kronosnet vulnerabilities

In the ACL subsystem of kronosnet (versions <= 1.34), when configured for dynamic links without encryption, the validation trusts the link ID from packets. A remote unauthenticated attacker can spoof the link ID and bypass ACL, injecting arbitrary packets into the application layer.

In kronosnet (version <=1.34), the framework does not wipe sensitive memory after cryptographic configuration changes, leaving encryption keys in memory. A local attacker can retrieve them to decrypt cluster communications or inject malicious packets.

Vulnerability in the network packet de-fragmentation engine of kronosnet (versions <= 1.34). The reassembly code does not properly validate sequence numbers of fragments, allowing an attacker to send malformed packets. This can lead to out-of-bounds memory access or heap corruption, causing application crashes or system instability.