Skip to content
OpenAdvisories

Package · Ubuntu

lib60870

2 known vulnerabilities.

2 results · Clear filters · Feed

  • Medium 6.5

    MZ Automation lib60870 Out-of-bounds Read

    A crafted IEC 60870-5-104 I-frame with TypeID 104 (C_TS_NA_1) and an inflated object count causes TestCommand_getFromBuffer to read one byte past the end of the heap-allocated message buffer.

  • Medium 6.5

    MZ Automation lib60870 Out-of-bounds Read

    A crafted IEC 60870-5-104 I-frame with a declared object count exceeding what fits in the ASDU body causes InformationObject_ParseObjectAddress to read one byte past the end of the heap-allocated message buffer.