CVE-2026-84484: ION-DTN before 4.2.0 Out-of-Bounds Read via decodeSdnv
ION-DTN versions before 4.2.0 contain an out-of-bounds read vulnerability in the decodeSdnv function that allows unauthenticated remote attackers to read memory by sending truncated SDNV values. Attackers can send a UDP datagram to the LTP link service input port with a truncated SDNV to trigger reads up to nine bytes past buffer boundaries and underflow byte counters.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
ION-DTNto a version that resolves this vulnerability.Fixed in 4.2.0 - Compensating control
Restrict network access to the LTP link service input port so unauthenticated remote attackers cannot send UDP datagrams with truncated SDNV values.
Event History
Frequently Asked Questions
Which deployments are exposed to remote exploitation?
ION-DTN deployments before 4.2.0 are exposed if an attacker can send UDP datagrams to the LTP link service input port. No authentication or user interaction is required.
What malformed input triggers the issue?
An attacker sends a UDP datagram containing a truncated SDNV value to the LTP link service input port. Processing it through decodeSdnv can read up to nine bytes beyond the buffer boundary and underflow byte counters.
What should be prioritized for remediation?
Upgrade ION-DTN to version 4.2.0 or later. If upgrading cannot happen immediately, restrict network access to the LTP link service input port so untrusted systems cannot send UDP datagrams to it.