An issue has been found in libIEC61850 v1.3. It is a SEGV in Ethernet_receivePacket in ethernet_bsd.c.
Weakness
The product dereferences a pointer that it expects to be valid but is NULL.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Libiec61850 | Mz-automation | 1.3 (including) | 1.3 (including) |
Potential Mitigations
References
- https://github.com/fouzhe/security/tree/master/libiec61850#segv-in-function-ethernet_receivepacket
- https://github.com/mz-automation/libiec61850/issues/85
- https://github.com/fouzhe/security/tree/master/libiec61850#segv-in-function-ethernet_receivepacket
- https://github.com/mz-automation/libiec61850/issues/85