ION-DTN (3.6.2 Through 4.2.0) - CraftedSignal Threat Feedhttps://feed.craftedsignal.io/products/ion-dtn-3.6.2-through-4.2.0/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioMon, 09 Nov 2026 19:51:44 +0000https://feed.craftedsignal.io/favicon-32x32.pngCraftedSignal Threat Feedhttps://feed.craftedsignal.io/3232https://feed.craftedsignal.io/favicon.svgNASA JPL ION-DTN: Heap-based buffer overflow in Network Management daemon (CVE-2026-123999)https://feed.craftedsignal.io/briefs/2026-11-nasa-jpl-ion-dtn-overflow/Mon, 09 Nov 2026 19:51:44 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-11-nasa-jpl-ion-dtn-overflow/NASA JPL ION-DTN versions 3.6.2 through 4.2.0 contain a heap-based buffer overflow in the Network Management daemon (nm_mgr) that can cause a denial of service.<p>NASA JPL ION-DTN versions 3.6.2 through 4.2.0 contain a heap-based buffer overflow in the Network Management daemon (nm_mgr) string-formatting logic. A malicious or misconfigured agent can trigger an out-of-bounds write via deeply nested AMP payloads that exceed fixed-size buffer allocations through unbounded strcat operations. Attackers can transmit oversized AMP reports, tables, or macros over the UDP CLA/AMP path, or trigger the flaw locally via interactive UI rendering, to crash nm_mgr and cause a denial of service, halting telemetry collection and operator visibility.</p> lowadvisory