An off‑by‑one heap overflow occurs in the µD3TN v0.15.1 Service‑Packet‑Protocol (SPP) parser. This out‑of‑bounds write allows an unauthenticated remote attacker to reliably trigger a denial‑of‑service condition in the affected process, causing it to crash or become unresponsive.

Affected is D3TN GmbH’s µD3TN product, specifically version 0.15.1. Relatively newer releases, starting at 0.15.2, include the correction that mitigates the overflow. No other versions are listed as impacted by the current advisory.

With a CVSS score of 7.5, the vulnerability is considered high severity. The exploitability parameter is not available, and the issue is not listed in the CISA Known Exploited Vulnerabilities catalog. Because the attack vector is remote and unauthenticated, an adversary can trigger the Denial of Service by sending a malformed packet to the vulnerable SPP parser without required authentication.