Heap overflow

In libIEC61850 before version 1.4.3, when a message with COTP message length field with value 4 is received an integer underflow will happen leading to heap buffer overflow. This can cause an application crash or on some platforms even the execution of remote code. If your application is used in...

CVE-2020-15158 Heap buffer overflow in libIEC61850

In libIEC61850 before version 1.4.3, when a message with COTP message length field with value 4 is received an integer underflow will happen leading to heap buffer overflow. This can cause an application crash or on some platforms even the execution of remote code. If your application is used in...

CVE-2020-15158

CVE-2020-15158 affects libIEC61850 up to version 1.4.x; when receiving a COTP message with length

PT-2020-14234 · Unknown +1 · Libiec61850 +1

Name of the Vulnerable Software and Affected Versions: libIEC61850 versions prior to 1.4.3 Description: The issue occurs when a message with a COTP message length field with a value less than 4 is received, leading to an integer underflow and potentially a heap buffer overflow. This can cause an...

CVE-2020-7054

MmsValuedecodeMmsData in mms/isomms/server/mmsaccessresult.c in libIEC61850 through 1.4.0 has a heap-based buffer overflow when parsing the MMSBITSTRING data type...

CVE-2020-7054

MmsValuedecodeMmsData in mms/isomms/server/mmsaccessresult.c in libIEC61850 through 1.4.0 has a heap-based buffer overflow when parsing the MMSBITSTRING data type...

Heap overflow

MmsValuedecodeMmsData in mms/isomms/server/mmsaccessresult.c in libIEC61850 through 1.4.0 has a heap-based buffer overflow when parsing the MMSBITSTRING data type...

CVE-2020-7054

MmsValuedecodeMmsData in mms/isomms/server/mmsaccessresult.c in libIEC61850 through 1.4.0 has a heap-based buffer overflow when parsing the MMSBITSTRING data type...

CVE-2020-7054

CVE-2020-7054 affects libIEC61850:1.4.x and earlier, where MmsValue_decodeMmsData in mms/iso_mms/server/mms_access_result.c can trigger a heap-based buffer overflow while parsing MMS_BIT_STRING. Impacted product family is libIEC61850, with NVD noting a CVSSv3.1 base score of 8.8 (NETWORK, HIGH im...

PT-2020-19361 · Unknown +1 · Libiec61850 +1

Name of the Vulnerable Software and Affected Versions: libIEC61850 versions prior to 1.4.1 Description: The issue arises from a heap-based buffer overflow in the MmsValue decodeMmsData function when parsing the MMS BIT STRING data type. This occurs in the mms/iso mms/server/mms access result.c fi...

libIEC61850 Buffer Overflow Vulnerability

libIEC61850 is an open source library for the IEC 61850 protocol. A buffer overflow vulnerability exists in the getNumberOfElements file in mms/isomms/server/mmsaccessresult.c in libIEC61850 version 1.4.0. The vulnerability stems from a network system or product performing operations in memory...

libIEC61850 Buffer Overflow Vulnerability

libIEC61850 is an open source library for the IEC 61850 protocol. A buffer overflow vulnerability exists in the 'MmsValuedecodeMmsData' function in the mms/isomms/server/mmsaccessresult.c file in libIEC61850 version 1.4.0. The vulnerability stems from a network system or product performing...

CVE-2019-19957

In libIEC61850 1.4.0, getNumberOfElements in mms/isomms/server/mmsaccessresult.c has an out-of-bounds read vulnerability, related to bufPos and elementLength...

CVE-2019-19958

In libIEC61850 1.4.0, StringUtilscreateStringFromBuffer in common/stringutilities.c has an integer signedness issue that could lead to an attempted excessive memory allocation and denial of service...

CVE-2019-19958

In libIEC61850 1.4.0, StringUtilscreateStringFromBuffer in common/stringutilities.c has an integer signedness issue that could lead to an attempted excessive memory allocation and denial of service...

CVE-2019-19957

In libIEC61850 1.4.0, getNumberOfElements in mms/isomms/server/mmsaccessresult.c has an out-of-bounds read vulnerability, related to bufPos and elementLength...

Out-of-bounds

In libIEC61850 1.4.0, getNumberOfElements in mms/isomms/server/mmsaccessresult.c has an out-of-bounds read vulnerability, related to bufPos and elementLength...

Integer overflow

In libIEC61850 1.4.0, StringUtilscreateStringFromBuffer in common/stringutilities.c has an integer signedness issue that could lead to an attempted excessive memory allocation and denial of service...

CVE-2019-19958

In CVE-2019-19958, the affected component is libIEC61850 1.4.0, specifically StringUtils_createStringFromBuffer in common/string_utilities.c. A signedness issue in integer handling could allow an under/over-approximation during buffer processing, potentially triggering an excessive memory allocat...

CVE-2019-19958

In libIEC61850 1.4.0, StringUtilscreateStringFromBuffer in common/stringutilities.c has an integer signedness issue that could lead to an attempted excessive memory allocation and denial of service...