PT-2018-14814 · Unknown · Libiec61850

Fouzhe · Published 2018-11-09 · Updated 2018-12-07 · CVE-2018-19121

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

Name of the Vulnerable Software and Affected Versions libIEC61850 version 1.3

Description A issue has been found in the software, which is a SEGV in the Ethernet receivePacket function located in the ethernet bsd.c file.

Recommendations For libIEC61850 version 1.3, consider restricting access to the Ethernet receivePacket function in ethernet bsd.c to minimize the risk of exploitation until a patch is available.

Exploit

Fix

NULL Pointer Dereference

Weakness Enumeration

CWE-476

Related Identifiers

CVE-2018-19121

Affected Products

Libiec61850

References · 4

• 🔥 https://github.com/mz-automation/libiec61850/issues/85 · Exploit
• 🔥 https://github.com/fouzhe/security/tree/master/libiec61850#segv-in-function-ethernet_receivepacket · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2018-19121 · Security Note
• https://osv.dev/vulnerability/CVE-2018-19121 · Vendor Advisory