ION-DTN Out-of-Bounds Read in decodeSdnv Function

Executive Summary

CVE-2026-84484 is an out-of-bounds read vulnerability in ION-DTN versions before 4.2.0. It exists in the decodeSdnv function, which fails to validate SDNV (Self-Delimiting Numeric Values) length. Attackers can send a UDP datagram with a truncated SDNV to the LTP link service input port, causing the function to read up to nine bytes past the buffer boundary. This may lead to memory leaks or crashes.

Useful 0 Not Useful 0

Detection Guidance

To detect this vulnerability, monitor for crashes or memory corruption in ION-DTN processes handling LTP segments. Check logs for UDP datagrams sent to port 1113 containing truncated SDNV values. Use network monitoring tools like tcpdump or Wireshark to capture and inspect UDP traffic on port 1113 for malformed SDNV sequences.

Useful 0 Not Useful 0

Impact Analysis

This vulnerability allows unauthenticated remote attackers to read memory or crash the ION-DTN system by sending malformed UDP datagrams. It could lead to denial of service or potential information disclosure if exploited. Systems running affected versions are vulnerable until patched to 4.2.0.

Useful 0 Not Useful 0

Compliance Impact

This vulnerability does not directly affect compliance with GDPR or HIPAA as it is a technical memory read issue in ION-DTN's SDNV decoder. However, exploitation could lead to unauthorized memory access, potentially violating data confidentiality principles in GDPR or HIPAA if sensitive data is exposed. The primary impact is Denial of Service (DoS) via process crashes.

Useful 0 Not Useful 0

Mitigation Strategies

Upgrade ION-DTN to version 4.2.0 or later immediately. If upgrading is not possible, disable the UDP Link Service Input port (default 1113) or restrict network access to it. Implement network-level filtering to block malformed UDP datagrams containing truncated SDNV values.

Useful 0 Not Useful 0