PT-2019-17972 · Unknown+1 · Libiec61850+1

Published 2019-01-11 · Updated 2024-08-19 · CVE-2019-6136

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions libIEC61850 version 1.3.1

Description A problem has been identified in the Ethernet setProtocolFilter function, located in the hal/ethernet/linux/ethernet linux.c file, which can cause a segmentation fault (SEGV). This issue is demonstrated by the example files sv subscriber example.c and sv subscriber.c.

Recommendations For libIEC61850 version 1.3.1, consider restricting access to the Ethernet setProtocolFilter function until a patch is available. As a temporary workaround, avoid using the Ethernet setProtocolFilter function to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this issue.

Exploit

Fix

Related Identifiers

ALT-PU-2020-3467

ALT-PU-2020-3487

ALT-PU-2024-11160

CVE-2019-6136

Affected Products

Alt Linux

Libiec61850

References · 3

• 🔥 https://github.com/mz-automation/libiec61850/issues/105 · Exploit
• https://osv.dev/vulnerability/CVE-2019-6136 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-6136 · Security Note