Memory Leak Vulnerability in libIEC61850 Affects Mz-automation Products
CVE-2019-6138

7.5HIGH

Key Information:

Vendor

Mz-automation

Status
Libiec61850
Vendor
CVE Published:
11 January 2019

What is CVE-2019-6138?

A memory leak vulnerability has been identified in libIEC61850 version 1.3.1, occurring in the memory management functions (Memory_malloc and Memory_calloc). The issue arises when these functions are invoked from various components, specifically within the MMS (Manufacturing Message Specification) mapping and value processing modules. This vulnerability could lead to increased memory consumption over time, potentially exhausting system resources and impacting application performance. It is crucial for users of affected versions to apply patches or updates to mitigate the risks associated with this memory management flaw.

References

https://github.com/mz-automation/libiec61850/issues/103
x_refsource_MISC

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.