D3Tn
Monthly
Heap-based buffer overflow in the Space Packet Protocol (SPP) parser of µD3TN v0.15.1 allows an unauthenticated remote attacker to reliably crash the DTN node, a denial-of-service condition rated CVSS 3.1 7.5 (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H). The off-by-one out-of-bounds write corrupts heap memory and aborts the process; confidentiality, integrity, and code-execution impacts are not confirmed in the available sources. No public exploit was identified at time of analysis, and the CVE is not listed in CISA KEV.
Memory exhaustion through amplified BPv6 EID reference handling in µD3TN can let remote attackers degrade or crash a network-reachable node by sending crafted bundles, requiring no authentication or user interaction. The flaw is a CWE-401 memory leak affecting versions matched by the vendor CPE; the precise malformed EID reference is not described in the available sources, and no fixed version is listed. No public exploit identified at time of analysis and no CISA KEV entry is present, but the vendor work item and this_week priority warrant prompt triage for network-reachable BPv6 deployments.
Heap out-of-bounds read in µD3TN's BPv6/BPv7 fragmenter lets a local attacker with low privileges read process memory and reliably crash the bundle daemon (denial of service). A CVSS 3.1 vector of AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H (7.1, High) applies: the attacker must already hold a foothold on the host and be able to get input into the fragmentation code path, but no user interaction is needed, confidentiality and availability impacts are high, and integrity is unaffected. The CPE for d3tn_gmbh:µD3TN carries wildcard version components, so the vulnerable version range is not narrowed in the available data; no public exploit code and no CISA KEV entry were identified at time of analysis, and the only reference is the upstream GitLab work item 290.
An unauthenticated remote heap out-of-bounds write in µD3TN's Bundle Protocol version 6 (BPv6) administrative record parser lets a network attacker reliably crash or destabilize a node, with impact limited to availability (A:H, C:N, I:N) per the CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:N, 7.5). Affected are µD3TN deployments that actually receive and parse BPv6 administrative records and are reachable by the attacker; BPv7-only configurations fall outside the described parsing path. No public exploit code or confirmed active exploitation is identified in the available sources, and the issue carries a 'this_week' priority rather than an emergency rating.
µD3TN daemon crashes and denial of service can result from a use-after-free in the Bundle Protocol version 6 (BPv6) fragmenter cleanup path. The flaw is reachable by remote, unauthenticated attackers per the CVSS vector, but triggering it requires the node to be processing BPv6 bundles and a memory allocation to fail during cleanup, so reliable exploitation depends on memory pressure or resource constraints. No public exploit code has been identified at the time of analysis and active exploitation has not been confirmed; the CVSS 5.9 score reflects availability-only impact with high attack complexity.
Denial of service in µD3TN allows an unauthenticated, remote sender of BPv6 (Bundle Protocol version 6) traffic to crash the bundle node by driving the fragmenter's block-duplication code path into a double free, but only if a heap memory allocation fails at that exact point (CVSS 5.9, CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H, availability-only). Because that allocation-failure precondition is not attacker-controlled, practical exploitation generally requires first inducing memory pressure or exhaustion on the target node, which is why the vector carries AC:H. No public exploit code and no CISA KEV entry were identified at time of analysis, and the vuln.today priority is this-month remediation rather than emergency response.
Heap-based buffer overflow in the Space Packet Protocol (SPP) parser of µD3TN v0.15.1 allows an unauthenticated remote attacker to reliably crash the DTN node, a denial-of-service condition rated CVSS 3.1 7.5 (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H). The off-by-one out-of-bounds write corrupts heap memory and aborts the process; confidentiality, integrity, and code-execution impacts are not confirmed in the available sources. No public exploit was identified at time of analysis, and the CVE is not listed in CISA KEV.
Memory exhaustion through amplified BPv6 EID reference handling in µD3TN can let remote attackers degrade or crash a network-reachable node by sending crafted bundles, requiring no authentication or user interaction. The flaw is a CWE-401 memory leak affecting versions matched by the vendor CPE; the precise malformed EID reference is not described in the available sources, and no fixed version is listed. No public exploit identified at time of analysis and no CISA KEV entry is present, but the vendor work item and this_week priority warrant prompt triage for network-reachable BPv6 deployments.
Heap out-of-bounds read in µD3TN's BPv6/BPv7 fragmenter lets a local attacker with low privileges read process memory and reliably crash the bundle daemon (denial of service). A CVSS 3.1 vector of AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H (7.1, High) applies: the attacker must already hold a foothold on the host and be able to get input into the fragmentation code path, but no user interaction is needed, confidentiality and availability impacts are high, and integrity is unaffected. The CPE for d3tn_gmbh:µD3TN carries wildcard version components, so the vulnerable version range is not narrowed in the available data; no public exploit code and no CISA KEV entry were identified at time of analysis, and the only reference is the upstream GitLab work item 290.
An unauthenticated remote heap out-of-bounds write in µD3TN's Bundle Protocol version 6 (BPv6) administrative record parser lets a network attacker reliably crash or destabilize a node, with impact limited to availability (A:H, C:N, I:N) per the CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:N, 7.5). Affected are µD3TN deployments that actually receive and parse BPv6 administrative records and are reachable by the attacker; BPv7-only configurations fall outside the described parsing path. No public exploit code or confirmed active exploitation is identified in the available sources, and the issue carries a 'this_week' priority rather than an emergency rating.
µD3TN daemon crashes and denial of service can result from a use-after-free in the Bundle Protocol version 6 (BPv6) fragmenter cleanup path. The flaw is reachable by remote, unauthenticated attackers per the CVSS vector, but triggering it requires the node to be processing BPv6 bundles and a memory allocation to fail during cleanup, so reliable exploitation depends on memory pressure or resource constraints. No public exploit code has been identified at the time of analysis and active exploitation has not been confirmed; the CVSS 5.9 score reflects availability-only impact with high attack complexity.
Denial of service in µD3TN allows an unauthenticated, remote sender of BPv6 (Bundle Protocol version 6) traffic to crash the bundle node by driving the fragmenter's block-duplication code path into a double free, but only if a heap memory allocation fails at that exact point (CVSS 5.9, CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H, availability-only). Because that allocation-failure precondition is not attacker-controlled, practical exploitation generally requires first inducing memory pressure or exhaustion on the target node, which is why the vector carries AC:H. No public exploit code and no CISA KEV entry were identified at time of analysis, and the vuln.today priority is this-month remediation rather than emergency response.