CVE-2024-36845

2024-05-3120:15:10

Debian Security Bug Tracker

security-tracker.debian.org

modbus

vulnerability

denial of service

crafted message

unix

4.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

6.6 Medium

AI Score

Confidence

High

0 Low

EPSS

Percentile

0.0%

JSON

An invalid pointer in the modbus_receive() function of libmodbus v3.1.6 allows attackers to cause a Denial of Service (DoS) via a crafted message sent to the unit-test-server.

OSVersionArchitecturePackageVersionFilename
Debian12alllibmodbus<= 3.1.6-2.1libmodbus_3.1.6-2.1_all.deb
Debian11alllibmodbus<= 3.1.6-2libmodbus_3.1.6-2_all.deb
Debian999alllibmodbus<= 3.1.10-2libmodbus_3.1.10-2_all.deb
Debian13alllibmodbus<= 3.1.10-2libmodbus_3.1.10-2_all.deb

OS	Version	Architecture	Package	Version	Filename
Debian	12	all	libmodbus	<= 3.1.6-2.1	libmodbus_3.1.6-2.1_all.deb
Debian	11	all	libmodbus	<= 3.1.6-2	libmodbus_3.1.6-2_all.deb
Debian	999	all	libmodbus	<= 3.1.10-2	libmodbus_3.1.10-2_all.deb
Debian	13	all	libmodbus	<= 3.1.10-2	libmodbus_3.1.10-2_all.deb