Lucene search

K
debianDebianDEBIAN:DLA-3098-1:07C25
HistorySep 04, 2022 - 9:56 p.m.

[SECURITY] [DLA 3098-1] libmodbus security update

2022-09-0421:56:18
lists.debian.org
14
debian lts
libmodbus
buffer overflow
denial of service
memory corruption
cve-2022-0367

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

7.7 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

26.0%


Debian LTS Advisory DLA-3098-1 [email protected]
https://www.debian.org/lts/security/ Markus Koschany
September 04, 2022 https://wiki.debian.org/LTS

Package : libmodbus
Version : 3.1.4-2+deb10u2
CVE ID : CVE-2022-0367

A heap-based buffer overflow flaw was found in libmodbus, a library for the
Modbus protocol, which can be abused for a denial of service attack or
memory corruption.

For Debian 10 buster, this problem has been fixed in version
3.1.4-2+deb10u2.

We recommend that you upgrade your libmodbus packages.

For the detailed security status of libmodbus please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/libmodbus

Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS
Attachment:
signature.asc
Description: This is a digitally signed message part

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

7.7 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

26.0%