GCVE - cpe:2.3:a:mz-automation:libiec61850:1.3:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:mz-automation:libiec61850:1.3:*:*:*:*:*:*:*

part: a version: 1.3 update: *

Vendor	Mz Automation (`b012e76d-06f8-52ef-bc7f-aea0855a8c51`)
Product	Libiec61850 (`9cf5a81b-76f3-5849-b2cb-79c2cf39a6ba`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
`pkg:github/mz-automation/libiec61850`	purl2cpe	2026-06-01 10:11:36.882663

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2018-19185`	vulnerable	2026-06-08 05:11:15.445160	Details available An issue has been found in libIEC61850 v1.3. It is a heap-based buffer overflow in BerEncoder_encodeOctetString in mms/asn1/ber_encoder.c. This is exploitable even after CVE-2018-18834 has been patched, with a different dataSetValue sequence than the CVE-2018-18834 attack vector. Published: 2018-11-12T05:00:00.000Z Updated: 2024-08-05T11:30:04.028Z Open on db.gcve.eu Reference links https://github.com/fouzhe/security/tree/master/libiec61850#another-heap-buffer-overflow-in-function-berencoder_encodeoctetstring https://github.com/mz-automation/libiec61850/issues/87	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-19122`	vulnerable	2026-06-08 05:11:15.373757	Details available An issue has been found in libIEC61850 v1.3. It is a NULL pointer dereference in Ethernet_sendPacket in ethernet_bsd.c. Published: 2018-11-09T11:00:00.000Z Updated: 2024-08-05T11:30:03.866Z Open on db.gcve.eu Reference links https://github.com/fouzhe/security/tree/master/libiec61850#segv-in-function-ethernet_sendpacket https://github.com/mz-automation/libiec61850/issues/86	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-19121`	vulnerable	2026-06-08 05:11:15.373376	Details available An issue has been found in libIEC61850 v1.3. It is a SEGV in Ethernet_receivePacket in ethernet_bsd.c. Published: 2018-11-09T11:00:00.000Z Updated: 2024-08-05T11:30:04.076Z Open on db.gcve.eu Reference links https://github.com/fouzhe/security/tree/master/libiec61850#segv-in-function-ethernet_receivepacket https://github.com/mz-automation/libiec61850/issues/85	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-19093`	vulnerable	2026-06-08 05:11:15.346557	Details available An issue has been found in libIEC61850 v1.3. It is a SEGV in ControlObjectClient_setCommandTerminationHandler in client/client_control.c. NOTE: the software maintainer disputes this because it requires incorrect usage of the client_example_control program Published: 2018-11-07T19:00:00.000Z Updated: 2024-08-05T11:30:03.486Z Open on db.gcve.eu Reference links https://github.com/mz-automation/libiec61850/issues/84 https://github.com/fouzhe/security/tree/master/libiec61850#segv-in-function-controlobjectclient_setcommandterminationhandler	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-18957`	vulnerable	2026-06-08 05:11:15.019298	Details available An issue has been found in libIEC61850 v1.3. It is a stack-based buffer overflow in prepareGooseBuffer in goose/goose_publisher.c. Published: 2018-11-05T22:00:00.000Z Updated: 2024-08-05T11:23:08.557Z Open on db.gcve.eu Reference links https://www.exploit-db.com/exploits/45798/ https://github.com/mz-automation/libiec61850/issues/83	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-18937`	vulnerable	2026-06-08 05:11:14.977830	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-18834`	vulnerable	2026-06-08 05:11:14.808678	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.