PT-2019-18283 · Unknown+1 · Libiec61850+1
Arunm2110
·
Publicado
2019-01-23
·
Atualizado
2024-08-19
·
CVE-2019-6719
CVSS v3.1
7.5
Alta
| Vetor | AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
libIEC61850 version 1.3.1
Description
The issue is related to a use-after-free in the
getState function, located in the file mms/iso server/iso server.c. This is demonstrated by examples in server example goose.c and server example 61400 25.c.Recommendations
For libIEC61850 version 1.3.1, consider disabling the
getState function in iso server.c as a temporary workaround until a patch is available. Restrict access to the affected files to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.Exploit
Use After Free
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Alt Linux
Libiec61850