ION-DTN · CVE-2026-123999 · Runtime
NO FIX YET · SEE WHAT TO DO
NASA JPL ION-DTN versions 3.6.2 through 4.2.0 have a heap buffer overflow in the nm_mgr network management daemon when it handles deeply nested AMP payloads. A malicious or misconfigured agent can send oversized AMP reports over UDP, crashing nm_mgr and halting telemetry and operator visibility.
first public Nov 7, 2026 · 1 source
Could this affect your app?
Free first check from your website. Connect your repo for the full answer.
Teams running ION-DTN, the delay-tolerant networking software used for space and remote links, where nm_mgr is started and reachable over the UDP CLA/AMP path or through its interactive UI. Hosts that do not run nm_mgr or that keep the AMP path off untrusted networks are less exposed. The sources do not state a default configuration.
Not affected if nm_mgr-not-running, version-outside-range
Who cares ion-dtn, nasa-jpl, nm_mgr, space-networking
3.6.2 through 4.2.0.nm_mgr daemon on hosts running ION-DTN and whether its UDP CLA/AMP path is reachable from other networks.4.2.0; the fixed version is not stated in the sources provided.NASA JPL ION-DTN 3.6.2 through 4.2.0 contains a heap-based buffer overflow in the Network Management daemon (nm_mgr) string-formatting logic that allows a malicious or misconfigured agent to trigger an out-of-bounds write by sending deeply nested AMP payloads that exceed fixed-size buffer allocations through unbounded strcat operations. Attackers can transmit oversized AMP reports, tables, or macros over the UDP CLA/AMP path or trigger the flaw locally via interactive UI rendering to crash nm_mgr and cause a denial of service halting telemetry collection and operator visibility.
This page as ·
Are you affected?
Tell InfraStack what you run. It checks this one, and every next one, against your stack.
Ask from here. InfraStack checks the affected versions against your stack and answers in your inbox.
InfraStack checks the affected versions against your stack and answers in Slack, with the evidence and the fix.
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.