CVE-2019-6136: Undefined Security Weakness

An issue has been found in libIEC61850 v1.3.1. EthernetsetProtocolFilter in hal/ethernet/linux/ethernetlinux.c has a SEGV, as demonstrated by svsubscriberexample.c and svsubscriber.c...

PT-2019-17971 · Unknown +1 · Libiec61850 +1

Name of the Vulnerable Software and Affected Versions: libIEC61850 version 1.3.1 Description: A memory leak issue has been identified. The Memory malloc function in hal/memory/lib memory.c leaks memory when called from Asn1PrimitiveValue create in mms/asn1/asn1 ber primitive value.c. This issue i...

PT-2019-17972 · Unknown +1 · Libiec61850 +1

Name of the Vulnerable Software and Affected Versions: libIEC61850 version 1.3.1 Description: A problem has been identified in the Ethernet setProtocolFilter function, located in the hal/ethernet/linux/ethernet linux.c file, which can cause a segmentation fault SEGV. This issue is demonstrated by...

CVE-2019-6135: Missing Release of Memory after Effective Lifetime

An issue has been found in libIEC61850 v1.3.1. Memorymalloc in hal/memory/libmemory.c has a memory leak when called from Asn1PrimitiveValuecreate in mms/asn1/asn1berprimitivevalue.c, as demonstrated by goosepublisherexample.c and iec6185092LEexample.c...

CVE-2019-6138: Missing Release of Memory after Effective Lifetime

An issue has been found in libIEC61850 v1.3.1. Memorymalloc and Memorycalloc in hal/memory/libmemory.c have memory leaks when called from mms/isomms/common/mmsvalue.c, server/mmsmapping/mmsmapping.c, and server/mmsmapping/mmssv.c via common/stringutilities.c, as demonstrated by...

libIEC61850 Buffer Overflow Vulnerability

libIEC61850 is an open source library for IEC 61850. A heap buffer overflow vulnerability exists in the 'BerEncoderencodeOctetString' function in the mms/asn1/berencoder.c file in libIEC61850 version 1.3, which can be exploited by an attacker to cause a denial of service or code execution...

libIEC61850 Denial of Service Vulnerability

libIEC61850 is an open source library for IEC 61850. A denial of service vulnerability exists in the 'EthernetsendPacket' function of the ethernetbsd.c file in libIEC61850 version 1.3, which can be exploited by an attacker to cause a denial of service null pointer backreference...

Unspecified vulnerability in libIEC61850 (CNVD-2019-43857)

libIEC61850 is an open source library for IEC 61850. A security vulnerability exists in the 'EthernetreceivePacket' function of the ethernetbsd.c file in libIEC61850 version 1.3. No details of the vulnerability are provided at this time...

Heap overflow

An issue has been found in libIEC61850 v1.3. It is a heap-based buffer overflow in BerEncoderencodeOctetString in mms/asn1/berencoder.c. This is exploitable even after CVE-2018-18834 has been patched, with a different dataSetValue sequence than the CVE-2018-18834 attack vector...

CVE-2018-19185

An issue has been found in libIEC61850 v1.3. It is a heap-based buffer overflow in BerEncoderencodeOctetString in mms/asn1/berencoder.c. This is exploitable even after CVE-2018-18834 has been patched, with a different dataSetValue sequence than the CVE-2018-18834 attack vector...

CVE-2018-19185

An issue has been found in libIEC61850 v1.3. It is a heap-based buffer overflow in BerEncoderencodeOctetString in mms/asn1/berencoder.c. This is exploitable even after CVE-2018-18834 has been patched, with a different dataSetValue sequence than the CVE-2018-18834 attack vector...

CVE-2018-19185

An issue has been found in libIEC61850 v1.3. It is a heap-based buffer overflow in BerEncoderencodeOctetString in mms/asn1/berencoder.c. This is exploitable even after CVE-2018-18834 has been patched, with a different dataSetValue sequence than the CVE-2018-18834 attack vector...

CVE-2018-19185

CVE-2018-19185 concerns libIEC61850 v1.3 with a heap-based buffer overflow in BerEncoder_encodeOctetString (mms/asn1/ber_encoder.c). The issue, also noted for CVE-2018-18834, arises in the same function and is exploitable even after the earlier patch, via a different dataSetValue sequence. Connec...

CVE-2018-19185

An issue has been found in libIEC61850 v1.3. It is a heap-based buffer overflow in BerEncoderencodeOctetString in mms/asn1/berencoder.c. This is exploitable even after CVE-2018-18834 has been patched, with a different dataSetValue sequence than the CVE-2018-18834 attack vector...

PT-2018-14846

Name of the Vulnerable Software and Affected Versions libIEC61850 version 1.3 Description A heap-based buffer overflow issue has been discovered in the BerEncoder encodeOctetString function, located in mms/asn1/ber encoder.c. This issue is exploitable and can be triggered with a different data...

CVE-2018-19185: Out-of-bounds Write

An issue has been found in libIEC61850 v1.3. It is a heap-based buffer overflow in BerEncoderencodeOctetString in mms/asn1/berencoder.c. This is exploitable even after CVE-2018-18834 has been patched, with a different dataSetValue sequence than the CVE-2018-18834 attack vector...

CVE-2018-19122

An issue has been found in libIEC61850 v1.3. It is a NULL pointer dereference in EthernetsendPacket in ethernetbsd.c...

CVE-2018-19121

An issue has been found in libIEC61850 v1.3. It is a SEGV in EthernetreceivePacket in ethernetbsd.c...

CVE-2018-19122

An issue has been found in libIEC61850 v1.3. It is a NULL pointer dereference in EthernetsendPacket in ethernetbsd.c...

CVE-2018-19121

An issue has been found in libIEC61850 v1.3. It is a SEGV in EthernetreceivePacket in ethernetbsd.c...