11 matches found
libIEC61850 'BerDecoder_decodeUint32' function buffer overflow vulnerability
libIEC61850 is an open source library for the IEC 61850 protocol. A buffer overflow vulnerability exists in the 'BerDecoderdecodeUint32' function in the mms/asn1/berdecode.c file in libIEC61850 version 1.4.0. The vulnerability stems from a networked system or product performing operations in memo...
CVE-2019-19944
In libIEC61850 1.4.0, BerDecoderdecodeUint32 in mms/asn1/berdecode.c has an out-of-bounds read, related to intLen and bufPos...
Out-of-bounds
In libIEC61850 1.4.0, BerDecoderdecodeUint32 in mms/asn1/berdecode.c has an out-of-bounds read, related to intLen and bufPos...
CVE-2019-19944: Out-of-bounds Read
In libIEC61850 1.4.0, BerDecoderdecodeUint32 in mms/asn1/berdecode.c has an out-of-bounds read, related to intLen and bufPos...
CVE-2019-6135: Missing Release of Memory after Effective Lifetime
An issue has been found in libIEC61850 v1.3.1. Memorymalloc in hal/memory/libmemory.c has a memory leak when called from Asn1PrimitiveValuecreate in mms/asn1/asn1berprimitivevalue.c, as demonstrated by goosepublisherexample.c and iec6185092LEexample.c...
libIEC61850 Buffer Overflow Vulnerability
libIEC61850 is an open source library for IEC 61850. A heap buffer overflow vulnerability exists in the 'BerEncoderencodeOctetString' function in the mms/asn1/berencoder.c file in libIEC61850 version 1.3, which can be exploited by an attacker to cause a denial of service or code execution...
Heap overflow
An issue has been found in libIEC61850 v1.3. It is a heap-based buffer overflow in BerEncoderencodeOctetString in mms/asn1/berencoder.c. This is exploitable even after CVE-2018-18834 has been patched, with a different dataSetValue sequence than the CVE-2018-18834 attack vector...
CVE-2018-19185
An issue has been found in libIEC61850 v1.3. It is a heap-based buffer overflow in BerEncoderencodeOctetString in mms/asn1/berencoder.c. This is exploitable even after CVE-2018-18834 has been patched, with a different dataSetValue sequence than the CVE-2018-18834 attack vector...
CVE-2018-19185: Out-of-bounds Write
An issue has been found in libIEC61850 v1.3. It is a heap-based buffer overflow in BerEncoderencodeOctetString in mms/asn1/berencoder.c. This is exploitable even after CVE-2018-18834 has been patched, with a different dataSetValue sequence than the CVE-2018-18834 attack vector...
