CVE-2019-16510

libIEC61850 through 1.3.3 has a use-after-free in MmsServerwaitReady in mms/isomms/server/mmsserver.c, as demonstrated by serverexamplegoose...

CVE-2019-16510

The CVE-2019-16510 issue concerns libIEC61850 where a use-after-free in MmsServer_waitReady (mms/iso_mms/server/mms_server.c) is described for the library lineage leading up to 1.3.3, per Red Hat’s advisory. Affected software appears to be MZ Automation libIEC61850 and related references in PT Se...

CVE-2019-1010300

mz-automation libiec61850 1.3.2 1.3.1 1.3.0 is affected by: Buffer Overflow. The impact is: Software crash. The component is: serverexamplecomplexarray. The attack vector is: Send a specific MMS protocol packet...

CVE-2019-1010300

mz-automation libiec61850 1.3.2 1.3.1 1.3.0 is affected by: Buffer Overflow. The impact is: Software crash. The component is: serverexamplecomplexarray. The attack vector is: Send a specific MMS protocol packet...

Buffer overflow

mz-automation libiec61850 1.3.2 1.3.1 1.3.0 is affected by: Buffer Overflow. The impact is: Software crash. The component is: serverexamplecomplexarray. The attack vector is: Send a specific MMS protocol packet...

CVE-2019-1010300

mz-automation libiec61850 1.3.2 1.3.1 1.3.0 is affected by: Buffer Overflow. The impact is: Software crash. The component is: serverexamplecomplexarray. The attack vector is: Send a specific MMS protocol packet...

CVE-2019-1010300

CVE-2019-1010300 affects mz-automation libiec61850 1.3.0–1.3.2; vulnerability is a buffer overflow in server_example_complex_array that can cause a software crash. Attack vector is sending a specific MMS protocol packet. NVD metrics show CVSS v3.0 base score 7.5 (HIGH), network attack vector, low...

libIEC61850 Memory Misreference Vulnerability

libIEC61850 is an open source GPLv3 implementation of the IEC 61850 client and server libraries. A memory misreference vulnerability exists in the getState function in mms/isoserver/isoserver.c in libIEC61850 1.3.1. An attacker could exploit this vulnerability to cause a denial of service...

CVE-2019-6719

An issue has been found in libIEC61850 v1.3.1. There is a use-after-free in the getState function in mms/isoserver/isoserver.c, as demonstrated by examples/serverexamplegoose/serverexamplegoose.c and examples/serverexample6140025/serverexample6140025.c...

Design/Logic Flaw

An issue has been found in libIEC61850 v1.3.1. There is a use-after-free in the getState function in mms/isoserver/isoserver.c, as demonstrated by examples/serverexamplegoose/serverexamplegoose.c and examples/serverexample6140025/serverexample6140025.c...

CVE-2019-6719

An issue has been found in libIEC61850 v1.3.1. There is a use-after-free in the getState function in mms/isoserver/isoserver.c, as demonstrated by examples/serverexamplegoose/serverexamplegoose.c and examples/serverexample6140025/serverexample6140025.c...

CVE-2019-6719

An issue has been found in libIEC61850 v1.3.1. There is a use-after-free in the getState function in mms/isoserver/isoserver.c, as demonstrated by examples/serverexamplegoose/serverexamplegoose.c and examples/serverexample6140025/serverexample6140025.c...

CVE-2019-6719

CVE-2019-6719 concerns libIEC61850 v1.3.1, where a use-after-free occurs in the getState function within mms/iso_server/iso_server.c. This is demonstrated by the examples/server_example_goose/server_example_goose.c and examples/server_example_61400_25/server_example_61400_25.c. The NVD entry list...

libIEC61850 Buffer Overflow Vulnerability (CNVD-2019-43853)

libIEC61850 is an open source library for IEC 61850. A security vulnerability exists in the 'EthernetsetProtocolFilter' function in the hal/ethernet/linux/ethernetlinux.c file in libIEC61850 version 1.3.1. An attacker could exploit this vulnerability to cause a segment error...

Design/Logic Flaw

An issue has been found in libIEC61850 v1.3.1. Memorymalloc in hal/memory/libmemory.c has a memory leak when called from Asn1PrimitiveValuecreate in mms/asn1/asn1berprimitivevalue.c, as demonstrated by goosepublisherexample.c and iec6185092LEexample.c...

CVE-2019-6136

An issue has been found in libIEC61850 v1.3.1. EthernetsetProtocolFilter in hal/ethernet/linux/ethernetlinux.c has a SEGV, as demonstrated by svsubscriberexample.c and svsubscriber.c...

CVE-2019-6138

An issue has been found in libIEC61850 v1.3.1. Memorymalloc and Memorycalloc in hal/memory/libmemory.c have memory leaks when called from mms/isomms/common/mmsvalue.c, server/mmsmapping/mmsmapping.c, and server/mmsmapping/mmssv.c via common/stringutilities.c, as demonstrated by...

Design/Logic Flaw

An issue has been found in libIEC61850 v1.3.1. EthernetsetProtocolFilter in hal/ethernet/linux/ethernetlinux.c has a SEGV, as demonstrated by svsubscriberexample.c and svsubscriber.c...

Code injection

An issue has been found in libIEC61850 v1.3.1. Memorymalloc and Memorycalloc in hal/memory/libmemory.c have memory leaks when called from mms/isomms/common/mmsvalue.c, server/mmsmapping/mmsmapping.c, and server/mmsmapping/mmssv.c via common/stringutilities.c, as demonstrated by...

CVE-2019-6135

An issue has been found in libIEC61850 v1.3.1. Memorymalloc in hal/memory/libmemory.c has a memory leak when called from Asn1PrimitiveValuecreate in mms/asn1/asn1berprimitivevalue.c, as demonstrated by goosepublisherexample.c and iec6185092LEexample.c...