package/libiec61850: fix CVE-2020-15158
authorFabrice Fontaine <fontaine.fabrice@gmail.com>
Fri, 8 Jan 2021 18:19:53 +0000 (19:19 +0100)
committerYann E. MORIN <yann.morin.1998@free.fr>
Sat, 9 Jan 2021 22:34:20 +0000 (23:34 +0100)
commit3663d810ca04ddfc3dce616ffe28aad909e156ea
tree728294fec62f9d4b76a97b8b4f79a0f78260b4c5
parent160838abf8b0dc3291c75bdbbe2dbd5ae3af8685
package/libiec61850: fix CVE-2020-15158

In libIEC61850 before version 1.4.3, when a message with COTP message
length field with value < 4 is received an integer underflow will happen
leading to heap buffer overflow. This can cause an application crash or
on some platforms even the execution of remote code. If your application
is used in open networks or there are untrusted nodes in the network it
is highly recommend to apply the patch. This was patched with commit
033ab5b. Users of version 1.4.x should upgrade to version 1.4.3 when
available. As a workaround changes of commit 033ab5b can be applied to
older versions.

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
package/libiec61850/0003-COTP-fixed-possible-heap-buffer-overflow-when-handling-message.patch [new file with mode: 0644]
package/libiec61850/libiec61850.mk