A flaw was found in libmodbus. A heap-based buffer overflow in modbusreceivemsg.

References:

https://github.com/stephane/libmodbus/issues/614

libmodbus v3.1.6 was discovered to contain a heap overflow via the modbusmappingfree() function.

An invalid pointer in the modbusreceive() function of libmodbus v3.1.6 allows attackers to cause a Denial of Service (DoS) via a crafted message sent to the unit-test-server.

libmodbus v3.1.6 was discovered to contain a use-after-free via the ctx->backend pointer. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted message sent to the unit-test-server.

Stack-based Buffer Overflow vulnerability in libmodbus v3.1.10 allows to overflow the buffer allocated for the Modbus response if the function tries to reply to a Modbus request with an unexpected length.

A Denial of Service (DoS) vulnerability exists in the receive loop of libmodbus 3.1.12 when running on Windows. The issue stems from improper timeout management during network read operations.

A flaw was found in libmodbus. A heap-based buffer overflow in modbusreceivemsg.

References:

https://github.com/stephane/libmodbus/issues/614