CVE-2023-23205
https://notcve.org/view.php?id=CVE-2023-23205
An issue was discovered in lib60870 v2.3.2. There is a memory leak in lib60870/lib60870-C/examples/multi_client_server/multi_client_server.c. • https://github.com/mz-automation/lib60870/issues/132 • CWE-401: Missing Release of Memory after Effective Lifetime •
CVE-2021-45773
https://notcve.org/view.php?id=CVE-2021-45773
A NULL pointer dereference in CS104_IPAddress_setFromString at src/iec60870/cs104/cs104_slave.c of lib60870 commit 0d5e76e can lead to a segmentation fault or application crash. Una desreferencia del puntero NULL en la función CS104_IPAddress_setFromString en el archivo src/iec60870/cs104/cs104_slave.c de lib60870 commit 0d5e76e, puede conllevar a un fallo de segmentación o un fallo de la aplicación • https://github.com/mz-automation/lib60870/issues/100 • CWE-476: NULL Pointer Dereference •
CVE-2021-21778
https://notcve.org/view.php?id=CVE-2021-21778
A denial of service vulnerability exists in the ASDU message processing functionality of MZ Automation GmbH lib60870.NET 2.2.0. A specially crafted network request can lead to loss of communications. An attacker can send an unauthenticated message to trigger this vulnerability. Se presenta una vulnerabilidad de denegación de servicio en la funcionalidad message processing de ASDU de MZ Automation GmbH lib60870.NET versión 2.2.0. Una petición de red especialmente diseñada puede conllevar a una pérdida de comunicaciones. • https://talosintelligence.com/vulnerability_reports/TALOS-2021-1236 • CWE-617: Reachable Assertion •
CVE-2019-6137
https://notcve.org/view.php?id=CVE-2019-6137
An issue was discovered in lib60870 2.1.1. LinkLayer_setAddress in link_layer/link_layer.c has a NULL pointer dereference. Se ha descubierto un problema en lib60870 2.1.1. LinkLayer_setAddress en link_layer/link_layer.c tiene una desreferencia de puntero NULL. • https://github.com/mz-automation/lib60870/issues/39 • CWE-476: NULL Pointer Dereference •