thiagoralves / OpenPLC_v3

OpenPLC Runtime version 3
1.06k stars 432 forks source link

outdated libmodbus version #174

Open larsj-blip opened 2 years ago

larsj-blip commented 2 years ago

Libmodbus v1.3.4 contains out of bounds read, update libmodbus to latest patch (v1.3.7). https://nvd.nist.gov/vuln/detail/CVE-2019-14463 https://nvd.nist.gov/vuln/detail/CVE-2019-14462 issue is fixed in v. 3.1.6: https://github.com/stephane/libmodbus/commit/6f915d4215c06be3c719761423d9b5e8aa3cb820