CVE-2026-121508
MediumCVSS 5.9Summary
Use-After-Free in µD3TN BPv6 Fragmenter Cleanup allows an unauthenticated remote attacker to cause DoS on allocation failure.
Risk Assessment
An unauthenticated remote attacker can crash the service, causing system unavailability.
Recommendation
Update µD3TN to a patched version. Consider restricting network access to the service to trusted sources.
Other vulnerabilities in µD3TN
See all- CVE-2026-121513High
Off-by-one heap overflow in the µD3TN v0.15.1 SPP parser allows an unauthenticated remote attacker to reliably cause DoS.
- CVE-2026-121512High
Memory leak with amplification in µD3TN BPv6 EID reference handling allows an unauthenticated remote attacker to cause DoS.
- CVE-2026-121511High
Heap out-of-bounds read in the µD3TN BPv6/BPv7 fragmenter allows a local attacker to read memory and reliably cause DoS.
- CVE-2026-121510High
Remote unauthenticated heap out-of-bounds write in the µD3TN BPv6 administrative record parser allows an unauthenticated remote attacker to reliably cause DoS.
- CVE-2026-121507Medium
Double Free in µD3TN BPv6 Fragmenter Block Duplication allows an unauthenticated remote attacker to cause DoS on allocation failure.
- CVE-2026-93652High
Integer overflow in µD3TN v0.15.0 TCPCLv3 handshake causes heap overflow, allowing remote attackers to reliably cause DoS.
Original NVD description (English source)
Use-After-Free in µD3TN BPv6 Fragmenter Cleanup allows Unauthenticated Remote Attacker to Cause DoS on Allocation Failure
Vulnerability data from NVD (NIST) · CISA KEV · EPSS