PT-2019-17971 · Unknown+1 · Libiec61850+1
CVE-2019-6135
·
Published
2019-01-11
·
Updated
2024-08-19
CVSS v3.1
7.5
High
| Vector | AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
libIEC61850 version 1.3.1
Description
A memory leak issue has been identified. The
Memory malloc function in hal/memory/lib memory.c leaks memory when called from Asn1PrimitiveValue create in mms/asn1/asn1 ber primitive value.c. This issue is demonstrated by examples such as goose publisher example.c and iec61850 9 2 LE example.c.Recommendations
For libIEC61850 version 1.3.1, consider applying a patch to fix the memory leak in the
Memory malloc function. As a temporary workaround, restrict the use of the Asn1PrimitiveValue create function to minimize the risk of exploitation.Exploit
Fix
Memory Leak
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Alt Linux
Libiec61850