ION-DTN (< 4.2.0) - CraftedSignal Threat Feedhttps://feed.craftedsignal.io/products/ion-dtn--4.2.0/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioWed, 02 Sep 2026 03:11:04 +0000https://feed.craftedsignal.io/favicon-32x32.pngCraftedSignal Threat Feedhttps://feed.craftedsignal.io/3232https://feed.craftedsignal.io/favicon.svgOut-of-Bounds Read in ION-DTN decodeSdnv Functionhttps://feed.craftedsignal.io/briefs/2026-09-cve-2026-84484/Wed, 02 Sep 2026 03:11:04 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-09-cve-2026-84484/ION-DTN versions prior to 4.2.0 contain an out-of-bounds read vulnerability in the decodeSdnv function, allowing unauthenticated remote attackers to trigger unauthorized memory access via truncated SDNV values.ION-DTN versions before 4.2.0 are susceptible to an out-of-bounds read vulnerability located within the decodeSdnv function. This flaw allows an unauthenticated, remote attacker to gain unauthorized access to memory by transmitting specifically crafted, truncated Self-Delimiting Numeric Value (SDNV) data. The vulnerability is triggered when the LTP (Licklider Transmission Protocol) link service receives a UDP datagram containing an intentionally malformed SDNV. Successfully exploiting this issue allows an attacker to read up to nine bytes past existing buffer boundaries and can cause byte counter underflow, potentially leading to service disruption or information disclosure. The vulnerability is a significant concern for environments utilizing Delay-Tolerant Networking (DTN) architectures.

Attack Chain

  1. Attacker identifies a network segment with an exposed ION-DTN LTP link service input port.
  2. Attacker crafts a UDP datagram containing an intentionally truncated SDNV value.
  3. Attacker transmits the crafted UDP datagram to the target LTP link service.
  4. The ION-DTN service processes the incoming datagram via the decodeSdnv function.
  5. The decodeSdnv function encounters the truncated SDNV, failing to perform proper boundary validation.
  6. The system performs an out-of-bounds read, accessing up to nine bytes of unauthorized memory.
  7. The byte counter undergoes an underflow, potentially causing process instability or application crashes.

Impact

Successful exploitation of CVE-2026-84484 allows remote, unauthenticated attackers to read out-of-bounds memory. This can lead to the exposure of sensitive data stored in memory or cause service-wide instability through byte counter underflows. The impact is significant for mission-critical communication infrastructure relying on Delay-Tolerant Networking.

Recommendation

Prioritized, concrete actions for infrastructure and security teams:

  • Upgrade all instances of ION-DTN to version 4.2.0 or later immediately to address CVE-2026-84484.
  • Implement network-level access control lists (ACLs) to restrict access to LTP link service ports, ensuring only authorized communication partners can transmit data.
  • Monitor network traffic logs for anomalous UDP datagrams targeting ION-DTN LTP service ports, focusing on malformed or abnormally sized SDNV packets.
]]>lowadvisory