CVE-2019-6136

Name of the Vulnerable Software and Affected Versions libIEC61850 version 1.3.1

Description A problem has been identified in the Ethernet setProtocolFilter function, located in the hal/ethernet/linux/ethernet linux.c file, which can cause a segmentation fault (SEGV). This issue is demonstrated by the example files sv subscriber example.c and sv subscriber.c.

Recommendations For libIEC61850 version 1.3.1, consider restricting access to the Ethernet setProtocolFilter function until a patch is available. As a temporary workaround, avoid using the Ethernet setProtocolFilter function to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this issue.