vulnerability was identified in the ASN.1/OER parsing pipeline of Vanetza. When processing malformed network packets containing corrupted ASN.1/OER structures (e.g., invalid length fields or malformed certificate encoding), the ASN.1 wrapper (asn1c_wrapper.cpp) raises a std::runtime_error. This exception is not caught at the parsing boundary and propagates to std::terminate, resulting in process termination. This vulnerability is fixed with commit 62dfe58a8342512b6e1947d75821402ada524f1a."
    },
    {
      "lang": "es",
      "value": "Vanetza es una implementación de código abierto de la suite de protocolos ETSI C-ITS. En la versión 26.02 y anteriores, se identificó una vulnerabilidad de denegación de servicio en la cadena de procesamiento (pipeline) de análisis ASN.1/OER de Vanetza. Al procesar paquetes de red malformados que contienen estructuras ASN.1/OER corruptas (p. ej., campos de longitud no válidos o codificación de certificado malformada), el 'wrapper' ASN.1 (asn1c_wrapper.cpp) lanza un std::runtime_error. Esta excepción no es capturada en el límite de análisis y se propaga a std::terminate, lo que resulta en la terminación del proceso. Esta vulnerabilidad se corrige con el 'commit' 62dfe58a8342512b6e1947d75821402ada524f1a."
    }
  ],
  "lastModified": "2026-07-24T11:10:00.170",
  "sourceIdentifier": "security-advisories@github.com"
}