36 matches found
CVE-2023-23205
An issue was discovered in lib60870 v2.3.2. There is a memory leak in lib60870/lib60870-C/examples/multiclientserver/multiclientserver.c...
CVE-2021-45773
A NULL pointer dereference in CS104IPAddresssetFromString at src/iec60870/cs104/cs104slave.c of lib60870 commit 0d5e76e can lead to a segmentation fault or application crash...
Null pointer dereference
A NULL pointer dereference in CS104IPAddresssetFromString at src/iec60870/cs104/cs104slave.c of lib60870 commit 0d5e76e can lead to a segmentation fault or application crash...
CVE-2021-45773
A NULL pointer dereference in CS104IPAddresssetFromString at src/iec60870/cs104/cs104slave.c of lib60870 commit 0d5e76e can lead to a segmentation fault or application crash...
CVE-2021-45773
CVE-2021-45773 affects the lib60870 library (IEC 60870-5 CS104 path) due to a NULL pointer dereference in CS104_IPAddress_setFromString within src/iec60870/cs104/cs104_slave.c. This root cause can cause a segmentation fault or application crash. The CVE details here are supported by multiple conn...
lib60870代码问题漏洞
lib60870 is a C language library based on the IEC60870-5 protocol. The library provides support for CompanionStandard 101 CS101 and 104 CS104 of the IEC family of standards for remote control applications IEC60870-5 and is commonly used in power systems for communication between central station...
CVE-2021-21778
A denial of service vulnerability exists in the ASDU message processing functionality of MZ Automation GmbH lib60870.NET 2.2.0. A specially crafted network request can lead to loss of communications. An attacker can send an unauthenticated message to trigger this vulnerability...
CVE-2021-21778
A denial of service vulnerability exists in the ASDU message processing functionality of MZ Automation GmbH lib60870.NET 2.2.0. A specially crafted network request can lead to loss of communications. An attacker can send an unauthenticated message to trigger this vulnerability...
CVE-2021-21778
A denial of service vulnerability exists in the ASDU message processing functionality of MZ Automation GmbH lib60870.NET 2.2.0. A specially crafted network request can lead to loss of communications. An attacker can send an unauthenticated message to trigger this vulnerability...
CVE-2021-21778
CVE-2021-21778 affects MZ Automation GmbH’s lib60870.NET 2.2.0. The denial-of-service arises in the ASDU message processing path when handling IEC60870-5-104 messages. According to TALOS, the vulnerable code checks if (msgLength - bufPos) is large enough for the ASDU header, but if this check fai...
MZ Automation GmbH lib60870.NET ASDU message processing denial of service vulnerability
Summary A denial of service vulnerability exists in the ASDU message processing functionality of MZ Automation GmbH lib60870.NET 2.2.0. A specially crafted network request can lead to loss of communications. An attacker can send an unauthenticated message to trigger this vulnerability. Tested...
Null pointer dereference
An issue was discovered in lib60870 2.1.1. LinkLayersetAddress in linklayer/linklayer.c has a NULL pointer dereference...
CVE-2019-6137
An issue was discovered in lib60870 2.1.1. LinkLayersetAddress in linklayer/linklayer.c has a NULL pointer dereference...
CVE-2019-6137
An issue was discovered in lib60870 2.1.1. LinkLayersetAddress in linklayer/linklayer.c has a NULL pointer dereference...
CVE-2019-6137
CVE-2019-6137 affects lib60870 2.1.1. The issue is a NULL pointer dereference in LinkLayer_setAddress within link_layer/link_layer.c. The vulnerability’s impact and exact exploit scenario are described in the vulnerability references, but the connected documents do not provide concrete remediatio...