An issue has been found in libIEC61850 v1.3.1. There is a use-after-free in the getState function in mms/iso_server/iso_server.c, as demonstrated by examples/server_example_goose/server_example_goose.c and examples/server_example_61400_25/server_example_61400_25.c.
References
Link | Resource |
---|---|
https://github.com/mz-automation/libiec61850/issues/111 | Exploit Third Party Advisory |
Configurations
Information
Published : 2019-01-23 14:29
Updated : 2019-02-07 10:12
NVD link : CVE-2019-6719
Mitre link : CVE-2019-6719
JSON object : View
CWE
CWE-416
Use After Free
Products Affected
mz-automation
- libiec61850