CVE-2019-6138: High severity mz automation libiec61850 vulnerability

Published Jan 11, 2019

Updated

An issue has been found in libIEC61850 v1.3.1. Memorymalloc and Memorycalloc in hal/memory/libmemory.c have memory leaks when called from mms/isomms/common/mmsvalue.c, server/mmsmapping/mmsmapping.c, and server/mmsmapping/mmssv.c (via common/stringutilities.c), as demonstrated by iec6185092LEexample.c.

Affected Software

1 affected component

mz-automation libiec61850=1.3.1

Event History

Jan 11, 2019

CVE Published

via MITRE·05:00 PM

Data Sourced

via MITRE·05:00 PM

Description

Data Sourced

via NVD·05:29 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2019-6138?

CVE-2019-6138 has been classified as a medium severity vulnerability due to the potential for memory leaks.

How do I fix CVE-2019-6138?

To address CVE-2019-6138, it is recommended to upgrade to a patched version of libIEC61850 beyond 1.3.1.

What products are affected by CVE-2019-6138?

CVE-2019-6138 affects libIEC61850 version 1.3.1.

What are the implications of CVE-2019-6138?

The implications of CVE-2019-6138 include potential resource exhaustion due to memory leaks.

How can I determine if my system is vulnerable to CVE-2019-6138?

To determine if your system is vulnerable to CVE-2019-6138, check if you are using libIEC61850 version 1.3.1.