CVE-2019-1010073

The CVE-2019-1010073 entry is merged into CVE-2018-10238 and should reference that identifier. Connected records show a buffer overflow in skarg BACnet Protocol Stack bacserv (versions 0.9.1 and 0.8.5) due to missing packet-size validation in BVLC forward NPDU handling (bvlc_bdt_forward_npdu -&gt...

CVE-2018-10238

bvlc.c in skarg BACnet Protocol Stack bacserv 0.9.1 and 0.8.5 is affected by a Buffer Overflow because of a lack of packet-size validation. The affected component is bacserv BACnet/IP BVLC forwarded NPDU. The function bvlcbdtforwardnpdu calls bvlcencodeforwardednpdu which copies the content from...

CVE-2018-10238

CVE-2018-10238 affects skarg BACnet Protocol Stack bacserv (versions 0.9.1 and 0.8.5). The root cause is a Buffer Overflow in BVLC forwarded NPDU handling (bvlc_bdt_forward_npdu calls bvlc_encode_forwarded_npdu and copies request data into a local stack frame, clobbering the canary) due to missin...