CyberRota Analysis
AI-GeneratedION-DTN versions prior to 4.2.0 are susceptible to an out-of-bounds read vulnerability in the decodeSdnv function, which can be exploited by unauthenticated remote attackers. By sending truncated SDNV values via UDP datagrams, attackers can access memory beyond allocated boundaries, potentially exposing sensitive information. Organizations using affected versions should prioritize patching to mitigate the risk of unauthorized data access.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
ION-DTN versions before 4.2.0 contain an out-of-bounds read vulnerability in the decodeSdnv function that allows unauthenticated remote attackers to read memory by sending truncated SDNV values. Attackers can send a UDP datagram to the LTP link service input port with a truncated SDNV to trigger reads up to nine bytes past buffer boundaries and underflow byte counters.