CVE-2026-93652
HighCVSS 7.5Exploitation Probability (EPSS)
Low risk25th percentile - higher than 25% of all known CVEs
Summary
Integer overflow in µD3TN v0.15.0 TCPCLv3 handshake causes heap overflow, allowing remote attackers to reliably cause DoS.
Risk Assessment
Risk: an attacker can reliably cause denial of service, leading to service unavailability.
Recommendation
Update µD3TN to a version newer than 0.15.0 that contains a fix for the integer overflow.
Other vulnerabilities in µD3TN
See all- CVE-2026-121513High
Off-by-one heap overflow in the µD3TN v0.15.1 SPP parser allows an unauthenticated remote attacker to reliably cause DoS.
- CVE-2026-121512High
Memory leak with amplification in µD3TN BPv6 EID reference handling allows an unauthenticated remote attacker to cause DoS.
- CVE-2026-121511High
Heap out-of-bounds read in the µD3TN BPv6/BPv7 fragmenter allows a local attacker to read memory and reliably cause DoS.
- CVE-2026-121510High
Remote unauthenticated heap out-of-bounds write in the µD3TN BPv6 administrative record parser allows an unauthenticated remote attacker to reliably cause DoS.
- CVE-2026-121508Medium
Use-After-Free in µD3TN BPv6 Fragmenter Cleanup allows an unauthenticated remote attacker to cause DoS on allocation failure.
- CVE-2026-121507Medium
Double Free in µD3TN BPv6 Fragmenter Block Duplication allows an unauthenticated remote attacker to cause DoS on allocation failure.
Original NVD description (English source)
Integer overflow in µD3TN v0.15.0 TCPCLv3 handshake causes heap overflow, allowing remote attackers to reliably cause DoS
Vulnerability data from NVD (NIST) · CISA KEV · EPSS