Heap-Based Buffer Overflow in Libmodbus Affects Multiple Platforms

CVE-2022-0367

What is CVE-2022-0367?

A heap-based buffer overflow vulnerability exists in the Libmodbus library in the function modbus_reply() located in src/modbus.c. This flaw may allow a remote attacker to exploit the system through specially crafted requests, leading to potential execution of arbitrary code or denial of service. It affects various products utilizing the Libmodbus version prior to 3.1.6. Users and administrators are advised to update to the latest version to mitigate risks associated with this vulnerability.

References