D3TN Ud3tn up to 0.15.1 BPv6-BPv7 Fragmenter out-of-bounds

Summaryinfo

A vulnerability identified as problematic has been detected in D3TN Ud3tn up to 0.15.1. Affected by this issue is some unknown functionality of the component BPv6-BPv7 Fragmenter. Performing a manipulation results in out-of-bounds. This vulnerability is cataloged as CVE-2026-121511. The attack must be initiated from a local position. There is no exploit available. You should upgrade the affected component.

Detailsinfo

A vulnerability classified as problematic has been found in D3TN Ud3tn up to 0.15.1. This affects some unknown functionality of the component BPv6-BPv7 Fragmenter. The manipulation with an unknown input leads to a out-of-bounds vulnerability. CWE is classifying the issue as CWE-125. The product reads data past the end, or before the beginning, of the intended buffer. This is going to have an impact on confidentiality, integrity, and availability. The summary by CVE is:

Heap Out-of-Bounds Read in µD3TN BPv6/BPv7 Fragmenter allows Local Attacker to Read Memory and Reliably Cause DoS

It is possible to read the advisory at gitlab.com. This vulnerability is uniquely identified as CVE-2026-121511 since 11/03/2026. The exploitability is told to be easy. Attacking locally is a requirement. The technical details are unknown and an exploit is not publicly available.

Upgrading to version 0.15.2 eliminates this vulnerability.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Productinfo

Vendor

• D3TN

Name

• Ud3tn

Version

• 0.15.0
• 0.15.1

CPE 2.3info

• 🔒
• 🔒

CPE 2.2info

• 🔒
• 🔒

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Discussion