CVE-2018-18937

An issue has been found in libIEC61850 v1.3. It is a NULL pointer dereference in ClientDataSet_getValues in client/ied_connection.c.

Score

CVSS 3.0 7.5 High

Status

Modified - cve@mitre.org

Published

2018-11-05

Last modified

2024-08-05

Weaknesses

CWE-476

Affected products

• Libiec61850 (Mz-automation)

References

• https://github.com/fouzhe/security/tree/master/libiec61850#segv-in-function-clientdataset_getvalues
• https://github.com/mz-automation/libiec61850/issues/82