258 matches found
CVE-2019-6138
An issue has been found in libIEC61850 v1.3.1. Memorymalloc and Memorycalloc in hal/memory/libmemory.c have memory leaks when called from mms/isomms/common/mmsvalue.c, server/mmsmapping/mmsmapping.c, and server/mmsmapping/mmssv.c via common/stringutilities.c, as demonstrated by...
CVE-2019-6135
An issue has been found in libIEC61850 v1.3.1. Memorymalloc in hal/memory/libmemory.c has a memory leak when called from Asn1PrimitiveValuecreate in mms/asn1/asn1berprimitivevalue.c, as demonstrated by goosepublisherexample.c and iec6185092LEexample.c...
CVE-2019-6136
An issue has been found in libIEC61850 v1.3.1. EthernetsetProtocolFilter in hal/ethernet/linux/ethernetlinux.c has a SEGV, as demonstrated by svsubscriberexample.c and svsubscriber.c...
CVE-2019-6138
An issue has been found in libIEC61850 v1.3.1. Memorymalloc and Memorycalloc in hal/memory/libmemory.c have memory leaks when called from mms/isomms/common/mmsvalue.c, server/mmsmapping/mmsmapping.c, and server/mmsmapping/mmssv.c via common/stringutilities.c, as demonstrated by...
CVE-2019-6138
CVE-2019-6138 affects libIEC61850 v1.3.1; memory leaks occur in hal/memory/lib_memory.c when invoked from mms_value.c, server/mms_mapping/mms_mapping.c, and server/mms_mapping/mms_sv.c (via common/string_utilities.c), as shown by iec61850_9_2_LE_example.c. Connected PT/PTSECURITY entries describe...
CVE-2019-6136
Technical details about CVE-2019-6136 (affected product, impact, and fix) are not provided in the connected documents. Monitor for updates from official sources.
CVE-2019-6136
An issue has been found in libIEC61850 v1.3.1. EthernetsetProtocolFilter in hal/ethernet/linux/ethernetlinux.c has a SEGV, as demonstrated by svsubscriberexample.c and svsubscriber.c...
CVE-2019-6135
An issue has been found in libIEC61850 v1.3.1. Memorymalloc in hal/memory/libmemory.c has a memory leak when called from Asn1PrimitiveValuecreate in mms/asn1/asn1berprimitivevalue.c, as demonstrated by goosepublisherexample.c and iec6185092LEexample.c...
CVE-2019-6135
In CVE-2019-6135, the issue is a memory leak in libIEC61850 v1.3.1. The leak occurs in hal/memory/lib_memory.c within Memory_malloc when invoked from Asn1PrimitiveValue_create in mms/asn1/asn1_ber_primitive_value.c, as demonstrated by goose_publisher_example.c and iec61850_9_2_LE_example.c. The p...
PT-2019-17972 · Unknown +1 · Libiec61850 +1
Name of the Vulnerable Software and Affected Versions: libIEC61850 version 1.3.1 Description: A problem has been identified in the Ethernet setProtocolFilter function, located in the hal/ethernet/linux/ethernet linux.c file, which can cause a segmentation fault SEGV. This issue is demonstrated by...
PT-2019-17971 · Unknown +1 · Libiec61850 +1
Name of the Vulnerable Software and Affected Versions: libIEC61850 version 1.3.1 Description: A memory leak issue has been identified. The Memory malloc function in hal/memory/lib memory.c leaks memory when called from Asn1PrimitiveValue create in mms/asn1/asn1 ber primitive value.c. This issue i...
libIEC61850 Buffer Overflow Vulnerability
libIEC61850 is an open source library for IEC 61850. A heap buffer overflow vulnerability exists in the 'BerEncoderencodeOctetString' function in the mms/asn1/berencoder.c file in libIEC61850 version 1.3, which can be exploited by an attacker to cause a denial of service or code execution...
libIEC61850 Denial of Service Vulnerability
libIEC61850 is an open source library for IEC 61850. A denial of service vulnerability exists in the 'EthernetsendPacket' function of the ethernetbsd.c file in libIEC61850 version 1.3, which can be exploited by an attacker to cause a denial of service null pointer backreference...
Unspecified vulnerability in libIEC61850 (CNVD-2019-43857)
libIEC61850 is an open source library for IEC 61850. A security vulnerability exists in the 'EthernetreceivePacket' function of the ethernetbsd.c file in libIEC61850 version 1.3. No details of the vulnerability are provided at this time...
Heap overflow
An issue has been found in libIEC61850 v1.3. It is a heap-based buffer overflow in BerEncoderencodeOctetString in mms/asn1/berencoder.c. This is exploitable even after CVE-2018-18834 has been patched, with a different dataSetValue sequence than the CVE-2018-18834 attack vector...
CVE-2018-19185
An issue has been found in libIEC61850 v1.3. It is a heap-based buffer overflow in BerEncoderencodeOctetString in mms/asn1/berencoder.c. This is exploitable even after CVE-2018-18834 has been patched, with a different dataSetValue sequence than the CVE-2018-18834 attack vector...
CVE-2018-19185
An issue has been found in libIEC61850 v1.3. It is a heap-based buffer overflow in BerEncoderencodeOctetString in mms/asn1/berencoder.c. This is exploitable even after CVE-2018-18834 has been patched, with a different dataSetValue sequence than the CVE-2018-18834 attack vector...
CVE-2018-19185
An issue has been found in libIEC61850 v1.3. It is a heap-based buffer overflow in BerEncoderencodeOctetString in mms/asn1/berencoder.c. This is exploitable even after CVE-2018-18834 has been patched, with a different dataSetValue sequence than the CVE-2018-18834 attack vector...
CVE-2018-19185
CVE-2018-19185 concerns libIEC61850 v1.3 with a heap-based buffer overflow in BerEncoder_encodeOctetString (mms/asn1/ber_encoder.c). The issue, also noted for CVE-2018-18834, arises in the same function and is exploitable even after the earlier patch, via a different dataSetValue sequence. Connec...