Off-by-one Heap Overflow in µD3TN v0.15.1 SPP Parser allows Unauthenticated Remote Attacker to Reliably Cause DoS
Vendor
D3TN GmbH vulnerabilities
10 published CVES affecting D3TN GmbH, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).
- Total
- 10
- Critical
- 0
- High
- 8
- Medium
- 2
- Low
- 0
- Unscored
- 0
- CISA KEV
- 0
Products
Latest D3TN GmbH CVEs
Newest publication first
-
HighCVSS 7.5 EPSS 0.44%
-
HighCVSS 7.5 EPSS 0.45%
Memory Leak with Amplification in µD3TN BPv6 EID Reference Handling allows Unauthenticated Remote Attacker to Cause DoS
-
HighCVSS 7.1 EPSS 0.14%
Heap Out-of-Bounds Read in µD3TN BPv6/BPv7 Fragmenter allows Local Attacker to Read Memory and Reliably Cause DoS
-
HighCVSS 7.5 EPSS 0.45%
Remote Unauthenticated Heap Out-of-Bounds Write in µD3TN BPv6 Administrative Record Parser allows Unauthenticated Remote Attacker to Reliably Cause DoS
-
CVE-2026-121508 Use After Free in µD3TN
PublishedMediumCVSS 5.9 EPSS 0.38%Use-After-Free in µD3TN BPv6 Fragmenter Cleanup allows Unauthenticated Remote Attacker to Cause DoS on Allocation Failure
-
CVE-2026-121507 Double Free in µD3TN
PublishedMediumCVSS 5.9 EPSS 0.38%Double Free in µD3TN BPv6 Fragmenter Block Duplication allows Unauthenticated Remote Attacker to Cause DoS on Allocation Failure
-
HighCVSS 7.5 EPSS 0.55%
Integer overflow in µD3TN v0.15.0 TCPCLv3 handshake causes heap overflow, allowing remote attackers to reliably cause DoS
-
HighCVSS 7.5 EPSS 0.59%
NULL Pointer Dereference in µD3TN via non-singleton destination Endpoint Identifier allows remote attacker to reliably cause DoS
-
CVE-2024-12107 Double Free in µD3TN
PublishedHighCVSS 7.5 EPSS 0.52%Double-Free Vulnerability in uD3TN BPv7 Caused by Malformed Endpoint Identifier allows remote attacker to reliably cause DoS
-
HighCVSS 7.5 EPSS 0.44%
Reachable Assertion in BPv7 parser in µD3TN v0.14.0 allows attacker to disrupt service via malformed Extension Block
Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.