Junglewise Threat Intelligence

CVE-2024-12107: PYSEC-2024-300 - Double-Free Vulnerability in uD3TN BPv7 Caused by Malformed Endpoint Identifier allows remote attacker to reliably cause DoS

CVE-2024-12107 · Severity: low · CVSS 3.1 · Published 2024-12-04

Technologies: pyd3tn (PyPI). Vendors: PyPI.

Executive brief

Double-Free Vulnerability in uD3TN BPv7 Caused by Malformed Endpoint Identifier allows remote attacker to reliably cause DoS

Affected products

PyPI pyd3tn

Related threats

PYSEC-2025-182 - NULL Pointer Dereference in µD3TN via non-singleton destination Endpoint Identifier allows remote attacker to reliably cause DoS
PYSEC-2024-299 - Reachable Assertion in BPv7 parser in µD3TN v0.14.0 allows attacker to disrupt service via malformed Extension Block