Segmentation Fault in libIEC61850 Ethernet Processing
CVE-2018-19121

4.3MEDIUM

Key Information:

Vendor

Mz-automation

Status
Libiec61850
Vendor
CVE Published:
9 November 2018

What is CVE-2018-19121?

An issue has been identified in libIEC61850 version 1.3, where a segmentation fault occurs in the Ethernet_receivePacket function within ethernet_bsd.c. This vulnerability reveals a flaw in handling Ethernet packets, which could potentially be exploited to disrupt the functionality of applications relying on this library. Developers utilizing libIEC61850 should examine their implementation to mitigate any risks associated with this fault.

References

https://github.com/fouzhe/security/tree/master/libiec6185...
x_refsource_MISC
https://github.com/mz-automation/libiec61850/issues/85
x_refsource_MISC

CVSS V3.1

Score:
4.3
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.