CVE-2019-14463
An issue was discovered in libmodbus before 3.0.7 and 3.1.x before 3.1 ...
Einstufung nach Quelle
Trivys eigenes Label ist CRITICAL. Kritisch laut NVD. Niedriger laut Ubuntu (mittel).
Beschreibung
An issue was discovered in libmodbus before 3.0.7 and 3.1.x before 3.1.5. There is an out-of-bounds read for the MODBUS_FC_WRITE_MULTIPLE_REGISTERS case, aka VD-1301.
Betroffene Pakete und behobene Versionen
| Quelle | Paket | Behoben in |
|---|---|---|
| debian 10 | libmodbus | 3.1.4-2+deb10u1 |
| debian 11 | libmodbus | 3.1.6-1 |
| debian 12 | libmodbus | 3.1.6-1 |
| debian 13 | libmodbus | 3.1.6-1 |
| debian 14 | libmodbus | 3.1.6-1 |
| debian 8 | libmodbus | kein Fix angegeben |
| debian 9 | libmodbus | 3.0.6-2+deb9u1 |
| echo | libmodbus | 3.1.6-1 |
| ubuntu 14.04-ESM | libmodbus | 3.0.5-1ubuntu0.1~esm1 |
| ubuntu 16.04-ESM | libmodbus | 3.0.6-1ubuntu0.1~esm1 |
| ubuntu 18.04 | libmodbus | 3.0.6-2+deb9u1build0.18.04.1 |
| ubuntu 18.04-ESM | libmodbus | 3.0.6-2+deb9u1build0.18.04.1 |
Referenzen
- https://github.com/stephane/libmodbus/commit/5ccdf5ef79d742640355d1132fa9e2abc7fbaefc
- https://libmodbus.org/2019/stable-and-development-releases/
- https://lists.debian.org/debian-lts-announce/2021/11/msg00020.html
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HAGHQFJTJCMYHW553OUWJ3YIJR6PJHB7/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PRAQZXGAZY6UGWZ6CD33QEFLL7AWW233/
- https://ubuntu.com/security/notices/USN-5173-1
- https://ubuntu.com/security/notices/USN-5173-2
- https://www.cve.org/CVERecord?id=CVE-2019-14463