CVE-2022-0367
A heap-based buffer overflow flaw was found in libmodbus in function modbus_reply() in src/modbus.c.
- Score
- CVSS 3.1 7.8 High
- Status
- Modified - secalert@redhat.com
- Published
- 2022-08-29
- Last modified
- 2025-11-03
- Weaknesses
- CWE-119, CWE-787
Affected products
- Debian Linux (Debian)
- Extra Packages For Enterprise Linux (Fedoraproject)
- Fedora (Fedoraproject)
- Libmodbus (Libmodbus)
References
- https://bugzilla.redhat.com/show_bug.cgi?id=2045571
- https://github.com/stephane/libmodbus/commit/b4ef4c17d618eba0adccc4c7d9e9a1ef809fc9b6
- https://github.com/stephane/libmodbus/issues/614
- https://lists.debian.org/debian-lts-announce/2022/09/msg00007.html
- https://lists.debian.org/debian-lts-announce/2025/03/msg00010.html
