ZeroHour

CVE-2019-6135

PoC ×2
CVSS 3.0
7.5 high
EPSS
2%p75
Published
()
Modified
Description

An issue has been found in libIEC61850 v1.3.1. Memory_malloc in hal/memory/lib_memory.c has a memory leak when called from Asn1PrimitiveValue_create in mms/asn1/asn1_ber_primitive_value.c, as demonstrated by goose_publisher_example.c and iec61850_9_2_LE_example.c.

Vendors
mz-automation
Products
libiec61850
Weakness
CWE-401
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

In the news

No ingested article mentions this CVE yet.