Alerts This Week
Warning Icon 1 1,003
Alerts This Week
Warning Icon 1 1,003

Debian LTS: DLA-4084-1: libmodbus Security Advisory Updates

debian lts
Calendar Grey March 11, 2025
Dist Debian Esm H88
Security Advisory for Debian LTS addressing libmodbus vulnerabilities affecting versions 3.1.6-2+deb11u1, with critical updates.
Two separate issues where identified and have now been adressed in libmodbus
Topics%20covered

Topics Covered

security advisory moderate security issue buffer overflow software update Debian libmodbus

Summary

CVE-2022-0367

A heap-based buffer overflow flaw was found in libmodbus in function
modbus_reply() in src/modbus.c.

CVE-2024-10918

Stack-based Buffer Overflow vulnerability in libmodbus v3.1.10 allows to
overflow the buffer allocated for the Modbus response if the function tries
to reply to a Modbus request with an unexpected length.

CVE-2024-36843

This is a duplicate of CVE-2022-0367

CVE-2024-36844

This is a duplicate of CVE-2022-0367

CVE-2024-36845

This is a duplicate of CVE-2022-0367

For Debian 11 bullseye, these problems have been fixed in version
3.1.6-2+deb11u1.

We recommend that you upgrade your libmodbus packages.

For the detailed security status of libmodbus please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/source-package/libmodbus

Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS


Severity
critical
Lowest
Low
Medium
High
Critical

Package: libmodbus
Version: 3.1.6-2+deb11u1
CVE ID: CVE-2022-0367 CVE-2024-10918
Debian Bug: 1074422

Topics%20covered

Topics Covered

security advisory moderate security issue buffer overflow software update Debian libmodbus

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here