libiec61850 1.3 - Stack Based Buffer Overflow

Exploit Title: libiec61850 1.3 - Stack Based Buffer Overflow Date: 2018-11-06 Exploit Author: Dhiraj Mishra Vendor Homepage: http://libiec61850.com/libiec61850/ Software Link: https://github.com/mz-automation/libiec61850 Version: 1.3 Tested on: Linux 4.15.0-38-generic CVE: CVE-2018-18957...

CVE-2018-18957

An issue has been found in libIEC61850 v1.3. It is a stack-based buffer overflow in prepareGooseBuffer in goose/goosepublisher.c...

Stack overflow

An issue has been found in libIEC61850 v1.3. It is a stack-based buffer overflow in prepareGooseBuffer in goose/goosepublisher.c...

CVE-2018-18957

An issue has been found in libIEC61850 v1.3. It is a stack-based buffer overflow in prepareGooseBuffer in goose/goosepublisher.c...

CVE-2018-18957

An issue has been found in libIEC61850 v1.3. It is a stack-based buffer overflow in prepareGooseBuffer in goose/goosepublisher.c...

CVE-2018-18957

CVE-2018-18957 affects libIEC61850 v1.3, with a stack-based overflow in prepareGooseBuffer (goose/goose_publisher.c). The CVSS v3.0 score is 9.8 (CRITICAL) with NETWORK attack vector and no privileges required; impacts Confidentiality/Integrity/Availability are HIGH. Public exploitation exists (e...

Null pointer dereference

An issue has been found in libIEC61850 v1.3. It is a NULL pointer dereference in ClientDataSetgetValues in client/iedconnection.c...

NULL Pointer Dereference

Overview Affected versions of this package are vulnerable to NULL Pointer Dereference. An issue has been found in libIEC61850 v1.3. It is a NULL pointer dereference in ClientDataSetgetValues in client/iedconnection.c. Remediation There is no fixed version for libiec61850. References - Github.com ...

CVE-2018-18937

An issue has been found in libIEC61850 v1.3. It is a NULL pointer dereference in ClientDataSetgetValues in client/iedconnection.c...

CVE-2018-18937

An issue has been found in libIEC61850 v1.3. It is a NULL pointer dereference in ClientDataSetgetValues in client/iedconnection.c...

CVE-2018-18937

Affects: libIEC61850 v1.3. The issue is a NULL pointer dereference in ClientDataSet_getValues (client/ied_connection.c), leading to denial of service. Public sources (CNVD/CNVD-2019-09612, NVD, OSV, etc.) describe the same root cause without listing additional exploit details. No fixed version is...

CVE-2018-18937

An issue has been found in libIEC61850 v1.3. It is a NULL pointer dereference in ClientDataSetgetValues in client/iedconnection.c...

libIEC61850 buffer overflow vulnerability (CNVD-2019-09613)

libIEC61850 is an open source GPLv3 implementation of the IEC 61850 client and server libraries. A heap buffer overflow vulnerability exists in BerEncoderencodeOctetString in mms/asn1/berencoder.c in libIEC61850 1.3, which can be exploited by an attacker to execute arbitrary code or cause a denia...

CVE-2018-18834

An issue has been found in libIEC61850 v1.3. It is a heap-based buffer overflow in BerEncoderencodeOctetString in mms/asn1/berencoder.c...

CVE-2018-18834

An issue has been found in libIEC61850 v1.3. It is a heap-based buffer overflow in BerEncoderencodeOctetString in mms/asn1/berencoder.c...

Heap overflow

An issue has been found in libIEC61850 v1.3. It is a heap-based buffer overflow in BerEncoderencodeOctetString in mms/asn1/berencoder.c...

CVE-2018-18834

An issue has been found in libIEC61850 v1.3. It is a heap-based buffer overflow in BerEncoderencodeOctetString in mms/asn1/berencoder.c...

CVE-2018-18834

CVE-2018-18834 affects libIEC61850 v1.3. It is a heap-based buffer overflow in BerEncoder_encodeOctetString (mms/asn1/ber_encoder.c). Impacted component: libIEC61850 1.3. Reported in multiple sources; CNVD/CVE records indicate potential arbitrary code execution or DoS. CVSS metrics from NVD: AV:N...