libmodbus: CVE-2024-34244

Debian Bug report logs - #1071633
libmodbus: CVE-2024-34244

Reply or subscribe to this bug.

Toggle useless messages

Message #5 received at submit@bugs.debian.org (full text, mbox, reply):

From: Moritz Mühlenhoff <jmm@inutil.org>

To: submit@bugs.debian.org

Subject: libmodbus: CVE-2024-34244

Date: Wed, 22 May 2024 17:20:50 +0200

Source: libmodbus
X-Debbugs-CC: team@security.debian.org
Severity: important
Tags: security

Hi,

The following vulnerability was published for libmodbus.

CVE-2024-34244[0]:
| libmodbus v3.1.10 is vulnerable to Buffer Overflow via the
| modbus_write_bits function. This issue can be triggered when the
| function is fed with specially crafted input, which leads to out-of-
| bounds read and can potentially cause a crash or other unintended
| behaviors.

https://github.com/stephane/libmodbus/issues/743


If you fix the vulnerability please also make sure to include the
CVE (Common Vulnerabilities & Exposures) id in your changelog entry.

For further information see:

[0] https://security-tracker.debian.org/tracker/CVE-2024-34244
    https://www.cve.org/CVERecord?id=CVE-2024-34244

Please adjust the affected versions in the BTS as needed.

Send a report that this bug log contains spam.