libiec61850:fuzz_mms_encode: Heap-buffer-overflow in BerEncoder_encodeBitString

Project: https://github.com/mz-automation/libiec61850.git Detailed Report: https://oss-fuzz.com/testcase?key=4812125491757056 Project: libiec61850 Fuzzing Engine: libFuzzer Fuzz Target: fuzzmmsencode Job Type: libfuzzerasanlibiec61850 Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 1...

CVE-2024-36702

libiec61850 v1.5 was discovered to contain a heap overflow via the BerEncoderencodeLength function at /asn1/berencoder.c...

Heap-based Buffer Overflow

Overview Affected versions of this package are vulnerable to Heap-based Buffer Overflow via the BerEncoderencodeLength function. Remediation There is no fixed version for libiec61850. References - GitHub Issue...

PT-2024-27134 · Unknown · Libiec61850

Name of the Vulnerable Software and Affected Versions: libiec61850 version 1.5 Description: A heap overflow issue was discovered in the BerEncoder encodeLength function located at /asn1/ber encoder.c. This issue affects the libiec61850 library. Recommendations: For libiec61850 version 1.5, consid...

PT-2018-14846

Name of the Vulnerable Software and Affected Versions libIEC61850 version 1.3 Description A heap-based buffer overflow issue has been discovered in the BerEncoder encodeOctetString function, located in mms/asn1/ber encoder.c. This issue is exploitable and can be triggered with a different data...

PT-2018-14682

Name of the Vulnerable Software and Affected Versions libIEC61850 version 1.3 Description A heap-based buffer overflow issue has been identified in the BerEncoder encodeOctetString function, located in the mms/asn1/ber encoder.c file. Recommendations For libIEC61850 version 1.3, consider...