CVE-2024-36845: Medium severity libmodbus libmodbus vulnerability
An invalid pointer in the modbusreceive() function of libmodbus v3.1.6 allows attackers to cause a Denial of Service (DoS) via a crafted message sent to the unit-test-server.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/libmodbusto a version that resolves this vulnerability.Fixed in 3.1.6-2.1 - Upgrade
Upgrade
debian/libmodbusto a version that resolves this vulnerability.Fixed in 3.1.6-2.1Fixed in 3.1.6-2.1+deb12u1Fixed in 3.1.11-2Fixed in 3.2.0-1
Event History
Frequently Asked Questions
What is the severity of CVE-2024-36845?
CVE-2024-36845 is classified as a high-severity vulnerability due to its potential to cause Denial of Service (DoS).
How do I fix CVE-2024-36845?
To mitigate CVE-2024-36845, update to the latest version of libmodbus beyond v3.1.6 where the issue is resolved.
What type of vulnerability is CVE-2024-36845?
CVE-2024-36845 is a vulnerability resulting from an invalid pointer in the modbus_receive() function.
Which versions of libmodbus are affected by CVE-2024-36845?
CVE-2024-36845 affects libmodbus version v3.1.6 and potentially earlier versions.
What impact does CVE-2024-36845 have on systems?
CVE-2024-36845 can allow attackers to send crafted messages that cause a Denial of Service (DoS) to the affected system.